Extracting prog: 1h55m30.170459387s
Minimizing prog: 11m2.462344807s
Simplifying prog options: 2m43.015510513s
Extracting C: 1m47.083435868s
Simplifying C: 24m31.921017243s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS-poll$auto-mmap$auto-close_range$auto-memfd_create$auto-socket-ioctl$auto-bpf$auto-close_range$auto-sendmsg$auto_IPVS_CMD_SET_CONFIG-pwrite64$auto-memfd_secret$auto-set_mempolicy$auto-mmap$auto-mmap$auto-openat$auto_vmuser_fops_vmci_host-ioctl$auto_IOCTL_VMCI_VERSION2-ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC-poll$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_GET_WOWLAN-ioctl$auto_PPPIOCSPASS-fanotify_init$auto-read$auto_snd_pcm_f_ops_pcm1-openat$auto_snd_pcm_oss_f_reg_pcm_oss-sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS-ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4091d4a5f69186e55dc63d6af4467941b8404346f5fc6435176368912db5de57310d86ce", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250b00000008000500fbffffff08000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30, 6, 11, 30, 29, 14, 23, 12, 14, 30, 30, 11, 23, 30, 30, 6, 29, 8, 30, 30, 14, 30, 25]
detailed listing:
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0)
ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffff004, 0x2)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000700)='/dev/binderfs/binder0\x00', 0x2280, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x542, 0x0)
select$auto(0x6d0c, 0x0, &(0x7f0000000380)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x11, 0x93, 0x7, 0x8, 0x6]}, 0x0, 0x0)
connect$auto(0x3, 0x0, 0x55)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x100, 0x0)
ioctl$auto(r1, 0x64c8, 0x1e2)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0x2201, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r2, &(0x7f0000000040)="bb9ee01e2b2f344afde0", 0xa)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0)
mmap$auto(0xfe89, 0x40009, 0xdf, 0x9b75, r1, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyqd\x00', 0x220282, 0x0)
ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
r4 = io_uring_setup$auto(0x81c5, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
sendto$auto(r0, 0x0, 0x5, 0x1ff, 0x0, 0x5)
sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[], 0x1258}, 0x1, 0x0, 0x0, 0x4000}, 0x50)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd)
executing program 1:
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf25"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(r0, 0x0, 0x10a, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 1:
mmap$auto(0xfffffffffffffffc, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2082, 0x0)
recvmmsg$auto(0x3, 0x0, 0xfffffffc, 0xa, 0x0)
ioprio_get$auto(0x1, 0x1)
shutdown$auto(0xffffffffffffffff, 0x7)
unshare$auto(0x40000080)
recvmmsg$auto(r0, 0x0, 0x8, 0x8, 0x0)
unshare$auto(0x40000080)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_on\x00', 0x40001, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x80000001, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x12, r1, 0x7)
socket(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r1)
sendmsg$auto_NL80211_CMD_STOP_AP(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x440, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000100)='/dev/audio1\x00', 0xa3d9)
r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x47a000, 0x0)
ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000080)={0x207f, 0x3b, 0x24, 0x0, 0x716, 0x8001, 0x7d6, 0x14, 0x0, 0xbfaf, 0x4, 0x4, 0x8, 0x0, 0x2})
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x71d)
r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x4001, 0x0)
ioctl$auto(r5, 0x8038550a, 0x1)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xa, 0x1, 0x948b, 0x8, 0x8, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x404007, 0xdf, 0x9b72, 0x2, 0xf7)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
setxattr$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='\xb1[:--$&\x00', &(0x7f0000000100)="3c522b8fa982820b304d81e7e983118ca52b52eb22654b11ccc5a733892a34c7d04c513bab51dd95c862d567dab8466637735a316fa460071f3bb61e38edfe2038e3a5108b2a9c1bc7a5a98b5b085730f0e5cd42a1cffbcf37bf", 0x200, 0x8)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x80000000, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfffffdef)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0x20499d, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
madvise$auto(0x108000, 0x800034, 0x200000b)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x204180, 0x0)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0)
madvise$auto(0x5, 0x2, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x0)
getrandom$auto(&(0x7f0000000180)='/dev/ptp0\x00', 0x8, 0x7)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f00"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x40000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x400c000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
executing program 2:
socket(0x1f, 0x80c, 0x9)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
acct$auto(&(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resync_time\x00')
acct$auto(0x0)
r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_cpumask\x00', 0x0, 0x0)
io_uring_enter$auto(r0, 0x6, 0x80, 0x3, &(0x7f0000000080)="d9f76ad62266a11665ff9301e1251c521d3e2bf44d18a5325dbf96709998827fb6470f204038339e6cc8aaafa4bb51ab798abcc5799a312413d647d390a76623ba904d24d22d3d32ec78d97331b2114e13f34653e191d80850852a0b008267487c6d2afc0e7435755ec4728db0ce248efcb60a6ef94ff4f0dc9eb6797352e8db5a2d05e6bf643f0dc52ae5e31571e84de7079644e6511e50331153e0b29e5b9c9adef31c95310881", 0x9)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80011, 0x0)
clone$auto(0x3, 0x7, 0x0, 0x0, 0x2)
ioperm$auto(0x7, 0x6, 0x80)
