Extracting prog: 7m5.317036478s Minimizing prog: 1h58m36.02706555s Simplifying prog options: 10m7.82465187s Extracting C: 3m2.95042617s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-socket-sendto$inet6-syz_open_dev$dvb_frontend-prctl$PR_SET_MM_MAP-inotify_init-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c29121", 0x3f, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000166000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000018f000/0x2000)=nil, &(0x7f0000069000/0x2000)=nil, &(0x7f00001ba000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f000007a000/0x2000)=nil, &(0x7f000018b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) r4 = inotify_init() r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-socket-sendto$inet6-syz_open_dev$dvb_frontend-prctl$PR_SET_MM_MAP-inotify_init-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c29121", 0x3f, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000166000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000018f000/0x2000)=nil, &(0x7f0000069000/0x2000)=nil, &(0x7f00001ba000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f000007a000/0x2000)=nil, &(0x7f000018b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) r4 = inotify_init() r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-socket-sendto$inet6-syz_open_dev$dvb_frontend-prctl$PR_SET_MM_MAP-inotify_init-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c29121", 0x3f, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000166000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000018f000/0x2000)=nil, &(0x7f0000069000/0x2000)=nil, &(0x7f00001ba000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f000007a000/0x2000)=nil, &(0x7f000018b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) r4 = inotify_init() r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine single: successfully extracted reproducer found reproducer with 28 syscalls minimizing guilty program testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-socket-sendto$inet6-syz_open_dev$dvb_frontend-prctl$PR_SET_MM_MAP-inotify_init-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-syz_memcpy_off$KVM_EXIT_MMIO detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c29121", 0x3f, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000166000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000018f000/0x2000)=nil, &(0x7f0000069000/0x2000)=nil, &(0x7f00001ba000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f000007a000/0x2000)=nil, &(0x7f000018b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) inotify_init() r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-socket-sendto$inet6-syz_open_dev$dvb_frontend-prctl$PR_SET_MM_MAP-inotify_init-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c29121", 0x3f, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000166000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000018f000/0x2000)=nil, &(0x7f0000069000/0x2000)=nil, &(0x7f00001ba000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f000007a000/0x2000)=nil, &(0x7f000018b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) r4 = inotify_init() mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-socket-sendto$inet6-syz_open_dev$dvb_frontend-prctl$PR_SET_MM_MAP-inotify_init-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c29121", 0x3f, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000166000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000018f000/0x2000)=nil, &(0x7f0000069000/0x2000)=nil, &(0x7f00001ba000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f000007a000/0x2000)=nil, &(0x7f000018b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) r4 = inotify_init() r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-socket-sendto$inet6-syz_open_dev$dvb_frontend-prctl$PR_SET_MM_MAP-inotify_init-mmap$KVM_VCPU-userfaultfd-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c29121", 0x3f, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000166000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000018f000/0x2000)=nil, &(0x7f0000069000/0x2000)=nil, &(0x7f00001ba000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f000007a000/0x2000)=nil, &(0x7f000018b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) r4 = inotify_init() r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-socket-sendto$inet6-syz_open_dev$dvb_frontend-prctl$PR_SET_MM_MAP-inotify_init-mmap$KVM_VCPU-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c29121", 0x3f, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000166000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000018f000/0x2000)=nil, &(0x7f0000069000/0x2000)=nil, &(0x7f00001ba000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f000007a000/0x2000)=nil, &(0x7f000018b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) r4 = inotify_init() r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-socket-sendto$inet6-syz_open_dev$dvb_frontend-prctl$PR_SET_MM_MAP-inotify_init-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c29121", 0x3f, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000166000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000018f000/0x2000)=nil, &(0x7f0000069000/0x2000)=nil, &(0x7f00001ba000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f000007a000/0x2000)=nil, &(0x7f000018b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) r4 = inotify_init() r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-socket-sendto$inet6-syz_open_dev$dvb_frontend-prctl$PR_SET_MM_MAP-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c29121", 0x3f, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000166000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000018f000/0x2000)=nil, &(0x7f0000069000/0x2000)=nil, &(0x7f00001ba000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f000007a000/0x2000)=nil, &(0x7f000018b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-socket-sendto$inet6-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c29121", 0x3f, 0x0, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-socket-sendto$inet6-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c29121", 0x3f, 0x0, 0x0, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-sendmsg$nl_route-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-socket-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-preadv2-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-getpgid-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SET_MM_MAP-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-mmap-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-timer_settime-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-fcntl$lock-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMRRU-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-ioctl$PPPIOCNEWUNIT-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-openat$ppp-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-syz_emit_ethernet-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, 0x0, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{&(0x7f0000002000)=""/4104, 0x1008}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range program did not crash simplifying guilty program options testing program (duration=2m38.32610579s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine extracting C reproducer testing compiled C program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range program did not crash testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash validation run: crashed=false testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash validation run: crashed=false testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine validation run: crashed=true testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine validation run: crashed=true testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash validation run: crashed=false testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash validation run: crashed=false testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash validation run: crashed=false testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash validation run: crashed=false testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash validation run: crashed=false testing program (duration=2m38.32610579s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-openat$ppp-sendmsg$nl_generic-fcntl$lock-mprotect-prctl$PR_SET_MM_MAP-getpgid-preadv2-setresgid-getpid-sendmsg$nl_route-socket-syz_open_dev$dvb_frontend-mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-syz_memcpy_off$KVM_EXIT_MMIO-close_range detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpgid(0x0) preadv2(0xffffffffffffffff, &(0x7f0000005340)=[{0x0}], 0x1, 0x4, 0x1, 0x1c) setresgid(0xee00, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x402200) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: lost connection to test machine validation run: crashed=true reproducing took 2h49m21.66208411s repro crashed as (corrupted=false): final repro crashed as (corrupted=false):