Extracting prog: 3h47m51.726032592s Minimizing prog: 1h55m4.805362402s Simplifying prog options: 11m14.823882737s Extracting C: 4m44.114408025s Simplifying C: 0s extracting reproducer from 38 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-openat$kvm-ioctl$KVM_CREATE_VM-madvise-socket$inet_tcp-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_TCP_CONGESTION-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-sendmsg$NFT_BATCH-syz_open_procfs-read$eventfd-mkdirat-mount-openat-write-setsockopt$XDP_UMEM_REG-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN-setsockopt$inet6_tcp_TCP_ULP detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash single: failed to extract reproducer bisect: bisecting 38 programs with base timeout 30s testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 4, 7, 6, 4, 20, 20, 16, 12, 12, 24, 27, 10, 10, 25, 27, 28, 11, 30, 25, 6, 9, 22, 6, 28, 8, 24, 29, 30, 36, 30, 7, 8, 27, 4, 10, 6, 29] detailed listing: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0xb) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) executing program 2: r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000d020000005678d9aa897ecd85116307c5d0a47d7ca144c7b35308b4881164411af24bf778356788abff049511a925f9a13ba09e7899afdd710b4535879fe8b7fad390502ba6a25f92bb3419f4005593b305b93847c74aa9f6abeea873edb5ebf79fbe8a02caccc20354dbc3e700e5189025233103c5cc4d6c28b837ea18dc1e"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f0000000200)={0x40, 0xf, 0x9, {0x9, 0xe, "76c853d0e44bd6"}}, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) (rerun: 32) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f2258660f1bd80f01ba200003a8000064660fc7b000000f070fc72beaa500be00baf80c66b8a07e258066efbafc0c66b80b9f9c3966ef26650f01c8", 0x3c}], 0x1, 0x7d, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000088945b406d04b6088eca000000010902"], 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) executing program 2: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000008450c0b7600000000000109022400010000000009040000ff0300000009210400000122850009058103"], 0x0) syz_usb_connect$midi(0x3, 0x118, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x145, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x106, 0x1, 0x1, 0x7, 0xa0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0x2, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x6}, @ms_header={0x7, 0x24, 0x1, 0x10, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x3, 0x9, 0x2, [{0x7f, 0x5}, {0xe, 0xf3}], 0xd}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x7f, 0x4, [{0x8, 0x7}, {0xfe, 0x4}, {0x0, 0x8}, {0xc, 0x40}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x4000, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0xa0, 0x6, [{0x6, 0x80}, {0xf4, 0x7}, {0x7f, 0x7}, {0x84, 0x9}, {0x9}, {0x40, 0x28}], 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xb, 0x21}, @midi_out_jack={0x17, 0x24, 0x3, 0x2, 0x1, 0x8, [{0x7, 0x2}, {0x1, 0x1}, {0x9a, 0x1}, {0x1, 0x2}, {0x80, 0x1}, {0x1e, 0x6}, {0xf, 0x5}, {0x2, 0x5}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x217b3b32d3bbb486, 0x1, 0xc6}], [{{0x9, 0x5, 0x3, 0x0, 0xf8876abb856d369e, 0x4, 0x1, 0x3, {0x7, 0x25, 0x1, 0x3, "aa448e"}}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x9, 0x9, 0x10, {0x12, 0x25, 0x1, 0xe, "5ca896488b6ad07a038990ddb540"}}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0xa6, 0xda, 0x8, {0x10, 0x25, 0x1, 0xc, "49f49bc7e92dfd993b2235b9"}}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0x10, 0xe, {0x7, 0x25, 0x1, 0x3, "7be572"}}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x1, 0x43, 0x0, {0x6, 0x25, 0x1, 0x2, "11f0"}}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x98, 0x0, 0xe, {0xd, 0x25, 0x1, 0x9, "2741c14f65901c763b"}}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x6, 0x7, 0x5b, {0x8, 0x25, 0x1, 0x4, "db071681"}}}]}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x200, 0xa, 0x4, 0x84, 0x20, 0x2d}, 0x45, &(0x7f0000000500)={0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x11, 0x40, 0x3, 0xfd5, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xbe, 0x4, 0xc, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x0, 0xf0f, 0x5, [0xf, 0x3fc0, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x7, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x40, 0x0, 0x9, 0x2}]}, 0x9, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x403}}, {0x89, &(0x7f0000000600)=@string={0x89, 0x3, "fba78441dc47e1a106ce0c7a380c7035a85ee3e57defea2ed30d42fa47fbd3bfa2d4e1046047015b7998d92e09c496058efdaed68de70eaee647381d13eacc711a82179795ab4f9f73fc5fa3b6cd73de1d19314a879b2c54a79ce0c42a3a2f9f2db9971f3043acf511bf6cf1089d740cc3a437195fa04a5c09019b68dfe0e0946cab747ff21a1e"}}, {0xc5, &(0x7f00000006c0)=@string={0xc5, 0x3, "d55cc0299c8c595df90e9144c5c2c69b8bde4ac2520e2ea1b49082e0cc5081411f195d619066d39ef58547384743533d75d5fa0d440cc716254a2781836503580de4d9b72a7efadca5884e90d3932fb9f97b95950dd8612309b7aca6fdac2c0432734b8786818e74e63c99ba64bd04a36308ba8cab4acbab52a1b69ece987c85a564fd46ab4c6f80658d3f6a1d57b4abf9b8e3224798885b5fe0f5c2a32114121ee6e57b34755c4823a75155273ae9b5aabbbf1114b63f6f25f3782a2522c0e8b98806"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x4c3d}}, {0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="100373165b60dc8445caa06388474b7de1a68ae7085bbe1ed7fe57"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2c09}}, {0x8, &(0x7f00000008c0)=@string={0x8, 0x3, "7e92ad147b10"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0x22, 0x3e, {0x3e, 0xd, "2b894274e91451b160c2b8ab800dec6d342a73b21f67c2449a0776216462d3925293fc9d72aa4c417a7f4fd1de46dd8aa90b23ced2cb0bbdf639e6c6"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x0, 0x16, 0x2, "ab8e"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0xc0, 0x5, 0x6, "8e894096ade7"}, &(0x7f0000000300)={0x40, 0x5, 0x2, "eb34"}}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f20c035000001000f22c08f693001fdc744240013000000c7442402e7000000ff2c24c42245b66a7d0f01df67400fc75a0fc7442400ce000000c74424027b00c0feff1c240fc72ac744240060000000c74424024458cd3bff1c240fc79d8000c0fe", 0x62}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xb6, 0xf6, 0x40, 0xbfd, 0x112, 0xbb9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0xb, 0x10, 0xb4, "", [{{0x9, 0x4, 0x11, 0x2, 0x2, 0xa1, 0x48, 0xcd, 0x8, [], [{{0x9, 0x5, 0x2, 0x2, 0x7ff, 0x1d, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x9, 0x8}}]}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x2000}], 0x1, &(0x7f0000000980), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x101080) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000040)=0x2) executing program 32: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f20c035000001000f22c08f693001fdc744240013000000c7442402e7000000ff2c24c42245b66a7d0f01df67400fc75a0fc7442400ce000000c74424027b00c0feff1c240fc72ac744240060000000c74424024458cd3bff1c240fc79d8000c0fe", 0x62}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xb6, 0xf6, 0x40, 0xbfd, 0x112, 0xbb9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0xb, 0x10, 0xb4, "", [{{0x9, 0x4, 0x11, 0x2, 0x2, 0xa1, 0x48, 0xcd, 0x8, [], [{{0x9, 0x5, 0x2, 0x2, 0x7ff, 0x1d, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x9, 0x8}}]}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x2000}], 0x1, &(0x7f0000000980), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x101080) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000040)=0x2) executing program 4: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xe) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x22, 0x89, {0x89, 0x7, "cfbeee707ef478a0e2b2590b81ae0950305625b87e1a26ad4ca113735f7b6540ca8575c7a4e7f3b06a5a40f1c5481de86ccf72b1a49754fcef15daa91ebe8fb878757951f4b608fe5da0c283ebb3349e8a112e79ea47b9afd4c8293564f92c6413dc63ae25dafbe6496d7c337f1c1f31f250f11fe93f403ffb020d8ecb3b2edf0a1da023426f83"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x40, 0x16, 0xa8, "229cd5f3335572595522eae91b80f0aa30e3d69591fd9da7bd1cdee4cabec9c435738311c9056d3fbca511d44cbc914ad579051c2ae09e7b52445da6beb25cecd7ca438bc012d3e14494eaea113265a1549d62b271ac4fd2fb55f570446013ba543d1a07c22d5a760d5d6cff64b7432e89056093b9de31f9c56830632d9571fec6c06a9e7c891f4c2954d75da67eb5a12f98dd007279fb947817065389ef601f56e0a73ae5868bcc"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0xd, 0x0, 0x7, 0x35d, 0x5e, 0x7, 0x800, 0x5, 0xff, 0xfffe, 0x5}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x0, 0x0) keyctl$unlink(0x9, r2, r3) syz_usb_disconnect(r0) executing program 4: mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x120, 0x4) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000300000800000018000180140002006d6163767461703000000000000000000c00028004"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) (async) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000340)={0x1, 0xb}, 0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xad) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x3b) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="6e0200007d02000005f600000000000005830000000008000000000000000000404100000000e0e5000005000000000000001b00046e6f6465767b65766f6f7e0545c60005080037d93a8b920000003300704a86cec602007dfa673efeeb09b5351f5bde05"], 0x26e) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ppoll(&(0x7f0000000040)=[{r3, 0x9204}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount_setattr(r4, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r4}}, 0x20) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x1c8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x1c8) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) setns(r0, 0x20000) (async) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x3be1cae) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r2, 0x8}, &(0x7f0000000100)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='wusb3801 0x', 0xb) executing program 33: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x3be1cae) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r2, 0x8}, &(0x7f0000000100)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='wusb3801 0x', 0xb) executing program 3: connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0xa, 0x28102) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, 0x0, 0xa01, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x3, 0x51, 0x2f, 0x0, 0xc}}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") read(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x9) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000007c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4001e4"], 0x0, 0x0, 0x0, 0x0}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x20, 0xe, 0x12, {0x12, 0x1b, "7fa42bac99e1af881c575ec83d81941c"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x9, 0x28, "bc29d959624f79a0ead599ca184212dd5ca69c5d2575b29fe12d116608f41784773808465d36e653"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "074ef4"}, &(0x7f0000000300)={0x20, 0x82, 0x1, "fb"}, &(0x7f0000000340)={0x20, 0x83, 0x3, "7f983c"}, &(0x7f0000000380)={0x20, 0x84, 0x2, "16ed"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "259819"}}) syz_usb_disconnect(r0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10200, 0x140) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0xb, 0x7f, '\x00', 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './proc\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)=@x86={0x28, 0x5, 0x6, 0x0, 0x9, 0xb, 0x1, 0x7, 0x6, 0x4, 0x8, 0x8, 0x0, 0x3, 0x0, 0x40, 0x3a, 0xa, 0x9, '\x00', 0x5, 0x7fffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x122) (async, rerun: 64) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0xa, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async, rerun: 64) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3fffff) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c40000000002010300000000000000000700000224000a0000000000000007000800014000000000080001400000000108000140000000018c000a80880002800c000280050001002100000006000340000200002c000180141efaa25900000000000000000000000000000114000400fe80000000000000ae00000000000000aa2c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb0c00028005000100210000000c000280050001003a0000"], 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async) r4 = socket(0x10, 0x803, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) (async) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, 0x0, 0x29) (async) sendto(r4, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000380)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (rerun: 64) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async, rerun: 32) r8 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) (async) getsockopt$inet6_opts(r9, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000340)=0xffffffffffffffe6) executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="2d000000010001", 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x6c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x60}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000003c0), 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x6, 0x301200) syz_usb_connect(0x3, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e000101008032090400"], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000080)="01e9ff000980ffff", 0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000040)) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x270c, 0x20, 0x1, 0x1, 0x2, &(0x7f0000000300)=[0x0], 0x1, 0x0}) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r6, r6, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x12) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) syz_usb_connect$midi(0x2, 0x100, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0x75, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x1, 0x1, 0x2, 0x90, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0xc, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x81, 0x53}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf, 0x4}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0xb5, 0x3, [{0x1, 0x3}, {0xc6, 0x1}, {0x0, 0x2}], 0x2}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x16, 0x2, [{0x3, 0x5}, {0x6, 0xc0}], 0x5}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3, 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x9, 0x31}, @ms_header={0x7, 0x24, 0x1, 0x400, 0x7}], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x9, 0x2, 0x4, {0x6, 0x25, 0x1, 0x2, "f6c6"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x6, 0x9, 0x4, {0xe, 0x25, 0x1, 0xa, "8fd5b9425e2611c9e5a2"}}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x2, 0x7, 0xd1, {0xe, 0x25, 0x1, 0xa, "50607cc2566558fe8844"}}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x1, 0x1, 0xa, {0xf, 0x25, 0x1, 0xb, "04539b0d7a2075ea9b32ea"}}}, {{0x9, 0x5, 0x88, 0x0, 0x10, 0xe, 0x5, 0x8, {0xc, 0x25, 0x1, 0x8, "5e8e7f670ad22ffa"}}}, {{0x9, 0x5, 0xf, 0x3, 0x90, 0x4, 0x7, 0xf5, {0x12, 0x25, 0x1, 