fsconfig$auto(0x0, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x8000000000000001)
socket$nl_generic(0x10, 0x3, 0x10)
wait4$auto(0x0, 0xfffffffffffffffc, 0x60000003, 0x0)
close_range$auto(0x2, 0xa, 0x0)
executing program 1:
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x3ff)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000)
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x181000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/45, 0x2d)
r1 = socket(0x2b, 0x1, 0x1)
getsockopt$auto(r1, 0x1, 0x1a, 0x0, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0)
get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x800)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x402501, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032bbc700002dcdf2526000000"], 0x14}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)
unlink$auto(&(0x7f0000000040)='./file0\x00')
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x3)
socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x1, 0x2, 0x0)
getsockopt$auto(0x100000006, 0x1, 0x30, 0xfffffffffffffffe, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff)
r2 = socket(0x2, 0x800, 0x106)
getsockopt$auto(r2, 0x11c, 0x2, 0x0, 0x0)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), r2)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3fc57c92", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf250400000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4)
executing program 2:
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(r0, 0x0, 0x10a, 0x8, 0x0)
mmap$auto(0x1000, 0x20009, 0xe6, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r1 = socket(0x2, 0x1, 0xfffffff9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xea769c9ebb14b2a8, 0x0)
select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/phonet\x00', 0x100, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/reboot/force\x00', 0x20000, 0x0)
r3 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/force_wakeup\x00', 0x88f42, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r3, &(0x7f0000000040)=""/38, 0x26)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r5, 0x560f, r6)
read$auto_usbfs_devices_fops_usb(r6, &(0x7f0000000140)=""/163, 0xa3)
socket(0xa, 0x806, 0x0)
socketpair$auto(0x21, 0x7, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
executing program 1:
read$auto(0x3, 0x0, 0x7ffffffff000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3)
mmap$auto(0x1, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram0\x00', 0x270740, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x1, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3)
write$auto(0x3, 0x0, 0x7fffffff)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
statx$auto(r0, 0x0, 0x2, 0x4, 0x0)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-touch13\x00', 0x280, 0x0)
ioctl$auto(r1, 0x4020565b, 0x38)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf251600000018000180140002007673696d3000698bc5b2b34bb0bcb50000000000050002000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)
r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r4, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b73830b7803aef33addb33f3a80008966bc86505849bf472949a7264a1b000000006fa2e5f21fce0030523201000000da9b64050a923b47b1cb1cf290e4810a16df17f1149f6eca420fbf7d53a56549111c87c69d637c1ae28405b2dff3826520c933442f745156c04be88be45a2e684a4ba9e89c89519737cf46cdb0f517a1056e0e8b5e017dae87f18fe2b8d7a969c8cc789c710200000000000000ab38c0c68c0e7f99d620dadeb18194128da7fcbd021e903d487682306888d0ab2dd66504b7f74a0e4327fafaba2f7e3f1c0c85f3f9a46a03ce414ce9919dd3b60025f7f4c45b65e53caff7c6e8357c48239edc19584076b5e272b7562951ef3ff0fd35a89b724ffbc2605d978ed5b72e7b2261d65c42ec43b314", 0x15b)
writev$auto(0x1, 0x0, 0x1)
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(r0, 0x0, 0x10a, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 2:
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket(0xa, 0x801, 0x84)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sysfs$auto(0x2, 0x0, 0x0) (async)
fsopen$auto(0x0, 0x1) (async)
epoll_create$auto(0x4) (async, rerun: 32)
close_range$auto(r0, r1, 0x0) (rerun: 32)
epoll_create$auto(0x4)
epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40001, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8)
write$auto(r2, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x7ff, &(0x7f0000000080)={0x7, 0x4, 0x80000001, 0x7c, 0x2, 0x9, r2, [0x0, 0xf1a, 0x802e], {0x40, 0xe6, 0xc4744f3, 0xf, 0x2, 0xff, 0x4, 0x80000001, 0xf9}, {0x8, 0xffff0ffe, 0xbc, 0x6, 0xf, 0x7fff, 0x9, 0x1, 0x8001}})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0)
executing program 2:
madvise$auto(0x0, 0x7fffffffffffffff, 0xb) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x69c2, 0x84) (async)
io_uring_setup$auto(0x6, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0) (async)
r2 = socket(0xa, 0x2, 0x88)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'erspan0\x00'}) (async)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000040)="86ad180916cd35e093b9901f03de02ef", 0x5d) (async)
bpf$auto(0x0, &(0x7f00000000c0)=@token_create={0x0, r3}, 0xf)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) (async)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r5 = socket(0x10, 0x3, 0x0) (async)
r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r6, @ANYBLOB="f50128bd7000fbdbdf250a00000a0b0002006e6c6374726c0000b6000200237d44a0d718ffd47bf0a1a5ee684c009409520147b78184bb44fb36d37d06f764f82aae04694a6ae777e2b91e158877a942cab380a39c25faca3e1ac07960d8a4350e6c71ea7a9c245d36ca9e8d687aa2731960831d43c94288024fd770ad4d20dc4885dadfb364efe2c36102cadf191d0a2eafa47e4ac9680a5f65beaaa103336b6da7154f8e38e8eb225f72f06692f3ed1b5ec666a013da8557925a0c372ebc2aa7cd33e417503b1596125d0d5c8d6b7b0000", @ANYBLOB="d8000000"], 0xd8}}, 0x22044080)
r7 = socket(0x2a, 0x2, 0x1)
connect$auto(r7, &(0x7f0000000180)=@ethernet={0x1, @local}, 0x8)
r8 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/bdi/7:13/stats\x00', 0x88f00, 0x0)
read$auto_bdi_debug_stats_fops_(r8, &(0x7f0000000980)=""/7, 0x7) (async)
connect$auto(r7, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x55)
unshare$auto(0xc)
mmap$auto(0x0, 0x20006, 0x3, 0xe72, 0x401, 0x8000) (async)
r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto_def_blk_fops_fs(r9, 0x80081280, 0x0)
futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xb94ea9e)
executing program 3:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/acpi/interrupts/gpe0E\x00', 0x0, 0x0)
socket(0x22, 0x2, 0x4)
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
r0 = open(0x0, 0x22240, 0x155)
open(0x0, 0xa240, 0x1de)
r1 = pipe$auto(0x0)
mmap$auto(0x0, 0x4000a, 0xdb, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x1d, 0x2, 0x7)
r3 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x2b03, 0x0)
r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), r1)
poll$auto(&(0x7f00000002c0)={<r6=>r0, 0x9, 0x1}, 0x4, 0x6c0)
r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000340), r0)
sendmsg$auto_NFC_CMD_SE_IO(r6, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1cdab992ed30e074131d2d753d10607912c18f9cbc05945910b9a9776061bb1ba803fabe69e7dc3896f61ad2cd4b91561c1f350027a02e6aee4de8095d68fd4596efb10a394a42834902724121b47b86d0ada22da47bd3165a09f90f224fa996d6a64b1e0478ad5c13037cdd7ea2ee5b2818c03521bb54b967b89b57ad453e919f231d587e4ffb9ff586b52a7415a49c97a916cf0c6bca82e83bb657945fbc46d8", @ANYRES16=r7, @ANYBLOB="000229bd7000fcdbdf251b00000008001e0000000000060014002a2e000005000f0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48880}, 0x2000c048)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.list\x00', 0x48a22, 0x0)
read$auto(r8, 0x0, 0x13)
sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRES16=r2, @ANYRES32=r8, @ANYBLOB="6cb980a37a86f28bb6709107597036c53f15a8e334463d801cb12519197c8b9e31230c7ebe04dec7b8a400000802ff0b73542650878f396c7ffea0c12e1a27adf7794bf7c4cd38bd42fd4de0411621887f2c"], 0x1c}}, 0x404c030)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, <r9=>r4}, 0x6a)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
sysfs$auto(0x2, 0x16, 0x0)
fsopen$auto(0x0, 0x1)
sendto$auto(r2, 0x0, 0xfdef, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r9}, 0x36)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x8000, 0x0)
ioctl$auto(0x3, 0x1, 0x90000800000402)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000045c0), 0x802, 0x0)
socketpair$auto(0x80000000, 0x5, 0x7, &(0x7f0000000000)=0x7)
ioctl$auto_RTC_PIE_ON(r0, 0x7005, 0xf)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto(0x3, 0x0, 0x10)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r0 = socket(0x32, 0x2, 0x9)
ioctl$auto(0x3, 0x89e0, 0x38) (async)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0)
mmap$auto(0x0, 0x60009, 0x7f, 0xeb1, 0x40000000000a5, 0x8000) (async)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) (async)
r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/ieee80211/phy0/user_power\x00', 0x40000, 0x0)
read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) (async)
ioctl$auto_TIOCGWINSZ2(r1, 0x5413, 0x0) (async)
mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x70) (async)
rmdir$auto(&(0x7f0000000000)='./file0\x00')
mknodat$auto(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0xfffffff8) (async)
lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) (async)
ioctl$auto(0x3, 0x5420, 0x38) (async)
getrandom$auto(0x0, 0x6000000, 0x3)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000300)=""/228, 0xe4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
socket(0x80000000000000a, 0x2, 0x0)
getsockopt$auto(r0, 0x7, 0x65, 0x0, 0x0) (async)
socket(0xa, 0x801, 0x84) (async)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) (async)
fstatfs$auto(0x3, 0x0) (async)
shutdown$auto(0x200000003, 0x2) (async)
setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x632b491c) (async)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0)
openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy2/ht40allow_map\x00', 0x200200, 0x0)
ioctl$auto(r1, 0x5407, r1)
executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0x2, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x400002c, 0x5, 0x0, 0x3}) (async)
ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002800)={'dummy0\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(0xffffffffffffffff, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004680)=ANY=[@ANYBLOB=' \x00h\x00', @ANYRES16=0x0, @ANYBLOB="a54928bd7000ffdbdf251a0000000c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40404}, 0x8800) (async)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4091d4a5f69186e55dc63d6af4467941b8404346f5fc6435176368912db5de57310d86ce", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250b00000008000500fbffffff08000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(r0, 0x0, 0x10a, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(&(0x7f0000000180)={0x6, @inferred=r0, 0x0, 0x7, 0xad90}, &(0x7f00000004c0)={0xfffffffd, 0xef, 0x0, 0x1ff, 0x17e360, 0xc4, 0x4, 0x5, 0x3, 0x4, 0xfffffff6, 0x9, 0x7, 0x4, 0x0, 0x80, 0xd7b6, 0x100, 0xb, 0xa0f, 0x1, 0x5, 0x6, 0x5, 0x6, 0x1, [0x4, 0xa5f4, 0xee2, 0xfffffffffffffff9, 0x9, 0x3, 0xffff, 0x4, 0x81, 0x7fff, 0x1, 0x7, 0x2, 0x98, 0x7ff, 0x8, 0x6, 0xf756, 0xfffffffffffff5d5, 0x5, 0x40, 0x4, 0x76e14948, 0x3, 0x4, 0x9, 0x8000000000000001, 0x0, 0x5, 0xb, 0x2, 0x3467, 0x9dc5, 0x7, 0x1, 0xe, 0xea5, 0xd8f3, 0x3, 0x100000000000000, 0x8000000000000001, 0x5a7, 0x8, 0x2, 0x8001, 0x81], "d8739aa5b66d4b9b398d0369f021f2ddb014935e94caee889178ab1fa60161b5f65183f8a88f7b6aec73ea27fb"}, 0x9, 0x2)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