0xe, "503429d17653f35e90bd57a533d4"}}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x2, 0x2, 0x83, {0xa, 0x25, 0x1, 0x6, "8914ff563ae1"}}}]}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x1, 0xb, 0x9, 0x40, 0xa}, 0xc8, &(0x7f0000000480)={0x5, 0xf, 0xc8, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x1, 0xba, 0x78a, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x30, 0x4, 0x4e0f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x7, 0x9, 0xa, 0x10}, @generic={0x7b, 0x10, 0x1, "b25bb0d05ea07fa96e287813940ba9d2c19bb709442c3b1a32e4603f7223686fac94d57679586e5a0b24c019d28f4b3e221b19b2dc80c41570f0454ae0146087599c2e0c9b8ea767a1e8a7a42aa9ecffc475f089b84bad30568f9e80558eb33ae65baafb950d0ef3b59932c01aca9f37ac8e57827bcc82b8"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "7468da96456a6dfadad11227f23195d7"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9869e7c9a48e1c0d91c79e03e1f8d32a"}]}, 0x2, [{0xe2, &(0x7f0000000580)=@string={0xe2, 0x3, "8c803447a92e14bb0bef98624acc405643f3a92d70c545201d0415a44ca4df1ab1cea0c9393be4ec57d3becf2f41adf41fe15d4f5904ebf3ce177b59f093f35967ae96c02edab48f7b58a64ed382a16898e413e9c8dfa45cf9806a024c643009c108cee7e546e990b076e6fb8faaa874e17312fe50be99a36900fca58c876afd4209829a5cc1f5199fe18fbd2a7e283263d1197b432706447f515b05a92625362157f40affcc2e6619372405380c9ad9839fa1bdb9fd1a18eb9699ab56ca9974da1105673c0855999a10fb0ca825e4b1d5333ac38eba79524cf52140eda0b463"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000780)={0x0, 0x0, 0x6, "66c628c5c93a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 5: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x10000000000, 0x240800) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0xb) executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xfb, 0xa0, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x2, 0x9, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x80, 0xb8, {0x8, 0x25, 0x1, 0x80, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x0, 0x1, {0x8, 0x25, 0x1, 0x82, 0x0, 0x6, 0x8}}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000024c0), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000002b40)={0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r0, 0xc0106446, &(0x7f0000000180)={r2}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x8, 0x4) executing program 5: r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003044b11831bc8adcd"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x404, 0x70bd2c, 0x25dfdbfe, {0x10, 0x1, 0x1, 0x0, 0x80, 0xffff, 0x80000001, 0x3, 0x0, 0x101, 0x10000}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100000000090400"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) (async) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003044b11831bc8adcd"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x404, 0x70bd2c, 0x25dfdbfe, {0x10, 0x1, 0x1, 0x0, 0x80, 0xffff, 0x80000001, 0x3, 0x0, 0x101, 0x10000}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, 0x0}) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100000000090400"], 0x0) (async) executing program 3: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff000705810240000007050202400000070583"], 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c77, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0), 0x1, 0x8}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0xffff, 0xc57, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x12}}}, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012143, 0x0, {0xb}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_io_uring_modify_offsets$flags(r1, r6, 0x38, 0x0) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000002000000080001006e61740040000000030a0104000000000000000002000000080001006e6174000800030073797a00080007006e61740014000400080001000000000308000200ffffff9c84000000060a0104000000000000000002000000080001006e6174000800020073797a00600004005c0001000b00010074617267657400004c00020009000100444e4154000000000800020000000002340003"], 0x108}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x4000) (async, rerun: 32) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000002c0)=0xe8) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x4, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000140)=0xfffebffd) (async) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) r8 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000f80), 0xe801, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000fc0)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000001000)=0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)={0x21c, 0x28, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@generic="b36335d309f47bc1c429d35e0a8568c12f0356ba5d48fe37c59fe41e94beb49ab04a489b03964c8a7da2feb53ca6c48799693771cb67a7", @nested={0x1d2, 0x25, 0x0, 0x1, [@generic="701ee9453892458fc9887771a28783d0beb641640af60e1d46ea2d327fb6ebedd6c89a1395bb836cbf0b307c0c755c4c8302eeac48433a451d46d592e5548a60cab378ccb38d90e3fbc8ab476199d80dafadb9d4f18be3e0d3267157171cb59e2e51be096a1cf1be7db319c3356e4a154a6d0ec2fc79c5f19c29570dc1df259902b40f03b557c0957866eca88be1a4bb25e3b3c2a5c13c3a2f3a3ba8bcdb942d17fba2a3bb216d0048b63084fcda4842c3ed660e86cdab", @nested={0x4, 0xf3}, @nested={0x4, 0x74}, @typed={0x8, 0x14d, 0x0, 0x0, @uid=r2}, @nested={0x4, 0xfc}, @typed={0x19, 0x83, 0x0, 0x0, @str='ns/time_for_children\x00'}, @typed={0xa, 0x97, 0x0, 0x0, @str='-u$\':\x00'}, @generic="534314d63695be21612f94b3a4b835c20d18f9d119493a8bf5da6c4f0e3425bfef83f2b4d63c92cdbb34b3e079b10a0cadda5efb7d1c563fc39e838cbfffe07b0f7b9f5f7545ed9792d44443b6256a1d6cf0aeecf6b8585d5990d9b28dcbd00e008eb539a35833b500ef233c752d6b2c8e2e8899cdfc0ab961d96628294c88ce0b68b8148a98dfc4ab0b4456559b7d3a2b95c5fabc7383f613f6ebdf8bf06ab8f676f6d20cce4194ba8eb41c1dfbfc57d272851d46108ae346d5ed5b35558d36cd2f021c2e49e14a1ee30577883c4a495861ee", @generic, @typed={0x8, 0x167, 0x0, 0x0, @fd=r7}]}]}, 0x21c}, {&(0x7f0000000680)={0x424, 0x1e, 0x800, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x4, 0x0, 0x0, @pid=r8}, @nested={0xbf, 0x5, 0x0, 0x1, [@nested={0x4, 0x5b}, @nested={0x4, 0x2b3f}, @generic="c91dbc84a63a2b635d4dc86bf650de8cfd883de5561059a6e6f2137f7b6324b193beca109c53adc8d69faa58abc6dbe28bd0dca1b13b948769759ed4b68f563787bb0354ac2a990ba658e3ed820843883a55eff26140a0fbb815b556284623e06c8ca2f37af8d87920becb7b89d70c7c4b846020eae342669e403e06926d9ddea6924a108afa3b9f78", @generic="7aa8f2012ab024ddff07ecabc1037d81b8ca6f8e9ca7b7391a5425b2dae34daf13a3cd3a3133", @nested={0x4, 0x167}]}, @typed={0x4, 0x8c}, @nested={0xe5, 0xd4, 0x0, 0x1, [@nested={0x4, 0x11}, @nested={0x4, 0x143}, @generic="5b4fc421b3861f8d84d73563612179115bb5913296748adb1bce72af022e6e09f6d600e8a9e51ccf84e41a630e0ac395aa2439ff83ec98018805bed1196d28af6d775e3d0f56f21ae1855f902a17ced82266b3307b9948fd5eda45710fafbda9cea690ec6d3b68c1b46c6a1b72d2241354426278bb6282aef206110b81b07f7a9bfa2ea01634d72e40a9475c00d8bbe64a40be89ec76e0705b01a2a2aef22c0da9404b94f1a770af4212e629ea9d4fa0d8e55e80b99b07792a792148e0b8874d220174d5dec94da51eed688c1787dd85081d7a78e4036d6865"]}, @nested={0xed, 0x50, 0x0, 0x1, [@nested={0x4, 0x13d}, @generic="f406e387603bf979433a594f18f53b5c3913c4a700fea11a12712a27c4ab1d2958725b3e7f0c9a53372d50fa1e79bec24d8b1848ac947126b81fed262b9261186d71a65481e768edbe13d335823c3dacb9b3a4617439dab028801b1f710c544987dcb9df85ea41ba5da1d3bf448fe234a7b657b73372e97ed3cd60a89e3887c78a2b3627999ec50e7cd8616b515f229c9227b988150869a005858c6ea6621339660acaf3c4fdadcdeb01f222dcba47b626e16fc481fd49e6fad559320429b4c8ac95f8be8bb3170725ff69312e258af6c7d7c0c15a96c08fe0d0498e0498f4dac5f4efcdb7"]}, @generic="632304280a693d645c266a0ca9a47ddd660ba3b7d35dc8b1906b27eb16427707a9892145b009d105ea740bfdfcf6c5f323bfa691e314732d18ccb3d88568c184cef4fedc508e089463798647f4147d0ea3d5a683b1a553d2ff65d312105474e3fadcab92e316f44ff0041464ef6104720c49aaec7e4cc6073973a4c06b80220b1b324b67a40ea88f40fe126e18f0c002f53956ea97c5d94dcc410e8db8f182d08e17a82f5ec873d41c436823a929e0e66b2fe60946d691aaa62116906e5fd79ffa9655d08a97a31921e6dfde332d7b2b0af1b4dcae6a575d080c7e5c242c6be408f0aef85b58990333274c67837241723b", @generic="cc59409222430888c6a0eb51fa0d7f34ee09650b24a4e58316ab4669ca1f094e69c8f22adb3c97c50d4b472cd092184cf81ef1ba59011b69fdfd6c62a5f92afa2b0f8a8ba0f2ed36761e3ea5acab0dc99357e952f66672d2c6edf4d80cab7a07f9cb06ec97d1e2ebbf400debd3b417b83bd83b83597285ca649d", @generic="16dc91"]}, 0x424}, {&(0x7f0000000ac0)={0x1a8, 0x39, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x18, 0x8f, 0x0, 0x1, [@typed={0x14, 0x157, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0xa0, 0x1e, 0x0, 0x0, @binary="cf6fc75504ac56e2bcfc1569a86c93c3fa7bf31fe0fbc6b9ee7bf61007eb9f576651829f0c279a3cd5013a6f99d3e98364c20f907af6fd2ff18c148341777683868fc09cd2ec5be45bd4adc39a78de0df412c8a72aaca98e4c2d59f85d21b89af8d459d02152b36e189e69458466c0754b38b6abd9867dbfe3a57930fa47e1f98d16b0450c18238efc669e90ca8320c202cf4be537b37c164768cdaa"}, @generic="b7093ad4d6bb2fdf58fb10d48570372f621301dd8b903c1d73f7766cea15048accef805d9c0ddca4ff95255c8d9a58efe4f0bb28fa846d1ede133194681a98be293abb119b28", @typed={0x19, 0x108, 0x0, 0x0, @str='ns/time_for_children\x00'}, @generic="2353e591c7f2a9bd8af5dd87cc73c489babbd885a7b45cd7911f5fcc6a699bb7e62e095f1394eadf8a01b467c4a16747dbfa96295b6e90ad00f69181b17a408bfcd8f673c5836baf5cb28e519f08aeeeb2c11b2b2c71d53ef65aac0404f59584c5423fdca9a4bfb59f9eb9e9bebb1a0865eb28f04d2dab503e12", @typed={0x4, 0x14}]}, 0x1a8}, {&(0x7f0000000d40)={0x1f4, 0x1c, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@generic="f18eeec0791c019962db297a8df1f4936a5befbdeb810298a978055f3e4d63610b9faac7ebd7d769ee060fc3640907bee3cd0ae95a99793f4af8bf1f879d25e490d7def29f19c213ca8921fa27c004eab58fac8dd7891d6d6e26b9d59c6b09b4439f428152ce870e269aa8802e82f90d4e4f0d97d862dfc5beee62383a47d10dcf8bcaf811c6723ab90be51aba7ceff809ed7d8474", @nested={0x8, 0x75, 0x0, 0x1, [@nested={0x4, 0x5e}]}, @nested={0x139, 0xdd, 0x0, 0x1, [@generic="ec0da5aebeb0b0b05bd75280dbabe8483c68b93092be99e5847409835cfb2fdced8512a1c0b101674a3c5be225b4422de3e579eddc39bbb927659c373f4cefe0557529c9532d1cc3ed59f76a7c323d6db153448ccb3d1c3a974ec54a5b91bffce21586c54e648caea22c03206bde2edec6d58986190ce4252887ce7c5099e84df1bdf220b704efe62e7857ff18cf157be0e18a6c71cac88a5a09e78190bd10280989af07", @typed={0x8, 0x69, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x115}, @typed={0x8, 0x9a, 0x0, 0x0, @uid=r9}, @typed={0x8, 0xe4, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xdd}, @generic="a89344d9b249c158149c45846b067862c95e0840a6e064f001c49ec40d8a1a194b12be818a3bbe7d331bf3bbe5f9833a4ccc50031a86579d6c9a85083241637ca7d53934d8987ac59992422c7b2dd9c46715185e526b7860b6946c847657311259711e39aa59dbe22d66f2e345b4fbd755"]}, @typed={0x7, 0x48, 0x0, 0x0, @str='$#\x00'}]}, 0x1f4}], 0x4, &(0x7f0000001040)=[@rights={{0x34, 0x1, 0x1, [r10, r1, r11, r0, r1, r0, r1, r0, r12]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x58, 0x1}, 0x4040) executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'team_slave_1\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000100)="e80000", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x84}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c9004000"/32) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000008bd2871000000000000010902240001000010020903f705020200030920000003115789a4a6aa8103400000040416073f38bf9158f364d8ba7eae48a8b376a1ba88"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x7, 0x18, {0x18, 0x27, "806b562fd275239f7e5a300ac1ffa3a5ba89db83b04e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000b00)) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90041000100"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90042000200"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90043000300"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90044000400"/32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="bd142e7d01800000b25db50627", @ANYRES16=r9, @ANYBLOB="010027bd7000fcd3df2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x10008001}, 0x400a0) close_range(r6, r0, 0x0) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90061002000"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="2700000000000000000000001000"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="cb000000000000000100"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="2300000000000000000000000000000000000000000000000000000001000000") syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x40, 0x2, 0x3e, {0x3e, 0x31, "8125c524380c3191d1881aed66a5c7cafddb0d238badb69a405b74a2ad5b106f1337b22ed95d243393a22beb4340f65d8b8874a6fc2606feefb58af7"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}, &(0x7f0000000280)=ANY=[@ANYBLOB="00221e000000ab81263da0c331ce85f621d5a28b00475000b3e4279203102583a8238228"], &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0x5, 0x1, {0x22, 0xbc2}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x40, 0x10, 0x3f, "306cd942397f10e22f74bd6afc6a9010ff62e644c6c2d5c8ca6b977e47ff2d6e34eaf081ff90fee8cec6bd39c00d6e319e1a663ce68e1789435fbbb3014410"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x1, 0x16, "9a4e6ec57303270726b6cfacccc47cd028471852b64e"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x2}}) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="1200"/32) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_write(r2, 0x82, 0x20, &(0x7f0000000200)="1200"/32) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x19f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x404c044}, 0x0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040061) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000380)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x19f) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000000)='3', 0x4e) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2) (async) sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x404c044}, 0x0) (async) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040061) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000380)=0x3) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) (async) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) executing program 0: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x11, 0x8848, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000003c0)=@qipcrtr={0x2a, 0x2, 0x4000}, 0x80, &(0x7f0000000200)=[{&(0x7f0000001500)="000502000b00000000002d39", 0xc}], 0x1}, 0x4000888) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x23b, 0x6, {"05b8e3d46359cabd7c6744e571777c26"}, 0x2, 0x5, 0x7fffffff}}}, 0xa0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f00000005c0)=""/46, 0x2e}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f00000018c0)=""/4091, 0xffb}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x2100, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) socket$alg(0x26, 0x5, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100003600010000070000ffdbdf25020100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x20000040) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x2, 0x2, 0x7f}}, 