setresuid$auto(0x0, 0x8, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mq_open$auto(0x0, 0x3ff, 0x7, &(0x7f0000000140)={0x7, 0x100000000, 0xa509, 0x4})
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x180002}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1a0, r1, 0x2, 0x70bd29, 0x8001, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x69, 0xbe, "c6935cb981cbf9574455a423b3d14cbc60ab429866f9838c462898927301891e6fc473e4fa48275c570139dac942d424e1dd5fe0ac9708d7eb6ae38d42ccc12400c2c5e6db352ec2dbc2925ec49826afc0194f37725fb901739c164a37e5d85947ce256b06"}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [@typed={0x2a, 0x105, 0x0, 0x0, @binary="6d0550407beb20c106c95648b69c52999f8c6224b394aa94b17fb9ac72e22744e587e37d08d5"}]}, @NL80211_ATTR_STA_WME={0x44, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}]}, @NL80211_ATTR_MLO_TTLM_DLINK={0xab, 0x148, "b0282b04d956222e92fdc4e0fcdb068347e77c0294e9897f63688d8f84b972b44e3c515f12205d752f430248161f411afd4df7f3fe4581bed42c5c65dcfcc9c9900a779d573e0d2ee6eb6a57db5c399b82a6f07d6ea6a103aef7399b1ec31d636bbd1fd84ae307fbf6f5441618b5053a9390c86ba722e21288d670684aa32a32e3ca8609653fd6acb5445e0370ea261b4c4841e95e9503b475b8d9678cc7a3d13c6686b76a9ce3"}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8051}, 0x85)
socket(0x1d, 0x2, 0x6)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/sda/sched/read0_next_rq\x00', 0x121000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x11, 0x80003, 0x300)
socket(0x2c, 0x80003, 0x0)
bind$auto(0x3, 0x0, 0xb)
pread64$auto(r2, 0x0, 0x68, 0xfc)
r3 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r5 = socket(0xa, 0x3, 0x3b)
getsockopt$auto(r5, 0x29, 0x24, 0x0, 0x0)
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000700), r5)
sendmsg$auto_TIPC_NL_LINK_SET(r3, &(0x7f0000000a00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x268, r6, 0x10, 0x70bd25, 0xffff, {}, [@TIPC_NLA_MON={0x253, 0x9, 0x0, 0x1, [@generic="e9fdb054d31cb1958f516a128ebbbe2e4db11383c638da9e23e6e2a97b20a010d13f619623b1968f97c6448e3cedd86416c0ce3f5386557c51d655bb79548703dd32e481425181658791a0d51741860f0ee1acdaaecca76d0d2ae80530491259214222dac2be51e28dea9a65b13b5a4430b955b989c37e9b734f6c6ba5258658163a36aec7241a8bf42cafba56132f489d9c4799a07e4bd1e68ac8e7337602ab1c758ecb", @nested={0x109, 0xc3, 0x0, 0x1, [@typed={0xc, 0xfb, 0x0, 0x0, @u64=0x8000000000000000}, @nested={0x4, 0x11f}, @nested={0x4, 0x4c}, @generic="2073d22d60ff328a253d607931b7388df11bd6a5cf29a8cdb761ff3a8886f92189b10068ce96a7b9cdbe8e0141f19c1a56c84510d882380547fb2e52b6c8ef8896f7f40507a7bed8e8e1576b2aa1093081f1431c4aa9076f91ddd6ef2c7d26a43332f273eee68c194302108a4e795e04ac36d04c66a99d559ab378cb7f49c83bfd7c5886fbde3135bff6086bf79e10450d74c03e89f2af4a24d0a63d744a6986235ff09da188fe30c592765a832332025a408a6cac828f8b5c2274a31d7bc29dd1f48218b9245027726de568f8b9fb9ed81f867777fed617ca60c8556c59543a828f6c6142e6eda6ab8261ec0f054e3bcb"]}, @generic="541feff6dddab6b15c8033a67f1804ceb473c8235ada792c4b2bae773b1d81f2103b39d0bf0dfba5c11e6ac7f64cd18b5ec309e5f7e31701640efd9c2764bf6d09492fabd92d2d68ea0ab915f3ef53d6db63f0eb23798eb8d52017394a7100f983d7193f141a6c9a37bcac1b70ec1ed9b0072d4e7ed6a1a11b648c7a0994758df9e0bf4808461e0ddc4bd5cb9900d1640dfa83b1281f536679d08dcec29889"]}]}, 0x268}, 0x1, 0x0, 0x0, 0x11}, 0x20000080)
executing program 3:
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ccae60b4363fedbbf08cf781f0428739f9cddbde0a6ee72789cac99ae3b4509f10437bf2fa1ff51255e9cc46086a4f2f42188ae365b685ffd530918f466a730a2543ae7278a148f6c7d358d1722a7d4c651b1c136dccde63346b3c04ca818e027d9d1772c9366969927bda7d1bc40f462f2c487fa74f8fc840534ca1a9d262d66b050000000000000051e355045c1958030a611959cf378ac11a964764617b197d469087c901df54da1f37da0151661aa2de03980efbbaeb9d05bad79c06e964842245ce8547eadaf7179a87e79f2a8e3b9467e6935b45f87cf9160da5ad921033a07981aac573c96b825d4f4fe89cfdbad8f0688c5c1264fdce9d04c3cc1b6ed504144c89e566c74a01089b932e06e90a231fb0798b010c86e56bdc503e0c480737bbb2afba3138d93df0880ddfb53cda6a6d74c46182e405154329937bdb22b3a7c770f2f12b999f94828887a3137b2417ed5412855fb33017042ab65af4768e042e69c1421adc2a1afe0851f081f2cd5b474c618d73e92b0b3f19a86726015482353a5b04d8bb90e88e7949edcd3a568eae25ae99354dfded9f2d3b7f87588ddeee80e4d0d2f9e6ae43f24b39d15dcba42b838cb44fc2f3dd98f461fff60bfdaa292f71ad23293b37bb265ad72c0bfe56bb1b2af2c2e2e741cdfe260f53cc3c15028c636d69fe4a400cdd712149b3777027a7592d03888905a6ac6292de85d63bee2d55c882439b463a62e2bc24589841cad6e3eb7d011c23c4577c87af692a55d57c1033dd6bbaffc6ce56d8d40f07f6b0475eb8717855745401a9b5a2ffd53aea36132ac7620d18035c64f1bc6861"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00')
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r1, &(0x7f0000000380)="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", 0x1000)
r2 = open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
r3 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x3, 0x1ffdf, 0x7, 0x200003, 0x209b, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x280, 0x100000000, 0x0, 0x7, 0x2100, 0x220, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffbff5, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x891, 0x7, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0x4, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
fstat$auto(r2, &(0x7f0000001380)={0x2, 0x10001, 0x4, 0xffffff4b, <r4=>0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x10, 0x6c5434c8, 0x6, 0x8000, 0x8000, 0xfff, 0x0, 0xf2})
r5 = getegid()
statx$auto(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x7, 0x1, &(0x7f0000001440)={0x1, 0xfffffdc0, 0x5, 0x1000, r4, r5, 0xba0c, 0x2f5c, 0x5, 0x3, 0x1, 0x81, {0x7, 0x9}, {0x7f, 0x5}, {0x6, 0x10000}, {0x7, 0xff}, 0x9, 0x0, 0x80, 0xf1, 0x4, 0x1, 0x8, 0x5, 0x81, 0x101, 0xffff7fff, 0x3ff, [0x5, 0x5e, 0x4, 0x9, 0x87c, 0x4, 0x9, 0x9d, 0x9]})