0x28) executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200, 0x2) mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) setns(0xc9, 0x0) r1 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) write(r2, 0x0, 0xfffffd47) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@fd={0xd129, 0x2, 0x4, 0xe000, 0x6ebd, {}, {0x2, 0x8, 0x36, 0xc, 0x6, 0xd1, "9b43e82a"}, 0x408, 0x4, {}, 0x4}) executing program 0: r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)={0x38, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0xc0000001, 0x0, 0x1, 0xffffff89, 0x800, 0x9, 0x48d4}, {0xa, 0x4, 0x1, 0x7, 0x7, 0x80000007, 0x5}, {0x40000000, 0x8, 0x1, 0x3ff, 0x7ffffdff, 0x8005, 0x4}, {0x80000007, 0x2, 0x1, 0x8001, 0xdf2, 0x4, 0x9}, {0x9ba32b2b2f59e442, 0x2bb, 0x5, 0xe, 0x3, 0x7ff, 0x8}, {0x80000000, 0x100, 0x6, 0x6, 0x3, 0x2, 0x3}]}) executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'team_slave_1\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000100)="e80000", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-openat$kvm-ioctl$KVM_CREATE_VM-madvise-socket$inet_tcp-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_TCP_CONGESTION-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-sendmsg$NFT_BATCH-syz_open_procfs-read$eventfd-mkdirat-mount-openat-write-setsockopt$XDP_UMEM_REG-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN-setsockopt$inet6_tcp_TCP_ULP detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash single: failed to extract reproducer bisect: bisecting 38 programs with base timeout 1m40s testing program (duration=1m49s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 4, 7, 6, 4, 20, 20, 16, 12, 12, 24, 27, 10, 10, 25, 27, 28, 11, 30, 25, 6, 9, 22, 6, 28, 8, 24, 29, 30, 36, 30, 7, 8, 27, 4, 10, 6, 29] detailed listing: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0xb) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) executing program 2: r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000d020000005678d9aa897ecd85116307c5d0a47d7ca144c7b35308b4881164411af24bf778356788abff049511a925f9a13ba09e7899afdd710b4535879fe8b7fad390502ba6a25f92bb3419f4005593b305b93847c74aa9f6abeea873edb5ebf79fbe8a02caccc20354dbc3e700e5189025233103c5cc4d6c28b837ea18dc1e"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f0000000200)={0x40, 0xf, 0x9, {0x9, 0xe, "76c853d0e44bd6"}}, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) (rerun: 32) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f2258660f1bd80f01ba200003a8000064660fc7b000000f070fc72beaa500be00baf80c66b8a07e258066efbafc0c66b80b9f9c3966ef26650f01c8", 0x3c}], 0x1, 0x7d, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000088945b406d04b6088eca000000010902"], 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) executing program 2: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000008450c0b7600000000000109022400010000000009040000ff0300000009210400000122850009058103"], 0x0) syz_usb_connect$midi(0x3, 0x118, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x145, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x106, 0x1, 0x1, 0x7, 0xa0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0x2, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x6}, @ms_header={0x7, 0x24, 0x1, 0x10, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x3, 0x9, 0x2, [{0x7f, 0x5}, {0xe, 0xf3}], 0xd}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x7f, 0x4, [{0x8, 0x7}, {0xfe, 0x4}, {0x0, 0x8}, {0xc, 0x40}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x4000, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0xa0, 0x6, [{0x6, 0x80}, {0xf4, 0x7}, {0x7f, 0x7}, {0x84, 0x9}, {0x9}, {0x40, 0x28}], 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xb, 0x21}, @midi_out_jack={0x17, 0x24, 0x3, 0x2, 0x1, 0x8, [{0x7, 0x2}, {0x1, 0x1}, {0x9a, 0x1}, {0x1, 0x2}, {0x80, 0x1}, {0x1e, 0x6}, {0xf, 0x5}, {0x2, 0x5}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x217b3b32d3bbb486, 0x1, 0xc6}], [{{0x9, 0x5, 0x3, 0x0, 0xf8876abb856d369e, 0x4, 0x1, 0x3, {0x7, 0x25, 0x1, 0x3, "aa448e"}}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x9, 0x9, 0x10, {0x12, 0x25, 0x1, 0xe, "5ca896488b6ad07a038990ddb540"}}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0xa6, 0xda, 0x8, {0x10, 0x25, 0x1, 0xc, "49f49bc7e92dfd993b2235b9"}}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0x10, 0xe, {0x7, 0x25, 0x1, 0x3, "7be572"}}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x1, 0x43, 0x0, {0x6, 0x25, 0x1, 0x2, "11f0"}}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x98, 0x0, 0xe, {0xd, 0x25, 0x1, 0x9, "2741c14f65901c763b"}}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x6, 0x7, 0x5b, {0x8, 0x25, 0x1, 0x4, "db071681"}}}]}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x200, 0xa, 0x4, 0x84, 0x20, 0x2d}, 0x45, &(0x7f0000000500)={0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x11, 0x40, 0x3, 0xfd5, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xbe, 0x4, 0xc, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x0, 0xf0f, 0x5, [0xf, 0x3fc0, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x7, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x40, 0x0, 0x9, 0x2}]}, 0x9, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x403}}, {0x89, &(0x7f0000000600)=@string={0x89, 0x3, "fba78441dc47e1a106ce0c7a380c7035a85ee3e57defea2ed30d42fa47fbd3bfa2d4e1046047015b7998d92e09c496058efdaed68de70eaee647381d13eacc711a82179795ab4f9f73fc5fa3b6cd73de1d19314a879b2c54a79ce0c42a3a2f9f2db9971f3043acf511bf6cf1089d740cc3a437195fa04a5c09019b68dfe0e0946cab747ff21a1e"}}, {0xc5, &(0x7f00000006c0)=@string={0xc5, 0x3, "d55cc0299c8c595df90e9144c5c2c69b8bde4ac2520e2ea1b49082e0cc5081411f195d619066d39ef58547384743533d75d5fa0d440cc716254a2781836503580de4d9b72a7efadca5884e90d3932fb9f97b95950dd8612309b7aca6fdac2c0432734b8786818e74e63c99ba64bd04a36308ba8cab4acbab52a1b69ece987c85a564fd46ab4c6f80658d3f6a1d57b4abf9b8e3224798885b5fe0f5c2a32114121ee6e57b34755c4823a75155273ae9b5aabbbf1114b63f6f25f3782a2522c0e8b98806"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x4c3d}}, {0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="100373165b60dc8445caa06388474b7de1a68ae7085bbe1ed7fe57"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2c09}}, {0x8, &(0x7f00000008c0)=@string={0x8, 0x3, "7e92ad147b10"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0x22, 0x3e, {0x3e, 0xd, "2b894274e91451b160c2b8ab800dec6d342a73b21f67c2449a0776216462d3925293fc9d72aa4c417a7f4fd1de46dd8aa90b23ced2cb0bbdf639e6c6"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x0, 0x16, 0x2, "ab8e"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0xc0, 0x5, 0x6, "8e894096ade7"}, &(0x7f0000000300)={0x40, 0x5, 0x2, "eb34"}}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f20c035000001000f22c08f693001fdc744240013000000c7442402e7000000ff2c24c42245b66a7d0f01df67400fc75a0fc7442400ce000000c74424027b00c0feff1c240fc72ac744240060000000c74424024458cd3bff1c240fc79d8000c0fe", 0x62}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xb6, 0xf6, 0x40, 0xbfd, 0x112, 0xbb9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0xb, 0x10, 0xb4, "", [{{0x9, 0x4, 0x11, 0x2, 0x2, 0xa1, 0x48, 0xcd, 0x8, [], [{{0x9, 0x5, 0x2, 0x2, 0x7ff, 0x1d, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x9, 0x8}}]}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x2000}], 0x1, &(0x7f0000000980), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x101080) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000040)=0x2) executing program 32: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f20c035000001000f22c08f693001fdc744240013000000c7442402e7000000ff2c24c42245b66a7d0f01df67400fc75a0fc7442400ce000000c74424027b00c0feff1c240fc72ac744240060000000c74424024458cd3bff1c240fc79d8000c0fe", 0x62}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xb6, 0xf6, 0x40, 0xbfd, 0x112, 0xbb9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0xb, 0x10, 0xb4, "", [{{0x9, 0x4, 0x11, 0x2, 0x2, 0xa1, 0x48, 0xcd, 0x8, [], [{{0x9, 0x5, 0x2, 0x2, 0x7ff, 0x1d, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x9, 0x8}}]}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x2000}], 0x1, &(0x7f0000000980), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x101080) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000040)=0x2) executing program 4: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xe) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x22, 0x89, {0x89, 0x7, "cfbeee707ef478a0e2b2590b81ae0950305625b87e1a26ad4ca113735f7b6540ca8575c7a4e7f3b06a5a40f1c5481de86ccf72b1a49754fcef15daa91ebe8fb878757951f4b608fe5da0c283ebb3349e8a112e79ea47b9afd4c8293564f92c6413dc63ae25dafbe6496d7c337f1c1f31f250f11fe93f403ffb020d8ecb3b2edf0a1da023426f83"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x40, 0x16, 0xa8, "229cd5f3335572595522eae91b80f0aa30e3d69591fd9da7bd1cdee4cabec9c435738311c9056d3fbca511d44cbc914ad579051c2ae09e7b52445da6beb25cecd7ca438bc012d3e14494eaea113265a1549d62b271ac4fd2fb55f570446013ba543d1a07c22d5a760d5d6cff64b7432e89056093b9de31f9c56830632d9571fec6c06a9e7c891f4c2954d75da67eb5a12f98dd007279fb947817065389ef601f56e0a73ae5868bcc"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0xd, 0x0, 0x7, 0x35d, 0x5e, 0x7, 0x800, 0x5, 0xff, 0xfffe, 0x5}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x0, 0x0) keyctl$unlink(0x9, r2, r3) syz_usb_disconnect(r0) executing program 4: mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x120, 0x4) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000300000800000018000180140002006d6163767461703000000000000000000c00028004"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) (async) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000340)={0x1, 0xb}, 0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xad) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x3b) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="6e0200007d02000005f600000000000005830000000008000000000000000000404100000000e0e5000005000000000000001b00046e6f6465767b65766f6f7e0545c60005080037d93a8b920000003300704a86cec602007dfa673efeeb09b5351f5bde05"], 0x26e) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ppoll(&(0x7f0000000040)=[{r3, 0x9204}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount_setattr(r4, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r4}}, 0x20) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x1c8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x1c8) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) setns(r0, 0x20000) (async) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x3be1cae) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r2, 0x8}, &(0x7f0000000100)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='wusb3801 0x', 0xb) executing program 33: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x3be1cae) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r2, 0x8}, &(0x7f0000000100)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='wusb3801 0x', 0xb) executing program 3: connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0xa, 0x28102) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, 0x0, 0xa01, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x3, 0x51, 0x2f, 0x0, 0xc}}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") read(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x9) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000007c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4001e4"], 0x0, 0x0, 0x0, 0x0}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x20, 0xe, 0x12, {0x12, 0x1b, "7fa42bac99e1af881c575ec83d81941c"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x9, 0x28, "bc29d959624f79a0ead599ca184212dd5ca69c5d2575b29fe12d116608f41784773808465d36e653"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "074ef4"}, &(0x7f0000000300)={0x20, 0x82, 0x1, "fb"}, &(0x7f0000000340)={0x20, 0x83, 0x3, "7f983c"}, &(0x7f0000000380)={0x20, 0x84, 0x2, "16ed"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "259819"}}) syz_usb_disconnect(r0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10200, 0x140) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0xb, 0x7f, '\x00', 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './proc\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)=@x86={0x28, 0x5, 0x6, 0x0, 0x9, 0xb, 0x1, 0x7, 0x6, 0x4, 0x8, 0x8, 0x0, 0x3, 0x0, 0x40, 0x3a, 0xa, 0x9, '\x00', 0x5, 0x7fffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x122) (async, rerun: 64) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0xa, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async, rerun: 64) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3fffff) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c40000000002010300000000000000000700000224000a0000000000000007000800014000000000080001400000000108000140000000018c000a80880002800c000280050001002100000006000340000200002c000180141efaa25900000000000000000000000000000114000400fe80000000000000ae00000000000000aa2c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb0c00028005000100210000000c000280050001003a0000"], 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async) r4 = socket(0x10, 0x803, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) (async) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, 0x0, 0x29) (async) sendto(r4, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000380)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (rerun: 64) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async, rerun: 32) r8 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) (async) getsockopt$inet6_opts(r9, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000340)=0xffffffffffffffe6) executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="2d000000010001", 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x6c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x60}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000003c0), 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x6, 0x301200) syz_usb_connect(0x3, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e000101008032090400"], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000080)="01e9ff000980ffff", 0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000040)) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x270c, 0x20, 0x1, 0x1, 0x2, &(0x7f0000000300)=[0x0], 0x1, 0x0}) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r6, r6, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x12) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) syz_usb_connect$midi(0x2, 0x100, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0x75, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x1, 0x1, 0x2, 0x90, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0xc, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x81, 0x53}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf, 0x4}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0xb5, 0x3, [{0x1, 0x3}, {0xc6, 0x1}, {0x0, 0x2}], 0x2}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x16, 0x2, [{0x3, 0x5}, {0x6, 0xc0}], 0x5}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3, 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x9, 0x31}, @ms_header={0x7, 0x24, 0x1, 0x400, 0x7}], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x9, 0x2, 0x4, {0x6, 0x25, 0x1, 0x2, "f6c6"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x6, 0x9, 0x4, {0xe, 0x25, 0x1, 0xa, "8fd5b9425e2611c9e5a2"}}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x2, 0x7, 0xd1, {0xe, 0x25, 0x1, 0xa, "50607cc2566558fe8844"}}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x1, 0x1, 0xa, {0xf, 0x25, 0x1, 0xb, "04539b0d7a2075ea9b32ea"}}}, {{0x9, 0x5, 0x88, 0x0, 0x10, 0xe, 0x5, 0x8, {0xc, 0x25, 0x1, 0x8, "5e8e7f670ad22ffa"}}}, {{0x9, 0x5, 0xf, 0x3, 0x90, 0x4, 0x7, 0xf5, {0x12, 0x25, 0x1, 0xe, "503429d17653f35e90bd57a533d4"}}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x2, 0x2, 0x83, {0xa, 0x25, 0x1, 0x6, "8914ff563ae1"}}}]}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x1, 0xb, 0x9, 0x40, 0xa}, 0xc8, &(0x7f0000000480)={0x5, 0xf, 0xc8, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x1, 0xba, 0x78a, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x30, 0x4, 0x4e0f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x7, 0x9, 0xa, 0x10}, @generic={0x7b, 0x10, 0x1, "b25bb0d05ea07fa96e287813940ba9d2c19bb709442c3b1a32e4603f7223686fac94d57679586e5a0b24c019d28f4b3e221b19b2dc80c41570f0454ae0146087599c2e0c9b8ea767a1e8a7a42aa9ecffc475f089b84bad30568f9e80558eb33ae65baafb950d0ef3b59932c01aca9f37ac8e57827bcc82b8"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "7468da96456a6dfadad11227f23195d7"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9869e7c9a48e1c0d91c79e03e1f8d32a"}]}, 0x2, [{0xe2, &(0x7f0000000580)=@string={0xe2, 0x3, "8c803447a92e14bb0bef98624acc405643f3a92d70c545201d0415a44ca4df1ab1cea0c9393be4ec57d3becf2f41adf41fe15d4f5904ebf3ce177b59f093f35967ae96c02edab48f7b58a64ed382a16898e413e9c8dfa45cf9806a024c643009c108cee7e546e990b076e6fb8faaa874e17312fe50be99a36900fca58c876afd4209829a5cc1f5199fe18fbd2a7e283263d1197b432706447f515b05a92625362157f40affcc2e6619372405380c9ad9839fa1bdb9fd1a18eb9699ab56ca9974da1105673c0855999a10fb0ca825e4b1d5333ac38eba79524cf52140eda0b463"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000780)={0x0, 0x0, 0x6, "66c628c5c93a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 5: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x10000000000, 0x240800) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0xb) executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xfb, 0xa0, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x2, 0x9, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x80, 0xb8, {0x8, 0x25, 0x1, 0x80, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x0, 0x1, {0x8, 0x25, 0x1, 0x82, 0x0, 0x6, 0x8}}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000024c0), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000002b40)={0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r0, 0xc0106446, &(0x7f0000000180)={r2}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x8, 0x4) executing program 5: r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003044b11831bc8adcd"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x404, 0x70bd2c, 0x25dfdbfe, {0x10, 0x1, 0x1, 0x0, 0x80, 0xffff, 0x80000001, 0x3, 0x0, 0x101, 0x10000}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100000000090400"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) (async) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003044b11831bc8adcd"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x404, 0x70bd2c, 0x25dfdbfe, {0x10, 0x1, 0x1, 0x0, 0x80, 0xffff, 0x80000001, 0x3, 0x0, 0x101, 0x10000}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, 0x0}) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100000000090400"], 0x0) (async) executing program 3: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff000705810240000007050202400000070583"], 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c77, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0), 0x1, 0x8}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0xffff, 0xc57, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x12}}}, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012143, 0x0, {0xb}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_io_uring_modify_offsets$flags(r1, r6, 0x38, 0x0) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000002000000080001006e61740040000000030a0104000000000000000002000000080001006e6174000800030073797a00080007006e61740014000400080001000000000308000200ffffff9c84000000060a0104000000000000000002000000080001006e6174000800020073797a00600004005c0001000b00010074617267657400004c00020009000100444e4154000000000800020000000002340003"], 0x108}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x4000) (async, rerun: 32) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000002c0)=0xe8) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x4, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000140)=0xfffebffd) (async) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) r8 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000f80), 0xe801, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000fc0)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000001000)=0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)={0x21c, 0x28, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@generic="b36335d309f47bc1c429d35e0a8568c12f0356ba5d48fe37c59fe41e94beb49ab04a489b03964c8a7da2feb53ca6c48799693771cb67a7", @nested={0x1d2, 0x25, 0x0, 0x1, [@generic="701ee9453892458fc9887771a28783d0beb641640af60e1d46ea2d327fb6ebedd6c89a1395bb836cbf0b307c0c755c4c8302eeac48433a451d46d592e5548a60cab378ccb38d90e3fbc8ab476199d80dafadb9d4f18be3e0d3267157171cb59e2e51be096a1cf1be7db319c3356e4a154a6d0ec2fc79c5f19c29570dc1df259902b40f03b557c0957866eca88be1a4bb25e3b3c2a5c13c3a2f3a3ba8bcdb942d17fba2a3bb216d0048b63084fcda4842c3ed660e86cdab", @nested={0x4, 0xf3}, @nested={0x4, 0x74}, @typed={0x8, 0x14d, 0x0, 0x0, @uid=r2}, @nested={0x4, 0xfc}, @typed={0x19, 0x83, 0x0, 0x0, @str='ns/time_for_children\x00'}, @typed={0xa, 0x97, 0x0, 0x0, @str='-u$\':\x00'}, @generic="534314d63695be21612f94b3a4b835c20d18f9d119493a8bf5da6c4f0e3425bfef83f2b4d63c92cdbb34b3e079b10a0cadda5efb7d1c563fc39e838cbfffe07b0f7b9f5f7545ed9792d44443b6256a1d6cf0aeecf6b8585d5990d9b28dcbd00e008eb539a35833b500ef233c752d6b2c8e2e8899cdfc0ab961d96628294c88ce0b68b8148a98dfc4ab0b4456559b7d3a2b95c5fabc7383f613f6ebdf8bf06ab8f676f6d20cce4194ba8eb41c1dfbfc57d272851d46108ae346d5ed5b35558d36cd2f021c2e49e14a1ee30577883c4a495861ee", @generic, @typed={0x8, 0x167, 0x0, 0x0, @fd=r7}]}]}, 0x21c}, {&(0x7f0000000680)={0x424, 0x1e, 0x800, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x4, 0x0, 0x0, @pid=r8}, @nested={0xbf, 0x5, 0x0, 0x1, [@nested={0x4, 0x5b}, @nested={0x4, 0x2b3f}, @generic="c91dbc84a63a2b635d4dc86bf650de8cfd883de5561059a6e6f2137f7b6324b193beca109c53adc8d69faa58abc6dbe28bd0dca1b13b948769759ed4b68f563787bb0354ac2a990ba658e3ed820843883a55eff26140a0fbb815b556284623e06c8ca2f37af8d87920becb7b89d70c7c4b846020eae342669e403e06926d9ddea6924a108afa3b9f78", @generic="7aa8f2012ab024ddff07ecabc1037d81b8ca6f8e9ca7b7391a5425b2dae34daf13a3cd3a3133", @nested={0x4, 0x167}]}, @typed={0x4, 0x8c}, @nested={0xe5, 0xd4, 0x0, 0x1, [@nested={0x4, 0x11}, @nested={0x4, 0x143}, @generic="5b4fc421b3861f8d84d73563612179115bb5913296748adb1bce72af022e6e09f6d600e8a9e51ccf84e41a630e0ac395aa2439ff83ec98018805bed1196d28af6d775e3d0f56f21ae1855f902a17ced82266b3307b9948fd5eda45710fafbda9cea690ec6d3b68c1b46c6a1b72d2241354426278bb6282aef206110b81b07f7a9bfa2ea01634d72e40a9475c00d8bbe64a40be89ec76e0705b01a2a2aef22c0da9404b94f1a770af4212e629ea9d4fa0d8e55e80b99b07792a792148e0b8874d220174d5dec94da51eed688c1787dd85081d7a78e4036d6865"]}, @nested={0xed, 0x50, 0x0, 0x1, [@nested={0x4, 0x13d}, @generic="f406e387603bf979433a594f18f53b5c3913c4a700fea11a12712a27c4ab1d2958725b3e7f0c9a53372d50fa1e79bec24d8b1848ac947126b81fed262b9261186d71a65481e768edbe13d335823c3dacb9b3a4617439dab028801b1f710c544987dcb9df85ea41ba5da1d3bf448fe234a7b657b73372e97ed3cd60a89e3887c78a2b3627999ec50e7cd8616b515f229c9227b988150869a005858c6ea6621339660acaf3c4fdadcdeb01f222dcba47b626e16fc481fd49e6fad559320429b4c8ac95f8be8bb3170725ff69312e258af6c7d7c0c15a96c08fe0d0498e0498f4dac5f4efcdb7"]}, @generic="632304280a693d645c266a0ca9a47ddd660ba3b7d35dc8b1906b27eb16427707a9892145b009d105ea740bfdfcf6c5f323bfa691e314732d18ccb3d88568c184cef4fedc508e089463798647f4147d0ea3d5a683b1a553d2ff65d312105474e3fadcab92e316f44ff0041464ef6104720c49aaec7e4cc6073973a4c06b80220b1b324b67a40ea88f40fe126e18f0c002f53956ea97c5d94dcc410e8db8f182d08e17a82f5ec873d41c436823a929e0e66b2fe60946d691aaa62116906e5fd79ffa9655d08a97a31921e6dfde332d7b2b0af1b4dcae6a575d080c7e5c242c6be408f0aef85b58990333274c67837241723b", @generic="cc59409222430888c6a0eb51fa0d7f34ee09650b24a4e58316ab4669ca1f094e69c8f22adb3c97c50d4b472cd092184cf81ef1ba59011b69fdfd6c62a5f92afa2b0f8a8ba0f2ed36761e3ea5acab0dc99357e952f66672d2c6edf4d80cab7a07f9cb06ec97d1e2ebbf400debd3b417b83bd83b83597285ca649d", @generic="16dc91"]}, 0x424}, {&(0x7f0000000ac0)={0x1a8, 0x39, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x18, 0x8f, 0x0, 0x1, [@typed={0x14, 0x157, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0xa0, 0x1e, 0x0, 0x0, @binary="cf6fc75504ac56e2bcfc1569a86c93c3fa7bf31fe0fbc6b9ee7bf61007eb9f576651829f0c279a3cd5013a6f99d3e98364c20f907af6fd2ff18c148341777683868fc09cd2ec5be45bd4adc39a78de0df412c8a72aaca98e4c2d59f85d21b89af8d459d02152b36e189e69458466c0754b38b6abd9867dbfe3a57930fa47e1f98d16b0450c18238efc669e90ca8320c202cf4be537b37c164768cdaa"}, @generic="b7093ad4d6bb2fdf58fb10d48570372f621301dd8b903c1d73f7766cea15048accef805d9c0ddca4ff95255c8d9a58efe4f0bb28fa846d1ede133194681a98be293abb119b28", @typed={0x19, 0x108, 0x0, 0x0, @str='ns/time_for_children\x00'}, @generic="2353e591c7f2a9bd8af5dd87cc73c489babbd885a7b45cd7911f5fcc6a699bb7e62e095f1394eadf8a01b467c4a16747dbfa96295b6e90ad00f69181b17a408bfcd8f673c5836baf5cb28e519f08aeeeb2c11b2b2c71d53ef65aac0404f59584c5423fdca9a4bfb59f9eb9e9bebb1a0865eb28f04d2dab503e12", @typed={0x4, 0x14}]}, 0x1a8}, {&(0x7f0000000d40)={0x1f4, 0x1c, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@generic="f18eeec0791c019962db297a8df1f4936a5befbdeb810298a978055f3e4d63610b9faac7ebd7d769ee060fc3640907bee3cd0ae95a99793f4af8bf1f879d25e490d7def29f19c213ca8921fa27c004eab58fac8dd7891d6d6e26b9d59c6b09b4439f428152ce870e269aa8802e82f90d4e4f0d97d862dfc5beee62383a47d10dcf8bcaf811c6723ab90be51aba7ceff809ed7d8474", @nested={0x8, 0x75, 0x0, 0x1, [@nested={0x4, 0x5e}]}, @nested={0x139, 0xdd, 0x0, 0x1, [@generic="ec0da5aebeb0b0b05bd75280dbabe8483c68b93092be99e5847409835cfb2fdced8512a1c0b101674a3c5be225b4422de3e579eddc39bbb927659c373f4cefe0557529c9532d1cc3ed59f76a7c323d6db153448ccb3d1c3a974ec54a5b91bffce21586c54e648caea22c03206bde2edec6d58986190ce4252887ce7c5099e84df1bdf220b704efe62e7857ff18cf157be0e18a6c71cac88a5a09e78190bd10280989af07", @typed={0x8, 0x69, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x115}, @typed={0x8, 0x9a, 0x0, 0x0, @uid=r9}, @typed={0x8, 0xe4, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xdd}, @generic="a89344d9b249c158149c45846b067862c95e0840a6e064f001c49ec40d8a1a194b12be818a3bbe7d331bf3bbe5f9833a4ccc50031a86579d6c9a85083241637ca7d53934d8987ac59992422c7b2dd9c46715185e526b7860b6946c847657311259711e39aa59dbe22d66f2e345b4fbd755"]}, @typed={0x7, 0x48, 0x0, 0x0, @str='$#\x00'}]}, 0x1f4}], 0x4, &(0x7f0000001040)=[@rights={{0x34, 0x1, 0x1, [r10, r1, r11, r0, r1, r0, r1, r0, r12]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x58, 0x1}, 0x4040) executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'team_slave_1\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000100)="e80000", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x84}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c9004000"/32) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000008bd2871000000000000010902240001000010020903f705020200030920000003115789a4a6aa8103400000040416073f38bf9158f364d8ba7eae48a8b376a1ba88"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x7, 0x18, {0x18, 0x27, "806b562fd275239f7e5a300ac1ffa3a5ba89db83b04e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000b00)) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90041000100"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90042000200"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90043000300"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90044000400"/32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="bd142e7d01800000b25db50627", @ANYRES16=r9, @ANYBLOB="010027bd7000fcd3df2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x10008001}, 0x400a0) close_range(r6, r0, 0x0) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90061002000"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="2700000000000000000000001000"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="cb000000000000000100"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="2300000000000000000000000000000000000000000000000000000001000000") syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x40, 0x2, 0x3e, {0x3e, 0x31, "8125c524380c3191d1881aed66a5c7cafddb0d238badb69a405b74a2ad5b106f1337b22ed95d243393a22beb4340f65d8b8874a6fc2606feefb58af7"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}, &(0x7f0000000280)=ANY=[@ANYBLOB="00221e000000ab81263da0c331ce85f621d5a28b00475000b3e4279203102583a8238228"], &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0x5, 0x1, {0x22, 0xbc2}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x40, 0x10, 0x3f, "306cd942397f10e22f74bd6afc6a9010ff62e644c6c2d5c8ca6b977e47ff2d6e34eaf081ff90fee8cec6bd39c00d6e319e1a663ce68e1789435fbbb3014410"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x1, 0x16, "9a4e6ec57303270726b6cfacccc47cd028471852b64e"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x2}}) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="1200"/32) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_write(r2, 0x82, 0x20, &(0x7f0000000200)="1200"/32) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x19f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x404c044}, 0x0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040061) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000380)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x19f) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000000)='3', 0x4e) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2) (async) sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x404c044}, 0x0) (async) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040061) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000380)=0x3) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) (async) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) executing program 0: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x11, 0x8848, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000003c0)=@qipcrtr={0x2a, 0x2, 0x4000}, 0x80, &(0x7f0000000200)=[{&(0x7f0000001500)="000502000b00000000002d39", 0xc}], 0x1}, 0x4000888) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x23b, 0x6, {"05b8e3d46359cabd7c6744e571777c26"}, 0x2, 0x5, 0x7fffffff}}}, 0xa0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f00000005c0)=""/46, 0x2e}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f00000018c0)=""/4091, 0xffb}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x2100, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) socket$alg(0x26, 0x5, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100003600010000070000ffdbdf25020100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x20000040) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x2, 0x2, 0x7f}}, 0x28) executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200, 0x2) mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) setns(0xc9, 0x0) r1 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) write(r2, 0x0, 0xfffffd47) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@fd={0xd129, 0x2, 0x4, 0xe000, 0x6ebd, {}, {0x2, 0x8, 0x36, 0xc, 0x6, 0xd1, "9b43e82a"}, 0x408, 0x4, {}, 0x4}) executing program 0: r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)={0x38, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0xc0000001, 0x0, 0x1, 0xffffff89, 0x800, 0x9, 0x48d4}, {0xa, 0x4, 0x1, 0x7, 0x7, 0x80000007, 0x5}, {0x40000000, 0x8, 0x1, 0x3ff, 0x7ffffdff, 0x8005, 0x4}, {0x80000007, 0x2, 0x1, 0x8001, 0xdf2, 0x4, 0x9}, {0x9ba32b2b2f59e442, 0x2bb, 0x5, 0xe, 0x3, 0x7ff, 0x8}, {0x80000000, 0x100, 0x6, 0x6, 0x3, 0x2, 0x3}]}) executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'team_slave_1\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000100)="e80000", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f drivers/mmc/core/host.