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS-poll$auto-mmap$auto-close_range$auto-memfd_create$auto-socket-ioctl$auto-bpf$auto-close_range$auto-sendmsg$auto_IPVS_CMD_SET_CONFIG-pwrite64$auto-memfd_secret$auto-set_mempolicy$auto-mmap$auto-mmap$auto-openat$auto_vmuser_fops_vmci_host-ioctl$auto_IOCTL_VMCI_VERSION2-ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC-poll$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_GET_WOWLAN-ioctl$auto_PPPIOCSPASS-fanotify_init$auto-read$auto_snd_pcm_f_ops_pcm1-openat$auto_snd_pcm_oss_f_reg_pcm_oss-sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS-ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4091d4a5f69186e55dc63d6af4467941b8404346f5fc6435176368912db5de57310d86ce", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250b00000008000500fbffffff08000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 1m40s
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30, 6, 11, 30, 29, 14, 23, 12, 14, 30, 30, 11, 23, 30, 30, 6, 29, 8, 30, 30, 14, 30, 25]
detailed listing:
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0)
ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffff004, 0x2)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000700)='/dev/binderfs/binder0\x00', 0x2280, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x542, 0x0)
select$auto(0x6d0c, 0x0, &(0x7f0000000380)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x11, 0x93, 0x7, 0x8, 0x6]}, 0x0, 0x0)
connect$auto(0x3, 0x0, 0x55)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x100, 0x0)
ioctl$auto(r1, 0x64c8, 0x1e2)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0x2201, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r2, &(0x7f0000000040)="bb9ee01e2b2f344afde0", 0xa)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0)
mmap$auto(0xfe89, 0x40009, 0xdf, 0x9b75, r1, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyqd\x00', 0x220282, 0x0)
ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
r4 = io_uring_setup$auto(0x81c5, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
sendto$auto(r0, 0x0, 0x5, 0x1ff, 0x0, 0x5)
sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[], 0x1258}, 0x1, 0x0, 0x0, 0x4000}, 0x50)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd)
executing program 1:
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf25"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(r0, 0x0, 0x10a, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 1:
mmap$auto(0xfffffffffffffffc, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2082, 0x0)
recvmmsg$auto(0x3, 0x0, 0xfffffffc, 0xa, 0x0)
ioprio_get$auto(0x1, 0x1)
shutdown$auto(0xffffffffffffffff, 0x7)
unshare$auto(0x40000080)
recvmmsg$auto(r0, 0x0, 0x8, 0x8, 0x0)
unshare$auto(0x40000080)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_on\x00', 0x40001, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x80000001, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x12, r1, 0x7)
socket(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r1)
sendmsg$auto_NL80211_CMD_STOP_AP(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x440, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000100)='/dev/audio1\x00', 0xa3d9)
r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x47a000, 0x0)
ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000080)={0x207f, 0x3b, 0x24, 0x0, 0x716, 0x8001, 0x7d6, 0x14, 0x0, 0xbfaf, 0x4, 0x4, 0x8, 0x0, 0x2})
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x71d)
r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x4001, 0x0)
ioctl$auto(r5, 0x8038550a, 0x1)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xa, 0x1, 0x948b, 0x8, 0x8, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x404007, 0xdf, 0x9b72, 0x2, 0xf7)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
setxattr$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='\xb1[:--$&\x00', &(0x7f0000000100)="3c522b8fa982820b304d81e7e983118ca52b52eb22654b11ccc5a733892a34c7d04c513bab51dd95c862d567dab8466637735a316fa460071f3bb61e38edfe2038e3a5108b2a9c1bc7a5a98b5b085730f0e5cd42a1cffbcf37bf", 0x200, 0x8)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x80000000, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfffffdef)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0x20499d, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
madvise$auto(0x108000, 0x800034, 0x200000b)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x204180, 0x0)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0)
madvise$auto(0x5, 0x2, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x0)
getrandom$auto(&(0x7f0000000180)='/dev/ptp0\x00', 0x8, 0x7)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f00"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x40000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x400c000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
executing program 2:
socket(0x1f, 0x80c, 0x9)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
acct$auto(&(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resync_time\x00')
acct$auto(0x0)
r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_cpumask\x00', 0x0, 0x0)
io_uring_enter$auto(r0, 0x6, 0x80, 0x3, &(0x7f0000000080)="d9f76ad62266a11665ff9301e1251c521d3e2bf44d18a5325dbf96709998827fb6470f204038339e6cc8aaafa4bb51ab798abcc5799a312413d647d390a76623ba904d24d22d3d32ec78d97331b2114e13f34653e191d80850852a0b008267487c6d2afc0e7435755ec4728db0ce248efcb60a6ef94ff4f0dc9eb6797352e8db5a2d05e6bf643f0dc52ae5e31571e84de7079644e6511e50331153e0b29e5b9c9adef31c95310881", 0x9)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80011, 0x0)
clone$auto(0x3, 0x7, 0x0, 0x0, 0x2)
ioperm$auto(0x7, 0x6, 0x80)
fsconfig$auto(0x0, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x8000000000000001)
socket$nl_generic(0x10, 0x3, 0x10)