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: bisecting 38 programs bisect: split chunks (needed=false): <37> bisect: split chunk #0 of len 37 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 25, 27, 28, 11, 30, 25, 6, 9, 22, 6, 28, 8, 24, 29, 30, 36, 30, 7, 8, 27, 4, 10, 6, 29] detailed listing: executing program 33: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x3be1cae) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r2, 0x8}, &(0x7f0000000100)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='wusb3801 0x', 0xb) executing program 3: connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0xa, 0x28102) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, 0x0, 0xa01, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x3, 0x51, 0x2f, 0x0, 0xc}}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") read(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x9) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000007c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4001e4"], 0x0, 0x0, 0x0, 0x0}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x20, 0xe, 0x12, {0x12, 0x1b, "7fa42bac99e1af881c575ec83d81941c"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x9, 0x28, "bc29d959624f79a0ead599ca184212dd5ca69c5d2575b29fe12d116608f41784773808465d36e653"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "074ef4"}, &(0x7f0000000300)={0x20, 0x82, 0x1, "fb"}, &(0x7f0000000340)={0x20, 0x83, 0x3, "7f983c"}, &(0x7f0000000380)={0x20, 0x84, 0x2, "16ed"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "259819"}}) syz_usb_disconnect(r0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10200, 0x140) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0xb, 0x7f, '\x00', 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './proc\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)=@x86={0x28, 0x5, 0x6, 0x0, 0x9, 0xb, 0x1, 0x7, 0x6, 0x4, 0x8, 0x8, 0x0, 0x3, 0x0, 0x40, 0x3a, 0xa, 0x9, '\x00', 0x5, 0x7fffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x122) (async, rerun: 64) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0xa, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async, rerun: 64) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3fffff) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c40000000002010300000000000000000700000224000a0000000000000007000800014000000000080001400000000108000140000000018c000a80880002800c000280050001002100000006000340000200002c000180141efaa25900000000000000000000000000000114000400fe80000000000000ae00000000000000aa2c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb0c00028005000100210000000c000280050001003a0000"], 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async) r4 = socket(0x10, 0x803, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) (async) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, 0x0, 0x29) (async) sendto(r4, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000380)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (rerun: 64) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async, rerun: 32) r8 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) (async) getsockopt$inet6_opts(r9, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000340)=0xffffffffffffffe6) executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="2d000000010001", 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x6c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x60}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000003c0), 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x6, 0x301200) syz_usb_connect(0x3, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e000101008032090400"], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000080)="01e9ff000980ffff", 0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000040)) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x270c, 0x20, 0x1, 0x1, 0x2, &(0x7f0000000300)=[0x0], 0x1, 0x0}) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r6, r6, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x12) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) syz_usb_connect$midi(0x2, 0x100, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0x75, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x1, 0x1, 0x2, 0x90, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0xc, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x81, 0x53}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf, 0x4}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0xb5, 0x3, [{0x1, 0x3}, {0xc6, 0x1}, {0x0, 0x2}], 0x2}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x16, 0x2, [{0x3, 0x5}, {0x6, 0xc0}], 0x5}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3, 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x9, 0x31}, @ms_header={0x7, 0x24, 0x1, 0x400, 0x7}], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x9, 0x2, 0x4, {0x6, 0x25, 0x1, 0x2, "f6c6"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x6, 0x9, 0x4, {0xe, 0x25, 0x1, 0xa, "8fd5b9425e2611c9e5a2"}}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x2, 0x7, 0xd1, {0xe, 0x25, 0x1, 0xa, "50607cc2566558fe8844"}}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x1, 0x1, 0xa, {0xf, 0x25, 0x1, 0xb, "04539b0d7a2075ea9b32ea"}}}, {{0x9, 0x5, 0x88, 0x0, 0x10, 0xe, 0x5, 0x8, {0xc, 0x25, 0x1, 0x8, "5e8e7f670ad22ffa"}}}, {{0x9, 0x5, 0xf, 0x3, 0x90, 0x4, 0x7, 0xf5, {0x12, 0x25, 0x1, 0xe, "503429d17653f35e90bd57a533d4"}}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x2, 0x2, 0x83, {0xa, 0x25, 0x1, 0x6, "8914ff563ae1"}}}]}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x1, 0xb, 0x9, 0x40, 0xa}, 0xc8, &(0x7f0000000480)={0x5, 0xf, 0xc8, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x1, 0xba, 0x78a, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x30, 0x4, 0x4e0f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x7, 0x9, 0xa, 0x10}, @generic={0x7b, 0x10, 0x1, "b25bb0d05ea07fa96e287813940ba9d2c19bb709442c3b1a32e4603f7223686fac94d57679586e5a0b24c019d28f4b3e221b19b2dc80c41570f0454ae0146087599c2e0c9b8ea767a1e8a7a42aa9ecffc475f089b84bad30568f9e80558eb33ae65baafb950d0ef3b59932c01aca9f37ac8e57827bcc82b8"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "7468da96456a6dfadad11227f23195d7"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9869e7c9a48e1c0d91c79e03e1f8d32a"}]}, 0x2, [{0xe2, &(0x7f0000000580)=@string={0xe2, 0x3, "8c803447a92e14bb0bef98624acc405643f3a92d70c545201d0415a44ca4df1ab1cea0c9393be4ec57d3becf2f41adf41fe15d4f5904ebf3ce177b59f093f35967ae96c02edab48f7b58a64ed382a16898e413e9c8dfa45cf9806a024c643009c108cee7e546e990b076e6fb8faaa874e17312fe50be99a36900fca58c876afd4209829a5cc1f5199fe18fbd2a7e283263d1197b432706447f515b05a92625362157f40affcc2e6619372405380c9ad9839fa1bdb9fd1a18eb9699ab56ca9974da1105673c0855999a10fb0ca825e4b1d5333ac38eba79524cf52140eda0b463"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000780)={0x0, 0x0, 0x6, "66c628c5c93a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 5: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x10000000000, 0x240800) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0xb) executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xfb, 0xa0, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x2, 0x9, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x80, 0xb8, {0x8, 0x25, 0x1, 0x80, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x0, 0x1, {0x8, 0x25, 0x1, 0x82, 0x0, 0x6, 0x8}}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000024c0), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000002b40)={0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r0, 0xc0106446, &(0x7f0000000180)={r2}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x8, 0x4) executing program 5: r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003044b11831bc8adcd"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x404, 0x70bd2c, 0x25dfdbfe, {0x10, 0x1, 0x1, 0x0, 0x80, 0xffff, 0x80000001, 0x3, 0x0, 0x101, 0x10000}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100000000090400"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) (async) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003044b11831bc8adcd"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x404, 0x70bd2c, 0x25dfdbfe, {0x10, 0x1, 0x1, 0x0, 0x80, 0xffff, 0x80000001, 0x3, 0x0, 0x101, 0x10000}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, 0x0}) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100000000090400"], 0x0) (async) executing program 3: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff000705810240000007050202400000070583"], 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c77, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0), 0x1, 0x8}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0xffff, 0xc57, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x12}}}, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012143, 0x0, {0xb}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_io_uring_modify_offsets$flags(r1, r6, 0x38, 0x0) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000002000000080001006e61740040000000030a0104000000000000000002000000080001006e6174000800030073797a00080007006e61740014000400080001000000000308000200ffffff9c84000000060a0104000000000000000002000000080001006e6174000800020073797a00600004005c0001000b00010074617267657400004c00020009000100444e4154000000000800020000000002340003"], 0x108}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x4000) (async, rerun: 32) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000002c0)=0xe8) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x4, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000140)=0xfffebffd) (async) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) r8 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000f80), 0xe801, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000fc0)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000001000)=0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)={0x21c, 0x28, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@generic="b36335d309f47bc1c429d35e0a8568c12f0356ba5d48fe37c59fe41e94beb49ab04a489b03964c8a7da2feb53ca6c48799693771cb67a7", @nested={0x1d2, 0x25, 0x0, 0x1, [@generic="701ee9453892458fc9887771a28783d0beb641640af60e1d46ea2d327fb6ebedd6c89a1395bb836cbf0b307c0c755c4c8302eeac48433a451d46d592e5548a60cab378ccb38d90e3fbc8ab476199d80dafadb9d4f18be3e0d3267157171cb59e2e51be096a1cf1be7db319c3356e4a154a6d0ec2fc79c5f19c29570dc1df259902b40f03b557c0957866eca88be1a4bb25e3b3c2a5c13c3a2f3a3ba8bcdb942d17fba2a3bb216d0048b63084fcda4842c3ed660e86cdab", @nested={0x4, 0xf3}, @nested={0x4, 0x74}, @typed={0x8, 0x14d, 0x0, 0x0, @uid=r2}, @nested={0x4, 0xfc}, @typed={0x19, 0x83, 0x0, 0x0, @str='ns/time_for_children\x00'}, @typed={0xa, 0x97, 0x0, 0x0, @str='-u$\':\x00'}, @generic="534314d63695be21612f94b3a4b835c20d18f9d119493a8bf5da6c4f0e3425bfef83f2b4d63c92cdbb34b3e079b10a0cadda5efb7d1c563fc39e838cbfffe07b0f7b9f5f7545ed9792d44443b6256a1d6cf0aeecf6b8585d5990d9b28dcbd00e008eb539a35833b500ef233c752d6b2c8e2e8899cdfc0ab961d96628294c88ce0b68b8148a98dfc4ab0b4456559b7d3a2b95c5fabc7383f613f6ebdf8bf06ab8f676f6d20cce4194ba8eb41c1dfbfc57d272851d46108ae346d5ed5b35558d36cd2f021c2e49e14a1ee30577883c4a495861ee", @generic, @typed={0x8, 0x167, 0x0, 0x0, @fd=r7}]}]}, 0x21c}, {&(0x7f0000000680)={0x424, 0x1e, 0x800, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x4, 0x0, 0x0, @pid=r8}, @nested={0xbf, 0x5, 0x0, 0x1, [@nested={0x4, 0x5b}, @nested={0x4, 0x2b3f}, @generic="c91dbc84a63a2b635d4dc86bf650de8cfd883de5561059a6e6f2137f7b6324b193beca109c53adc8d69faa58abc6dbe28bd0dca1b13b948769759ed4b68f563787bb0354ac2a990ba658e3ed820843883a55eff26140a0fbb815b556284623e06c8ca2f37af8d87920becb7b89d70c7c4b846020eae342669e403e06926d9ddea6924a108afa3b9f78", @generic="7aa8f2012ab024ddff07ecabc1037d81b8ca6f8e9ca7b7391a5425b2dae34daf13a3cd3a3133", @nested={0x4, 0x167}]}, @typed={0x4, 0x8c}, @nested={0xe5, 0xd4, 0x0, 0x1, [@nested={0x4, 0x11}, @nested={0x4, 0x143}, @generic="5b4fc421b3861f8d84d73563612179115bb5913296748adb1bce72af022e6e09f6d600e8a9e51ccf84e41a630e0ac395aa2439ff83ec98018805bed1196d28af6d775e3d0f56f21ae1855f902a17ced82266b3307b9948fd5eda45710fafbda9cea690ec6d3b68c1b46c6a1b72d2241354426278bb6282aef206110b81b07f7a9bfa2ea01634d72e40a9475c00d8bbe64a40be89ec76e0705b01a2a2aef22c0da9404b94f1a770af4212e629ea9d4fa0d8e55e80b99b07792a792148e0b8874d220174d5dec94da51eed688c1787dd85081d7a78e4036d6865"]}, @nested={0xed, 0x50, 0x0, 0x1, [@nested={0x4, 0x13d}, @generic="f406e387603bf979433a594f18f53b5c3913c4a700fea11a12712a27c4ab1d2958725b3e7f0c9a53372d50fa1e79bec24d8b1848ac947126b81fed262b9261186d71a65481e768edbe13d335823c3dacb9b3a4617439dab028801b1f710c544987dcb9df85ea41ba5da1d3bf448fe234a7b657b73372e97ed3cd60a89e3887c78a2b3627999ec50e7cd8616b515f229c9227b988150869a005858c6ea6621339660acaf3c4fdadcdeb01f222dcba47b626e16fc481fd49e6fad559320429b4c8ac95f8be8bb3170725ff69312e258af6c7d7c0c15a96c08fe0d0498e0498f4dac5f4efcdb7"]}, @generic="632304280a693d645c266a0ca9a47ddd660ba3b7d35dc8b1906b27eb16427707a9892145b009d105ea740bfdfcf6c5f323bfa691e314732d18ccb3d88568c184cef4fedc508e089463798647f4147d0ea3d5a683b1a553d2ff65d312105474e3fadcab92e316f44ff0041464ef6104720c49aaec7e4cc6073973a4c06b80220b1b324b67a40ea88f40fe126e18f0c002f53956ea97c5d94dcc410e8db8f182d08e17a82f5ec873d41c436823a929e0e66b2fe60946d691aaa62116906e5fd79ffa9655d08a97a31921e6dfde332d7b2b0af1b4dcae6a575d080c7e5c242c6be408f0aef85b58990333274c67837241723b", @generic="cc59409222430888c6a0eb51fa0d7f34ee09650b24a4e58316ab4669ca1f094e69c8f22adb3c97c50d4b472cd092184cf81ef1ba59011b69fdfd6c62a5f92afa2b0f8a8ba0f2ed36761e3ea5acab0dc99357e952f66672d2c6edf4d80cab7a07f9cb06ec97d1e2ebbf400debd3b417b83bd83b83597285ca649d", @generic="16dc91"]}, 0x424}, {&(0x7f0000000ac0)={0x1a8, 0x39, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x18, 0x8f, 0x0, 0x1, [@typed={0x14, 0x157, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0xa0, 0x1e, 0x0, 0x0, @binary="cf6fc75504ac56e2bcfc1569a86c93c3fa7bf31fe0fbc6b9ee7bf61007eb9f576651829f0c279a3cd5013a6f99d3e98364c20f907af6fd2ff18c148341777683868fc09cd2ec5be45bd4adc39a78de0df412c8a72aaca98e4c2d59f85d21b89af8d459d02152b36e189e69458466c0754b38b6abd9867dbfe3a57930fa47e1f98d16b0450c18238efc669e90ca8320c202cf4be537b37c164768cdaa"}, @generic="b7093ad4d6bb2fdf58fb10d48570372f621301dd8b903c1d73f7766cea15048accef805d9c0ddca4ff95255c8d9a58efe4f0bb28fa846d1ede133194681a98be293abb119b28", @typed={0x19, 0x108, 0x0, 0x0, @str='ns/time_for_children\x00'}, @generic="2353e591c7f2a9bd8af5dd87cc73c489babbd885a7b45cd7911f5fcc6a699bb7e62e095f1394eadf8a01b467c4a16747dbfa96295b6e90ad00f69181b17a408bfcd8f673c5836baf5cb28e519f08aeeeb2c11b2b2c71d53ef65aac0404f59584c5423fdca9a4bfb59f9eb9e9bebb1a0865eb28f04d2dab503e12", @typed={0x4, 0x14}]}, 0x1a8}, {&(0x7f0000000d40)={0x1f4, 0x1c, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@generic="f18eeec0791c019962db297a8df1f4936a5befbdeb810298a978055f3e4d63610b9faac7ebd7d769ee060fc3640907bee3cd0ae95a99793f4af8bf1f879d25e490d7def29f19c213ca8921fa27c004eab58fac8dd7891d6d6e26b9d59c6b09b4439f428152ce870e269aa8802e82f90d4e4f0d97d862dfc5beee62383a47d10dcf8bcaf811c6723ab90be51aba7ceff809ed7d8474", @nested={0x8, 0x75, 0x0, 0x1, [@nested={0x4, 0x5e}]}, @nested={0x139, 0xdd, 0x0, 0x1, [@generic="ec0da5aebeb0b0b05bd75280dbabe8483c68b93092be99e5847409835cfb2fdced8512a1c0b101674a3c5be225b4422de3e579eddc39bbb927659c373f4cefe0557529c9532d1cc3ed59f76a7c323d6db153448ccb3d1c3a974ec54a5b91bffce21586c54e648caea22c03206bde2edec6d58986190ce4252887ce7c5099e84df1bdf220b704efe62e7857ff18cf157be0e18a6c71cac88a5a09e78190bd10280989af07", @typed={0x8, 0x69, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x115}, @typed={0x8, 0x9a, 0x0, 0x0, @uid=r9}, @typed={0x8, 0xe4, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xdd}, @generic="a89344d9b249c158149c45846b067862c95e0840a6e064f001c49ec40d8a1a194b12be818a3bbe7d331bf3bbe5f9833a4ccc50031a86579d6c9a85083241637ca7d53934d8987ac59992422c7b2dd9c46715185e526b7860b6946c847657311259711e39aa59dbe22d66f2e345b4fbd755"]}, @typed={0x7, 0x48, 0x0, 0x0, @str='$#\x00'}]}, 0x1f4}], 0x4, &(0x7f0000001040)=[@rights={{0x34, 0x1, 0x1, [r10, r1, r11, r0, r1, r0, r1, r0, r12]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x58, 0x1}, 0x4040) executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'team_slave_1\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000100)="e80000", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x84}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c9004000"/32) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000008bd2871000000000000010902240001000010020903f705020200030920000003115789a4a6aa8103400000040416073f38bf9158f364d8ba7eae48a8b376a1ba88"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x7, 0x18, {0x18, 0x27, "806b562fd275239f7e5a300ac1ffa3a5ba89db83b04e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000b00)) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90041000100"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90042000200"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90043000300"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90044000400"/32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="bd142e7d01800000b25db50627", @ANYRES16=r9, @ANYBLOB="010027bd7000fcd3df2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x10008001}, 0x400a0) close_range(r6, r0, 0x0) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90061002000"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="2700000000000000000000001000"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="cb000000000000000100"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="2300000000000000000000000000000000000000000000000000000001000000") syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x40, 0x2, 0x3e, {0x3e, 0x31, "8125c524380c3191d1881aed66a5c7cafddb0d238badb69a405b74a2ad5b106f1337b22ed95d243393a22beb4340f65d8b8874a6fc2606feefb58af7"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}, &(0x7f0000000280)=ANY=[@ANYBLOB="00221e000000ab81263da0c331ce85f621d5a28b00475000b3e4279203102583a8238228"], &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0x5, 0x1, {0x22, 0xbc2}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x40, 0x10, 0x3f, "306cd942397f10e22f74bd6afc6a9010ff62e644c6c2d5c8ca6b977e47ff2d6e34eaf081ff90fee8cec6bd39c00d6e319e1a663ce68e1789435fbbb3014410"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x1, 0x16, "9a4e6ec57303270726b6cfacccc47cd028471852b64e"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x2}}) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="1200"/32) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_write(r2, 0x82, 0x20, &(0x7f0000000200)="1200"/32) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x19f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x404c044}, 0x0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040061) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000380)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x19f) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000000)='3', 0x4e) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2) (async) sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x404c044}, 0x0) (async) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040061) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000380)=0x3) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) (async) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) executing program 0: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x11, 0x8848, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000003c0)=@qipcrtr={0x2a, 0x2, 0x4000}, 0x80, &(0x7f0000000200)=[{&(0x7f0000001500)="000502000b00000000002d39", 0xc}], 0x1}, 0x4000888) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x23b, 0x6, {"05b8e3d46359cabd7c6744e571777c26"}, 0x2, 0x5, 0x7fffffff}}}, 0xa0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f00000005c0)=""/46, 0x2e}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f00000018c0)=""/4091, 0xffb}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x2100, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) socket$alg(0x26, 0x5, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100003600010000070000ffdbdf25020100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x20000040) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x2, 0x2, 0x7f}}, 0x28) executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200, 0x2) mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) setns(0xc9, 0x0) r1 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) write(r2, 0x0, 0xfffffd47) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@fd={0xd129, 0x2, 0x4, 0xe000, 0x6ebd, {}, {0x2, 0x8, 0x36, 0xc, 0x6, 0xd1, "9b43e82a"}, 0x408, 0x4, {}, 0x4}) executing program 0: r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)={0x38, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0xc0000001, 0x0, 0x1, 0xffffff89, 0x800, 0x9, 0x48d4}, {0xa, 0x4, 0x1, 0x7, 0x7, 0x80000007, 0x5}, {0x40000000, 0x8, 0x1, 0x3ff, 0x7ffffdff, 0x8005, 0x4}, {0x80000007, 0x2, 0x1, 0x8001, 0xdf2, 0x4, 0x9}, {0x9ba32b2b2f59e442, 0x2bb, 0x5, 0xe, 0x3, 0x7ff, 0x8}, {0x80000000, 0x100, 0x6, 0x6, 0x3, 0x2, 0x3}]}) executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'team_slave_1\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000100)="e80000", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f drivers/mmc/core/host.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 29, 30, 36, 30, 7, 8, 27, 4, 10, 6, 29] detailed listing: executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000002000000080001006e61740040000000030a0104000000000000000002000000080001006e6174000800030073797a00080007006e61740014000400080001000000000308000200ffffff9c84000000060a0104000000000000000002000000080001006e6174000800020073797a00600004005c0001000b00010074617267657400004c00020009000100444e4154000000000800020000000002340003"], 0x108}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x4000) (async, rerun: 32) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000002c0)=0xe8) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x4, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000140)=0xfffebffd) (async) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) r8 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000f80), 0xe801, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000fc0)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000001000)=0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)={0x21c, 0x28, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@generic="b36335d309f47bc1c429d35e0a8568c12f0356ba5d48fe37c59fe41e94beb49ab04a489b03964c8a7da2feb53ca6c48799693771cb67a7", @nested={0x1d2, 0x25, 0x0, 0x1, [@generic="701ee9453892458fc9887771a28783d0beb641640af60e1d46ea2d327fb6ebedd6c89a1395bb836cbf0b307c0c755c4c8302eeac48433a451d46d592e5548a60cab378ccb38d90e3fbc8ab476199d80dafadb9d4f18be3e0d3267157171cb59e2e51be096a1cf1be7db319c3356e4a154a6d0ec2fc79c5f19c29570dc1df259902b40f03b557c0957866eca88be1a4bb25e3b3c2a5c13c3a2f3a3ba8bcdb942d17fba2a3bb216d0048b63084fcda4842c3ed660e86cdab", @nested={0x4, 0xf3}, @nested={0x4, 0x74}, @typed={0x8, 0x14d, 0x0, 0x0, @uid=r2}, @nested={0x4, 0xfc}, @typed={0x19, 0x83, 0x0, 0x0, @str='ns/time_for_children\x00'}, @typed={0xa, 0x97, 0x0, 0x0, @str='-u$\':\x00'}, @generic="534314d63695be21612f94b3a4b835c20d18f9d119493a8bf5da6c4f0e3425bfef83f2b4d63c92cdbb34b3e079b10a0cadda5efb7d1c563fc39e838cbfffe07b0f7b9f5f7545ed9792d44443b6256a1d6cf0aeecf6b8585d5990d9b28dcbd00e008eb539a35833b500ef233c752d6b2c8e2e8899cdfc0ab961d96628294c88ce0b68b8148a98dfc4ab0b4456559b7d3a2b95c5fabc7383f613f6ebdf8bf06ab8f676f6d20cce4194ba8eb41c1dfbfc57d272851d46108ae346d5ed5b35558d36cd2f021c2e49e14a1ee30577883c4a495861ee", @generic, @typed={0x8, 0x167, 0x0, 0x0, @fd=r7}]}]}, 0x21c}, {&(0x7f0000000680)={0x424, 0x1e, 0x800, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x4, 0x0, 0x0, @pid=r8}, @nested={0xbf, 0x5, 0x0, 0x1, [@nested={0x4, 0x5b}, @nested={0x4, 0x2b3f}, @generic="c91dbc84a63a2b635d4dc86bf650de8cfd883de5561059a6e6f2137f7b6324b193beca109c53adc8d69faa58abc6dbe28bd0dca1b13b948769759ed4b68f563787bb0354ac2a990ba658e3ed820843883a55eff26140a0fbb815b556284623e06c8ca2f37af8d87920becb7b89d70c7c4b846020eae342669e403e06926d9ddea6924a108afa3b9f78", @generic="7aa8f2012ab024ddff07ecabc1037d81b8ca6f8e9ca7b7391a5425b2dae34daf13a3cd3a3133", @nested={0x4, 0x167}]}, @typed={0x4, 0x8c}, @nested={0xe5, 0xd4, 0x0, 0x1, [@nested={0x4, 0x11}, @nested={0x4, 0x143}, @generic="5b4fc421b3861f8d84d73563612179115bb5913296748adb1bce72af022e6e09f6d600e8a9e51ccf84e41a630e0ac395aa2439ff83ec98018805bed1196d28af6d775e3d0f56f21ae1855f902a17ced82266b3307b9948fd5eda45710fafbda9cea690ec6d3b68c1b46c6a1b72d2241354426278bb6282aef206110b81b07f7a9bfa2ea01634d72e40a9475c00d8bbe64a40be89ec76e0705b01a2a2aef22c0da9404b94f1a770af4212e629ea9d4fa0d8e55e80b99b07792a792148e0b8874d220174d5dec94da51eed688c1787dd85081d7a78e4036d6865"]}, @nested={0xed, 0x50, 0x0, 0x1, [@nested={0x4, 0x13d}, @generic="f406e387603bf979433a594f18f53b5c3913c4a700fea11a12712a27c4ab1d2958725b3e7f0c9a53372d50fa1e79bec24d8b1848ac947126b81fed262b9261186d71a65481e768edbe13d335823c3dacb9b3a4617439dab028801b1f710c544987dcb9df85ea41ba5da1d3bf448fe234a7b657b73372e97ed3cd60a89e3887c78a2b3627999ec50e7cd8616b515f229c9227b988150869a005858c6ea6621339660acaf3c4fdadcdeb01f222dcba47b626e16fc481fd49e6fad559320429b4c8ac95f8be8bb3170725ff69312e258af6c7d7c0c15a96c08fe0d0498e0498f4dac5f4efcdb7"]}, @generic="632304280a693d645c266a0ca9a47ddd660ba3b7d35dc8b1906b27eb16427707a9892145b009d105ea740bfdfcf6c5f323bfa691e314732d18ccb3d88568c184cef4fedc508e089463798647f4147d0ea3d5a683b1a553d2ff65d312105474e3fadcab92e316f44ff0041464ef6104720c49aaec7e4cc6073973a4c06b80220b1b324b67a40ea88f40fe126e18f0c002f53956ea97c5d94dcc410e8db8f182d08e17a82f5ec873d41c436823a929e0e66b2fe60946d691aaa62116906e5fd79ffa9655d08a97a31921e6dfde332d7b2b0af1b4dcae6a575d080c7e5c242c6be408f0aef85b58990333274c67837241723b", @generic="cc59409222430888c6a0eb51fa0d7f34ee09650b24a4e58316ab4669ca1f094e69c8f22adb3c97c50d4b472cd092184cf81ef1ba59011b69fdfd6c62a5f92afa2b0f8a8ba0f2ed36761e3ea5acab0dc99357e952f66672d2c6edf4d80cab7a07f9cb06ec97d1e2ebbf400debd3b417b83bd83b83597285ca649d", @generic="16dc91"]}, 0x424}, {&(0x7f0000000ac0)={0x1a8, 0x39, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x18, 0x8f, 0x0, 0x1, [@typed={0x14, 0x157, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0xa0, 0x1e, 0x0, 0x0, @binary="cf6fc75504ac56e2bcfc1569a86c93c3fa7bf31fe0fbc6b9ee7bf61007eb9f576651829f0c279a3cd5013a6f99d3e98364c20f907af6fd2ff18c148341777683868fc09cd2ec5be45bd4adc39a78de0df412c8a72aaca98e4c2d59f85d21b89af8d459d02152b36e189e69458466c0754b38b6abd9867dbfe3a57930fa47e1f98d16b0450c18238efc669e90ca8320c202cf4be537b37c164768cdaa"}, @generic="b7093ad4d6bb2fdf58fb10d48570372f621301dd8b903c1d73f7766cea15048accef805d9c0ddca4ff95255c8d9a58efe4f0bb28fa846d1ede133194681a98be293abb119b28", @typed={0x19, 0x108, 0x0, 0x0, @str='ns/time_for_children\x00'}, @generic="2353e591c7f2a9bd8af5dd87cc73c489babbd885a7b45cd7911f5fcc6a699bb7e62e095f1394eadf8a01b467c4a16747dbfa96295b6e90ad00f69181b17a408bfcd8f673c5836baf5cb28e519f08aeeeb2c11b2b2c71d53ef65aac0404f59584c5423fdca9a4bfb59f9eb9e9bebb1a0865eb28f04d2dab503e12", @typed={0x4, 0x14}]}, 0x1a8}, {&(0x7f0000000d40)={0x1f4, 0x1c, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@generic="f18eeec0791c019962db297a8df1f4936a5befbdeb810298a978055f3e4d63610b9faac7ebd7d769ee060fc3640907bee3cd0ae95a99793f4af8bf1f879d25e490d7def29f19c213ca8921fa27c004eab58fac8dd7891d6d6e26b9d59c6b09b4439f428152ce870e269aa8802e82f90d4e4f0d97d862dfc5beee62383a47d10dcf8bcaf811c6723ab90be51aba7ceff809ed7d8474", @nested={0x8, 0x75, 0x0, 0x1, [@nested={0x4, 0x5e}]}, @nested={0x139, 0xdd, 0x0, 0x1, [@generic="ec0da5aebeb0b0b05bd75280dbabe8483c68b93092be99e5847409835cfb2fdced8512a1c0b101674a3c5be225b4422de3e579eddc39bbb927659c373f4cefe0557529c9532d1cc3ed59f76a7c323d6db153448ccb3d1c3a974ec54a5b91bffce21586c54e648caea22c03206bde2edec6d58986190ce4252887ce7c5099e84df1bdf220b704efe62e7857ff18cf157be0e18a6c71cac88a5a09e78190bd10280989af07", @typed={0x8, 