wait4$auto(0x0, 0xfffffffffffffffc, 0x60000003, 0x0)
close_range$auto(0x2, 0xa, 0x0)
executing program 1:
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x3ff)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000)
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x181000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/45, 0x2d)
r1 = socket(0x2b, 0x1, 0x1)
getsockopt$auto(r1, 0x1, 0x1a, 0x0, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0)
get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x800)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x402501, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032bbc700002dcdf2526000000"], 0x14}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)
unlink$auto(&(0x7f0000000040)='./file0\x00')
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x3)
socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x1, 0x2, 0x0)
getsockopt$auto(0x100000006, 0x1, 0x30, 0xfffffffffffffffe, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff)
r2 = socket(0x2, 0x800, 0x106)
getsockopt$auto(r2, 0x11c, 0x2, 0x0, 0x0)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), r2)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3fc57c92", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf250400000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4)
executing program 2:
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(r0, 0x0, 0x10a, 0x8, 0x0)
mmap$auto(0x1000, 0x20009, 0xe6, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r1 = socket(0x2, 0x1, 0xfffffff9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xea769c9ebb14b2a8, 0x0)
select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/phonet\x00', 0x100, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/reboot/force\x00', 0x20000, 0x0)
r3 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/force_wakeup\x00', 0x88f42, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r3, &(0x7f0000000040)=""/38, 0x26)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r5, 0x560f, r6)
read$auto_usbfs_devices_fops_usb(r6, &(0x7f0000000140)=""/163, 0xa3)
socket(0xa, 0x806, 0x0)
socketpair$auto(0x21, 0x7, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
executing program 1:
read$auto(0x3, 0x0, 0x7ffffffff000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3)
mmap$auto(0x1, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram0\x00', 0x270740, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x1, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3)
write$auto(0x3, 0x0, 0x7fffffff)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
statx$auto(r0, 0x0, 0x2, 0x4, 0x0)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-touch13\x00', 0x280, 0x0)
ioctl$auto(r1, 0x4020565b, 0x38)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf251600000018000180140002007673696d3000698bc5b2b34bb0bcb50000000000050002000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)
r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r4, &(0x7f0000000140)="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", 0x15b)
writev$auto(0x1, 0x0, 0x1)
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(r0, 0x0, 0x10a, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 2:
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket(0xa, 0x801, 0x84)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sysfs$auto(0x2, 0x0, 0x0) (async)
fsopen$auto(0x0, 0x1) (async)
epoll_create$auto(0x4) (async, rerun: 32)
close_range$auto(r0, r1, 0x0) (rerun: 32)
epoll_create$auto(0x4)
epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40001, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8)
write$auto(r2, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x7ff, &(0x7f0000000080)={0x7, 0x4, 0x80000001, 0x7c, 0x2, 0x9, r2, [0x0, 0xf1a, 0x802e], {0x40, 0xe6, 0xc4744f3, 0xf, 0x2, 0xff, 0x4, 0x80000001, 0xf9}, {0x8, 0xffff0ffe, 0xbc, 0x6, 0xf, 0x7fff, 0x9, 0x1, 0x8001}})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0)
executing program 2:
madvise$auto(0x0, 0x7fffffffffffffff, 0xb) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x69c2, 0x84) (async)
io_uring_setup$auto(0x6, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0) (async)
r2 = socket(0xa, 0x2, 0x88)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'erspan0\x00'}) (async)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000040)="86ad180916cd35e093b9901f03de02ef", 0x5d) (async)
bpf$auto(0x0, &(0x7f00000000c0)=@token_create={0x0, r3}, 0xf)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) (async)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r5 = socket(0x10, 0x3, 0x0) (async)
r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r6, @ANYBLOB="f50128bd7000fbdbdf250a00000a0b0002006e6c6374726c0000b6000200237d44a0d718ffd47bf0a1a5ee684c009409520147b78184bb44fb36d37d06f764f82aae04694a6ae777e2b91e158877a942cab380a39c25faca3e1ac07960d8a4350e6c71ea7a9c245d36ca9e8d687aa2731960831d43c94288024fd770ad4d20dc4885dadfb364efe2c36102cadf191d0a2eafa47e4ac9680a5f65beaaa103336b6da7154f8e38e8eb225f72f06692f3ed1b5ec666a013da8557925a0c372ebc2aa7cd33e417503b1596125d0d5c8d6b7b0000", @ANYBLOB="d8000000"], 0xd8}}, 0x22044080)
r7 = socket(0x2a, 0x2, 0x1)
connect$auto(r7, &(0x7f0000000180)=@ethernet={0x1, @local}, 0x8)
r8 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/bdi/7:13/stats\x00', 0x88f00, 0x0)
read$auto_bdi_debug_stats_fops_(r8, &(0x7f0000000980)=""/7, 0x7) (async)
connect$auto(r7, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x55)
unshare$auto(0xc)
mmap$auto(0x0, 0x20006, 0x3, 0xe72, 0x401, 0x8000) (async)
r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto_def_blk_fops_fs(r9, 0x80081280, 0x0)
futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xb94ea9e)
executing program 3:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/acpi/interrupts/gpe0E\x00', 0x0, 0x0)
socket(0x22, 0x2, 0x4)
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
r0 = open(0x0, 0x22240, 0x155)
open(0x0, 0xa240, 0x1de)
r1 = pipe$auto(0x0)
mmap$auto(0x0, 0x4000a, 0xdb, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x1d, 0x2, 0x7)
r3 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x2b03, 0x0)
r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), r1)
poll$auto(&(0x7f00000002c0)={<r6=>r0, 0x9, 0x1}, 0x4, 0x6c0)
r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000340), r0)
sendmsg$auto_NFC_CMD_SE_IO(r6, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1cdab992ed30e074131d2d753d10607912c18f9cbc05945910b9a9776061bb1ba803fabe69e7dc3896f61ad2cd4b91561c1f350027a02e6aee4de8095d68fd4596efb10a394a42834902724121b47b86d0ada22da47bd3165a09f90f224fa996d6a64b1e0478ad5c13037cdd7ea2ee5b2818c03521bb54b967b89b57ad453e919f231d587e4ffb9ff586b52a7415a49c97a916cf0c6bca82e83bb657945fbc46d8", @ANYRES16=r7, @ANYBLOB="000229bd7000fcdbdf251b00000008001e0000000000060014002a2e000005000f0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48880}, 0x2000c048)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.list\x00', 0x48a22, 0x0)
read$auto(r8, 0x0, 0x13)
sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRES16=r2, @ANYRES32=r8, @ANYBLOB="6cb980a37a86f28bb6709107597036c53f15a8e334463d801cb12519197c8b9e31230c7ebe04dec7b8a400000802ff0b73542650878f396c7ffea0c12e1a27adf7794bf7c4cd38bd42fd4de0411621887f2c"], 0x1c}}, 0x404c030)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, <r9=>r4}, 0x6a)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
sysfs$auto(0x2, 0x16, 0x0)
fsopen$auto(0x0, 0x1)
sendto$auto(r2, 0x0, 0xfdef, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r9}, 0x36)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x8000, 0x0)
ioctl$auto(0x3, 0x1, 0x90000800000402)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000045c0), 0x802, 0x0)
socketpair$auto(0x80000000, 0x5, 0x7, &(0x7f0000000000)=0x7)
ioctl$auto_RTC_PIE_ON(r0, 0x7005, 0xf)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto(0x3, 0x0, 0x10)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r0 = socket(0x32, 0x2, 0x9)
ioctl$auto(0x3, 0x89e0, 0x38) (async)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0)
mmap$auto(0x0, 0x60009, 0x7f, 0xeb1, 0x40000000000a5, 0x8000) (async)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) (async)
r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/ieee80211/phy0/user_power\x00', 0x40000, 0x0)
read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) (async)
ioctl$auto_TIOCGWINSZ2(r1, 0x5413, 0x0) (async)
mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x70) (async)
rmdir$auto(&(0x7f0000000000)='./file0\x00')
mknodat$auto(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0xfffffff8) (async)
lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) (async)
ioctl$auto(0x3, 0x5420, 0x38) (async)
getrandom$auto(0x0, 0x6000000, 0x3)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000300)=""/228, 0xe4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
socket(0x80000000000000a, 0x2, 0x0)
getsockopt$auto(r0, 0x7, 0x65, 0x0, 0x0) (async)
socket(0xa, 0x801, 0x84) (async)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) (async)
fstatfs$auto(0x3, 0x0) (async)
shutdown$auto(0x200000003, 0x2) (async)
setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x632b491c) (async)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0)
openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy2/ht40allow_map\x00', 0x200200, 0x0)
ioctl$auto(r1, 0x5407, r1)
executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0x2, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x400002c, 0x5, 0x0, 0x3}) (async)
ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002800)={'dummy0\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(0xffffffffffffffff, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004680)=ANY=[@ANYBLOB=' \x00h\x00', @ANYRES16=0x0, @ANYBLOB="a54928bd7000ffdbdf251a0000000c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40404}, 0x8800) (async)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4091d4a5f69186e55dc63d6af4467941b8404346f5fc6435176368912db5de57310d86ce", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250b00000008000500fbffffff08000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(r0, 0x0, 0x10a, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(&(0x7f0000000180)={0x6, @inferred=r0, 0x0, 0x7, 0xad90}, &(0x7f00000004c0)={0xfffffffd, 0xef, 0x0, 0x1ff, 0x17e360, 0xc4, 0x4, 0x5, 0x3, 0x4, 0xfffffff6, 0x9, 0x7, 0x4, 0x0, 0x80, 0xd7b6, 0x100, 0xb, 0xa0f, 0x1, 0x5, 0x6, 0x5, 0x6, 0x1, [0x4, 0xa5f4, 0xee2, 0xfffffffffffffff9, 0x9, 0x3, 0xffff, 0x4, 0x81, 0x7fff, 0x1, 0x7, 0x2, 0x98, 0x7ff, 0x8, 0x6, 0xf756, 0xfffffffffffff5d5, 0x5, 0x40, 0x4, 0x76e14948, 0x3, 0x4, 0x9, 0x8000000000000001, 0x0, 0x5, 0xb, 0x2, 0x3467, 0x9dc5, 0x7, 0x1, 0xe, 0xea5, 0xd8f3, 0x3, 0x100000000000000, 0x8000000000000001, 0x5a7, 0x8, 0x2, 0x8001, 0x81], "d8739aa5b66d4b9b398d0369f021f2ddb014935e94caee889178ab1fa60161b5f65183f8a88f7b6aec73ea27fb"}, 0x9, 0x2)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
setresuid$auto(0x0, 0x8, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mq_open$auto(0x0, 0x3ff, 0x7, &(0x7f0000000140)={0x7, 0x100000000, 0xa509, 0x4})