0x69, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x115}, @typed={0x8, 0x9a, 0x0, 0x0, @uid=r9}, @typed={0x8, 0xe4, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xdd}, @generic="a89344d9b249c158149c45846b067862c95e0840a6e064f001c49ec40d8a1a194b12be818a3bbe7d331bf3bbe5f9833a4ccc50031a86579d6c9a85083241637ca7d53934d8987ac59992422c7b2dd9c46715185e526b7860b6946c847657311259711e39aa59dbe22d66f2e345b4fbd755"]}, @typed={0x7, 0x48, 0x0, 0x0, @str='$#\x00'}]}, 0x1f4}], 0x4, &(0x7f0000001040)=[@rights={{0x34, 0x1, 0x1, [r10, r1, r11, r0, r1, r0, r1, r0, r12]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x58, 0x1}, 0x4040) executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'team_slave_1\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000100)="e80000", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x84}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c9004000"/32) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000008bd2871000000000000010902240001000010020903f705020200030920000003115789a4a6aa8103400000040416073f38bf9158f364d8ba7eae48a8b376a1ba88"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x7, 0x18, {0x18, 0x27, "806b562fd275239f7e5a300ac1ffa3a5ba89db83b04e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000b00)) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90041000100"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90042000200"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90043000300"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90044000400"/32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="bd142e7d01800000b25db50627", @ANYRES16=r9, @ANYBLOB="010027bd7000fcd3df2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x10008001}, 0x400a0) close_range(r6, r0, 0x0) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90061002000"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="2700000000000000000000001000"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="cb000000000000000100"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="2300000000000000000000000000000000000000000000000000000001000000") syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x40, 0x2, 0x3e, {0x3e, 0x31, "8125c524380c3191d1881aed66a5c7cafddb0d238badb69a405b74a2ad5b106f1337b22ed95d243393a22beb4340f65d8b8874a6fc2606feefb58af7"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}, &(0x7f0000000280)=ANY=[@ANYBLOB="00221e000000ab81263da0c331ce85f621d5a28b00475000b3e4279203102583a8238228"], &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0x5, 0x1, {0x22, 0xbc2}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x40, 0x10, 0x3f, "306cd942397f10e22f74bd6afc6a9010ff62e644c6c2d5c8ca6b977e47ff2d6e34eaf081ff90fee8cec6bd39c00d6e319e1a663ce68e1789435fbbb3014410"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x1, 0x16, "9a4e6ec57303270726b6cfacccc47cd028471852b64e"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x2}}) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="1200"/32) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_write(r2, 0x82, 0x20, &(0x7f0000000200)="1200"/32) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x19f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x404c044}, 0x0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040061) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000380)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x19f) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000000)='3', 0x4e) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2) (async) sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x404c044}, 0x0) (async) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040061) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000380)=0x3) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) (async) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) executing program 0: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x11, 0x8848, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000003c0)=@qipcrtr={0x2a, 0x2, 0x4000}, 0x80, &(0x7f0000000200)=[{&(0x7f0000001500)="000502000b00000000002d39", 0xc}], 0x1}, 0x4000888) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x23b, 0x6, {"05b8e3d46359cabd7c6744e571777c26"}, 0x2, 0x5, 0x7fffffff}}}, 0xa0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f00000005c0)=""/46, 0x2e}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f00000018c0)=""/4091, 0xffb}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x2100, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) socket$alg(0x26, 0x5, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100003600010000070000ffdbdf25020100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x20000040) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x2, 0x2, 0x7f}}, 0x28) executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200, 0x2) mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) setns(0xc9, 0x0) r1 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) write(r2, 0x0, 0xfffffd47) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@fd={0xd129, 0x2, 0x4, 0xe000, 0x6ebd, {}, {0x2, 0x8, 0x36, 0xc, 0x6, 0xd1, "9b43e82a"}, 0x408, 0x4, {}, 0x4}) executing program 0: r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)={0x38, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0xc0000001, 0x0, 0x1, 0xffffff89, 0x800, 0x9, 0x48d4}, {0xa, 0x4, 0x1, 0x7, 0x7, 0x80000007, 0x5}, {0x40000000, 0x8, 0x1, 0x3ff, 0x7ffffdff, 0x8005, 0x4}, {0x80000007, 0x2, 0x1, 0x8001, 0xdf2, 0x4, 0x9}, {0x9ba32b2b2f59e442, 0x2bb, 0x5, 0xe, 0x3, 0x7ff, 0x8}, {0x80000000, 0x100, 0x6, 0x6, 0x3, 0x2, 0x3}]}) executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'team_slave_1\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000100)="e80000", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 25, 27, 28, 11, 30, 25, 6, 9, 22, 6, 28, 8, 30] detailed listing: executing program 33: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x3be1cae) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r2, 0x8}, &(0x7f0000000100)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='wusb3801 0x', 0xb) executing program 3: connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0xa, 0x28102) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, 0x0, 0xa01, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x3, 0x51, 0x2f, 0x0, 0xc}}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") read(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x9) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000007c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4001e4"], 0x0, 0x0, 0x0, 0x0}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x20, 0xe, 0x12, {0x12, 0x1b, "7fa42bac99e1af881c575ec83d81941c"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x9, 0x28, "bc29d959624f79a0ead599ca184212dd5ca69c5d2575b29fe12d116608f41784773808465d36e653"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "074ef4"}, &(0x7f0000000300)={0x20, 0x82, 0x1, "fb"}, &(0x7f0000000340)={0x20, 0x83, 0x3, "7f983c"}, &(0x7f0000000380)={0x20, 0x84, 0x2, "16ed"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "259819"}}) syz_usb_disconnect(r0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10200, 0x140) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0xb, 0x7f, '\x00', 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './proc\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)=@x86={0x28, 0x5, 0x6, 0x0, 0x9, 0xb, 0x1, 0x7, 0x6, 0x4, 0x8, 0x8, 0x0, 0x3, 0x0, 0x40, 0x3a, 0xa, 0x9, '\x00', 0x5, 0x7fffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x122) (async, rerun: 64) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0xa, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async, rerun: 64) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3fffff) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c40000000002010300000000000000000700000224000a0000000000000007000800014000000000080001400000000108000140000000018c000a80880002800c000280050001002100000006000340000200002c000180141efaa25900000000000000000000000000000114000400fe80000000000000ae00000000000000aa2c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb0c00028005000100210000000c000280050001003a0000"], 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async) r4 = socket(0x10, 0x803, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) (async) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, 0x0, 0x29) (async) sendto(r4, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000380)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (rerun: 64) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async, rerun: 32) r8 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) (async) getsockopt$inet6_opts(r9, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000340)=0xffffffffffffffe6) executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="2d000000010001", 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x6c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x60}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000003c0), 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x6, 0x301200) syz_usb_connect(0x3, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e000101008032090400"], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000080)="01e9ff000980ffff", 0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000040)) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x270c, 0x20, 0x1, 0x1, 0x2, &(0x7f0000000300)=[0x0], 0x1, 0x0}) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r6, r6, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x12) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) syz_usb_connect$midi(0x2, 0x100, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0x75, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x1, 0x1, 0x2, 0x90, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0xc, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x81, 0x53}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf, 0x4}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0xb5, 0x3, [{0x1, 0x3}, {0xc6, 0x1}, {0x0, 0x2}], 0x2}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x16, 0x2, [{0x3, 0x5}, {0x6, 0xc0}], 0x5}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3, 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x9, 0x31}, @ms_header={0x7, 0x24, 0x1, 0x400, 0x7}], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x9, 0x2, 0x4, {0x6, 0x25, 0x1, 0x2, "f6c6"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x6, 0x9, 0x4, {0xe, 0x25, 0x1, 0xa, "8fd5b9425e2611c9e5a2"}}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x2, 0x7, 0xd1, {0xe, 0x25, 0x1, 0xa, "50607cc2566558fe8844"}}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x1, 0x1, 0xa, {0xf, 0x25, 0x1, 0xb, "04539b0d7a2075ea9b32ea"}}}, {{0x9, 0x5, 0x88, 0x0, 0x10, 0xe, 0x5, 0x8, {0xc, 0x25, 0x1, 0x8, "5e8e7f670ad22ffa"}}}, {{0x9, 0x5, 0xf, 0x3, 0x90, 0x4, 0x7, 0xf5, {0x12, 0x25, 0x1, 0xe, "503429d17653f35e90bd57a533d4"}}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x2, 0x2, 0x83, {0xa, 0x25, 0x1, 0x6, "8914ff563ae1"}}}]}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x1, 0xb, 0x9, 0x40, 0xa}, 0xc8, &(0x7f0000000480)={0x5, 0xf, 0xc8, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x1, 0xba, 0x78a, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x30, 0x4, 0x4e0f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x7, 0x9, 0xa, 0x10}, @generic={0x7b, 0x10, 0x1, "b25bb0d05ea07fa96e287813940ba9d2c19bb709442c3b1a32e4603f7223686fac94d57679586e5a0b24c019d28f4b3e221b19b2dc80c41570f0454ae0146087599c2e0c9b8ea767a1e8a7a42aa9ecffc475f089b84bad30568f9e80558eb33ae65baafb950d0ef3b59932c01aca9f37ac8e57827bcc82b8"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "7468da96456a6dfadad11227f23195d7"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9869e7c9a48e1c0d91c79e03e1f8d32a"}]}, 0x2, [{0xe2, &(0x7f0000000580)=@string={0xe2, 0x3, "8c803447a92e14bb0bef98624acc405643f3a92d70c545201d0415a44ca4df1ab1cea0c9393be4ec57d3becf2f41adf41fe15d4f5904ebf3ce177b59f093f35967ae96c02edab48f7b58a64ed382a16898e413e9c8dfa45cf9806a024c643009c108cee7e546e990b076e6fb8faaa874e17312fe50be99a36900fca58c876afd4209829a5cc1f5199fe18fbd2a7e283263d1197b432706447f515b05a92625362157f40affcc2e6619372405380c9ad9839fa1bdb9fd1a18eb9699ab56ca9974da1105673c0855999a10fb0ca825e4b1d5333ac38eba79524cf52140eda0b463"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000780)={0x0, 0x0, 0x6, "66c628c5c93a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 5: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x10000000000, 0x240800) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0xb) executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xfb, 0xa0, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x2, 0x9, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x80, 0xb8, {0x8, 0x25, 0x1, 0x80, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x0, 0x1, {0x8, 0x25, 0x1, 0x82, 0x0, 0x6, 0x8}}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000024c0), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000002b40)={0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r0, 0xc0106446, &(0x7f0000000180)={r2}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x8, 0x4) executing program 5: r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003044b11831bc8adcd"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x404, 0x70bd2c, 0x25dfdbfe, {0x10, 0x1, 0x1, 0x0, 0x80, 0xffff, 0x80000001, 0x3, 0x0, 0x101, 0x10000}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100000000090400"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) (async) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003044b11831bc8adcd"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x404, 0x70bd2c, 0x25dfdbfe, {0x10, 0x1, 0x1, 0x0, 0x80, 0xffff, 0x80000001, 0x3, 0x0, 0x101, 0x10000}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, 0x0}) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100000000090400"], 0x0) (async) executing program 3: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff000705810240000007050202400000070583"], 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c77, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0), 0x1, 0x8}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0xffff, 0xc57, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x12}}}, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012143, 0x0, {0xb}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_io_uring_modify_offsets$flags(r1, r6, 0x38, 0x0) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f drivers/mmc/core/host.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: the chunk can be dropped bisect: split chunks (needed=true): <13> bisect: split chunk #0 of len 13 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 9, 22, 6, 28, 8, 30] detailed listing: executing program 5: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x10000000000, 0x240800) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0xb) executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xfb, 0xa0, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x2, 0x9, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x80, 0xb8, {0x8, 0x25, 0x1, 0x80, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x0, 0x1, {0x8, 0x25, 0x1, 0x82, 0x0, 0x6, 0x8}}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000024c0), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000002b40)={0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r0, 0xc0106446, &(0x7f0000000180)={r2}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x8, 0x4) executing program 5: r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003044b11831bc8adcd"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x404, 0x70bd2c, 0x25dfdbfe, {0x10, 0x1, 0x1, 0x0, 0x80, 0xffff, 0x80000001, 0x3, 0x0, 0x101, 0x10000}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100000000090400"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) (async) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003044b11831bc8adcd"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x404, 0x70bd2c, 0x25dfdbfe, {0x10, 0x1, 0x1, 0x0, 0x80, 0xffff, 0x80000001, 0x3, 0x0, 0x101, 0x10000}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, 0x0}) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100000000090400"], 0x0) (async) executing program 3: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff000705810240000007050202400000070583"], 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c77, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0), 0x1, 0x8}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0xffff, 0xc57, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x12}}}, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012143, 0x0, {0xb}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_io_uring_modify_offsets$flags(r1, r6, 0x38, 0x0) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f drivers/mmc/core/host.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <6> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 28, 8, 30] detailed listing: executing program 3: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff000705810240000007050202400000070583"], 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c77, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0), 0x1, 0x8}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0xffff, 0xc57, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x12}}}, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012143, 0x0, {0xb}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_io_uring_modify_offsets$flags(r1, r6, 0x38, 0x0) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f drivers/mmc/core/host.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 30] detailed listing: executing program 1: syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff000705810240000007050202400000070583"], 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c77, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0), 0x1, 0x8}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0xffff, 0xc57, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x12}}}, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012143, 0x0, {0xb}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_io_uring_modify_offsets$flags(r1, r6, 0x38, 0x0) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 28, 30] detailed listing: executing program 3: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f drivers/mmc/core/host.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 30] detailed listing: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) symlinkat(&(0x7f0000002040)='./file1\x00', r0, &(0x7f0000000640)='./dev/file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000640)='./dev/file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r0, &(0x7f0000000640)='./dev/file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 30] detailed listing: executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit minimized 28 calls -> 24 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 29] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 29] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 29] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 29] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 28] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 28] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 28] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r3, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 28] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 27] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 26] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 26] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 26] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 26] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 26] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 26] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r3, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 26] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 26] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 26] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 26] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 26] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 26] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 26] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 25] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 25] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 25] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r2 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r3, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 24] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r2 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r3, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 24] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r1, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 24] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r2, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 23] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r2, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 23] detailed listing: executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r2, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) program did not crash minimized 30 calls -> 24 calls bisect: concatenated prog still exceeds 40 calls single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-sendmsg$NFT_BATCH-syz_open_procfs-read$eventfd-mkdirat-mount-setsockopt$XDP_UMEM_REG-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN-setsockopt$inet6_tcp_TCP_ULP detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r2, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit single: successfully extracted reproducer found reproducer with 24 syscalls minimizing guilty program testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-sendmsg$NFT_BATCH-syz_open_procfs-read$eventfd-mkdirat-mount-setsockopt$XDP_UMEM_REG-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r2, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-sendmsg$NFT_BATCH-syz_open_procfs-read$eventfd-mkdirat-mount-setsockopt$XDP_UMEM_REG-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86 detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r2, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-sendmsg$NFT_BATCH-syz_open_procfs-read$eventfd-mkdirat-mount-setsockopt$XDP_UMEM_REG-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r2, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-sendmsg$NFT_BATCH-syz_open_procfs-read$eventfd-mkdirat-mount-setsockopt$XDP_UMEM_REG-ioctl$KVM_SET_USER_MEMORY_REGION-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r2, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-sendmsg$NFT_BATCH-syz_open_procfs-read$eventfd-mkdirat-mount-setsockopt$XDP_UMEM_REG-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r2, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-sendmsg$NFT_BATCH-syz_open_procfs-read$eventfd-mkdirat-mount-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r1, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-sendmsg$NFT_BATCH-syz_open_procfs-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r1, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-sendmsg$NFT_BATCH-syz_open_procfs-read$eventfd-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r1, &(0x7f0000000000), 0x8) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-sendmsg$NFT_BATCH-syz_open_procfs-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-socket$xdp-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socket$xdp(0x2c, 0x3, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-recvmsg-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-bind$inet-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-madvise-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-ioctl$KVM_CREATE_VM-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit extracting C reproducer testing compiled C program (duration=3m41.303046996s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN program did not crash simplifying guilty program options testing program (duration=3m41.303046996s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit extracting C reproducer testing compiled C program (duration=3m41.303046996s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN program did not crash testing program (duration=3m41.303046996s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) program did not crash testing program (duration=3m41.303046996s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit validation run: crashed=true testing program (duration=3m41.303046996s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit validation run: crashed=true testing program (duration=3m41.303046996s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-bind$inet-setsockopt$inet_tcp_TCP_MD5SIG-setsockopt$inet_tcp_int-connect$inet-setsockopt$sock_int-sendmsg$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendmsg$NFT_BATCH-read$eventfd-mkdirat-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jbd2/commit.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: general protection fault in __bh_submit validation run: crashed=true reproducing took 6h3m51.128442689s repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] CPU: 1 UID: 0 PID: 4941 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:const_folio_flags include/linux/page-flags.h:345 [inline] RIP: 0010:folio_test_dropbehind include/linux/page-flags.h:600 [inline] RIP: 0010:__bh_submit+0x22d/0x8d0 fs/buffer.c:1109 Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 RSP: 0000:ffffc9000e957868 EFLAGS: 00010202 RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807bfc4ca0 RBP: 0000000000009801 R08: ffff88807bfc4cff R09: 1ffff1100f7f899f R10: dffffc0000000000 R11: ffffed100f7f89a0 R12: dffffc0000000000 R13: ffff88807bfc4c80 R14: ffff88806e8c0540 R15: 0000000000000008 FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff19e3d0980 CR3: 0000000071a88000 CR4: 00000000003526f0 Call Trace: jbd2_journal_commit_transaction+0x2285/0x5c80 fs/jbd2/commit.c:751 kjournald2+0x3bc/0x740 fs/jbd2/journal.c:200 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:const_folio_flags include/linux/page-flags.h:345 [inline] RIP: 0010:folio_test_dropbehind include/linux/page-flags.h:600 [inline] RIP: 0010:__bh_submit+0x22d/0x8d0 fs/buffer.c:1109 Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 RSP: 0000:ffffc9000e957868 EFLAGS: 00010202 RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807bfc4ca0 RBP: 0000000000009801 R08: ffff88807bfc4cff R09: 1ffff1100f7f899f R10: dffffc0000000000 R11: ffffed100f7f89a0 R12: dffffc0000000000 R13: ffff88807bfc4c80 R14: ffff88806e8c0540 R15: 0000000000000008 FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff19f15da08 CR3: 0000000072f94000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: c1 e8 03 shr $0x3,%eax 3: 48 89 44 24 18 mov %rax,0x18(%rsp) 8: 42 80 3c 20 00 cmpb $0x0,(%rax,%r12,1) d: 74 08 je 0x17 f: 48 89 df mov %rbx,%rdi 12: e8 f6 e7 d7 ff call 0xffd7e80d 17: 48 89 5c 24 28 mov %rbx,0x28(%rsp) 1c: 48 8b 1b mov (%rbx),%rbx 1f: 4c 8d 7b 08 lea 0x8(%rbx),%r15 23: 4c 89 f8 mov %r15,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 80 3c 20 00 cmpb $0x0,(%rax,%r12,1) <-- trapping instruction 2f: 74 08 je 0x39 31: 4c 89 ff mov %r15,%rdi 34: e8 d4 e7 d7 ff call 0xffd7e80d 39: 4d 8b 3f mov (%r15),%r15 3c: 4c 89 fe mov %r15,%rsi 3f: 48 rex.W final repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] CPU: 1 UID: 0 PID: 4941 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:const_folio_flags include/linux/page-flags.h:345 [inline] RIP: 0010:folio_test_dropbehind include/linux/page-flags.h:600 [inline] RIP: 0010:__bh_submit+0x22d/0x8d0 fs/buffer.c:1109 Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 RSP: 0000:ffffc9000e957868 EFLAGS: 00010202 RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807bfc4ca0 RBP: 0000000000009801 R08: ffff88807bfc4cff R09: 1ffff1100f7f899f R10: dffffc0000000000 R11: ffffed100f7f89a0 R12: dffffc0000000000 R13: ffff88807bfc4c80 R14: ffff88806e8c0540 R15: 0000000000000008 FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff19e3d0980 CR3: 0000000071a88000 CR4: 00000000003526f0 Call Trace: jbd2_journal_commit_transaction+0x2285/0x5c80 fs/jbd2/commit.c:751 kjournald2+0x3bc/0x740 fs/jbd2/journal.c:200 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:const_folio_flags include/linux/page-flags.h:345 [inline] RIP: 0010:folio_test_dropbehind include/linux/page-flags.h:600 [inline] RIP: 0010:__bh_submit+0x22d/0x8d0 fs/buffer.c:1109 Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 RSP: 0000:ffffc9000e957868 EFLAGS: 00010202 RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807bfc4ca0 RBP: 0000000000009801 R08: ffff88807bfc4cff R09: 1ffff1100f7f899f R10: dffffc0000000000 R11: ffffed100f7f89a0 R12: dffffc0000000000 R13: ffff88807bfc4c80 R14: ffff88806e8c0540 R15: 0000000000000008 FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff19f15da08 CR3: 0000000072f94000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: c1 e8 03 shr $0x3,%eax 3: 48 89 44 24 18 mov %rax,0x18(%rsp) 8: 42 80 3c 20 00 cmpb $0x0,(%rax,%r12,1) d: 74 08 je 0x17 f: 48 89 df mov %rbx,%rdi 12: e8 f6 e7 d7 ff call 0xffd7e80d 17: 48 89 5c 24 28 mov %rbx,0x28(%rsp) 1c: 48 8b 1b mov (%rbx),%rbx 1f: 4c 8d 7b 08 lea 0x8(%rbx),%r15 23: 4c 89 f8 mov %r15,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 80 3c 20 00 cmpb $0x0,(%rax,%r12,1) <-- trapping instruction 2f: 74 08 je 0x39 31: 4c 89 ff mov %r15,%rdi 34: e8 d4 e7 d7 ff call 0xffd7e80d 39: 4d 8b 3f mov (%r15),%r15 3c: 4c 89 fe mov %r15,%rsi 3f: 48 rex.W