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x180002}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1a0, r1, 0x2, 0x70bd29, 0x8001, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x69, 0xbe, "c6935cb981cbf9574455a423b3d14cbc60ab429866f9838c462898927301891e6fc473e4fa48275c570139dac942d424e1dd5fe0ac9708d7eb6ae38d42ccc12400c2c5e6db352ec2dbc2925ec49826afc0194f37725fb901739c164a37e5d85947ce256b06"}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [@typed={0x2a, 0x105, 0x0, 0x0, @binary="6d0550407beb20c106c95648b69c52999f8c6224b394aa94b17fb9ac72e22744e587e37d08d5"}]}, @NL80211_ATTR_STA_WME={0x44, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}]}, @NL80211_ATTR_MLO_TTLM_DLINK={0xab, 0x148, "b0282b04d956222e92fdc4e0fcdb068347e77c0294e9897f63688d8f84b972b44e3c515f12205d752f430248161f411afd4df7f3fe4581bed42c5c65dcfcc9c9900a779d573e0d2ee6eb6a57db5c399b82a6f07d6ea6a103aef7399b1ec31d636bbd1fd84ae307fbf6f5441618b5053a9390c86ba722e21288d670684aa32a32e3ca8609653fd6acb5445e0370ea261b4c4841e95e9503b475b8d9678cc7a3d13c6686b76a9ce3"}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8051}, 0x85)
socket(0x1d, 0x2, 0x6)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/sda/sched/read0_next_rq\x00', 0x121000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x11, 0x80003, 0x300)
socket(0x2c, 0x80003, 0x0)
bind$auto(0x3, 0x0, 0xb)
pread64$auto(r2, 0x0, 0x68, 0xfc)
r3 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r5 = socket(0xa, 0x3, 0x3b)
getsockopt$auto(r5, 0x29, 0x24, 0x0, 0x0)
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000700), r5)
sendmsg$auto_TIPC_NL_LINK_SET(r3, &(0x7f0000000a00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x268, r6, 0x10, 0x70bd25, 0xffff, {}, [@TIPC_NLA_MON={0x253, 0x9, 0x0, 0x1, [@generic="e9fdb054d31cb1958f516a128ebbbe2e4db11383c638da9e23e6e2a97b20a010d13f619623b1968f97c6448e3cedd86416c0ce3f5386557c51d655bb79548703dd32e481425181658791a0d51741860f0ee1acdaaecca76d0d2ae80530491259214222dac2be51e28dea9a65b13b5a4430b955b989c37e9b734f6c6ba5258658163a36aec7241a8bf42cafba56132f489d9c4799a07e4bd1e68ac8e7337602ab1c758ecb", @nested={0x109, 0xc3, 0x0, 0x1, [@typed={0xc, 0xfb, 0x0, 0x0, @u64=0x8000000000000000}, @nested={0x4, 0x11f}, @nested={0x4, 0x4c}, @generic="2073d22d60ff328a253d607931b7388df11bd6a5cf29a8cdb761ff3a8886f92189b10068ce96a7b9cdbe8e0141f19c1a56c84510d882380547fb2e52b6c8ef8896f7f40507a7bed8e8e1576b2aa1093081f1431c4aa9076f91ddd6ef2c7d26a43332f273eee68c194302108a4e795e04ac36d04c66a99d559ab378cb7f49c83bfd7c5886fbde3135bff6086bf79e10450d74c03e89f2af4a24d0a63d744a6986235ff09da188fe30c592765a832332025a408a6cac828f8b5c2274a31d7bc29dd1f48218b9245027726de568f8b9fb9ed81f867777fed617ca60c8556c59543a828f6c6142e6eda6ab8261ec0f054e3bcb"]}, @generic="541feff6dddab6b15c8033a67f1804ceb473c8235ada792c4b2bae773b1d81f2103b39d0bf0dfba5c11e6ac7f64cd18b5ec309e5f7e31701640efd9c2764bf6d09492fabd92d2d68ea0ab915f3ef53d6db63f0eb23798eb8d52017394a7100f983d7193f141a6c9a37bcac1b70ec1ed9b0072d4e7ed6a1a11b648c7a0994758df9e0bf4808461e0ddc4bd5cb9900d1640dfa83b1281f536679d08dcec29889"]}]}, 0x268}, 0x1, 0x0, 0x0, 0x11}, 0x20000080)
executing program 3:
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00')
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r1, &(0x7f0000000380)="8f85fae536edcca3f39f03aef3d45257d646cfbd34b3ccaa6b7752f9cb66a86f5422a8287fa60eb6caefee00c437de2f6209ac81b0191d40bbb9b618c6c7913dda97351421fa54ec8e1970a8f1e4ad94aea37105fa6f0144982e7e21fa0d5b8f8085e95449618d0066cd3d137241dc73fb8bb682209b121a7637dfe9f3899d92e20a18d36832c19ea9bc7a933ea14bc397ef05dea49c577658740dccc019ef18092c43c65da2438ba8a7cdb6be3360c01a7eebe7645822b831ac14887655bfdab8e6782e0e187896810602337bf45f7b4b34881474476442c26c67c8705631a86716f9ea1ad880f86216916777af3473782f95c40ca794e3addfbe1871caf3c435246ca94dfa8b24e58dba8271ae4ba8eaa1e566de5f6c5727508c3e803a00d4abd53f10a35dafef8447762ea87c9b96bafcc199670861725ac462533502014a0ee781f63f0ded4a261355ee0d47201a8e2acf8337ffe86c9402b2f0b0ab2c61c0616d2abfeba60d1641ef5607eecf79a110aa71ca7cec3d21f2918c52b22f756af516501e12e300e186bd077a37dcf447edaa6e6cf122e2c61c3f204b4b3147e94eff431e32dfebfb810f48d19ea031af5775097ecbc2a9e7a85de3cd07c79d4b1540d9fc310f6e95e0b157e36f4d455cf9bc8e30d3d42200cf31965c6bd65b3e6489e1c6e26cb39a526a1275a9e612a075907000d7f82e0f32a9f71b72561af958fa717db5c783091e25de23bcc291e809b339101e04dba36a9334b01dd8a364c0260f13b616535ed595781d32e530922e15b222d0db31f4208ec633672ffba109c3e1a5db8b295d5577aaa1797d875108c097ace2cfb671fbb428f4e51aaf9f890f057003a3dc0b98b0a5c5020303a78f1ea1dd8c961184683ababcaf5d249c4a392918d932b62c10f256c431e2917e1777c66a3b529eba989e83cf0b74b68c7d02cc69c0deb0fb36c43004f8e0dfeb5b53fab21f76771a7aa209552d2d21b698acbe6a0ccc287624bcd024aa7bc229029761750f4c86a574caa4e081012f5075cd25c1f2727ede7a637038a82e6d4b43432d7d1d58c428a71f2b2b64c2f03ee43cee134463a0d6dde9682b7c337098e5405fca9f6df92f1ea79c33e3967b776037c15289b485e2a69e0f29109923d7ecd49a5677f9d8c0c59e05cf4eda4d468b19308aa3c93e478688057568daa82b36cdd0883abf39091c6de874943eb2abbdb10e923806b5442b7d25d73f8d055085f0ee65dd5bcb2d98d630dfc5d6afd8e7a0c2fe8c7c1a58fb97e337584517205ee4a0327a4b8d7b8f632858c57bf178ff0db7d3588679b10f87accbef2503e05c013acc512d73b2ad2674dc315aa141588513e5582d8cb809d0aaf725a6cf31600a773b5649ee1b08b10e82531fe6b83f53b67358102e0c627b44dcbc75491dfbe43917e3d5389a1e9baebb69f018bc4b8761605c09544638f0f1c9cc967148b3eebbbad5ed4a4934c0b770f21a7f86d9bf3d91d90e02dae1758b0b8028f37434ef679527abb555133cfa7aff6cd78860ce9b7cc32b932b2ad713aeb6607bc2d7fc1a0882d1d870f17ea378cc82d40026a84b8550bdc8582efa91a5372526bb5ff7c22c9614aa1fd7602e43afe3f2c6769404a57b31b9a0c211f363c4f569deee99c293dabe703be7c1cb4a6653e620e43f8a7cbea3a9e2f33905a2d64cccf93997ba99a30ff77466387b91e59ec58df062723e6f2d390b6353eb76df34023060f9639f7b6ab1f5f2c48d5a554943196b8a22506d0d76fe0e5e753f64e59dfd2f05bdf1c5f7cac6abe64b4f517302c720c74dfaf594d06e5e4e9fa79b49db7310453a81d7d424cfe941451ef6ed4d09f57259c786fd646e0504e561ecb443811e3a344cdd60b377a486550c0db079694159b15a07a58a30b88375a2a86db71bcb8e4bb8d587543b4b56037871a79f5ffec50f5f6b23a7b6595aa920ab3c1bba408572ebf34aece700ca2e743bb29d87f320494be11cf650bde6893eddd3badf9a11eb7c9f54f17e3ec8e0423d123bf5f71e24655c1806f6c3ed3733250e7e1ceeb4c8c43bf7adc650dcae99e089f88aab4729f2a0585323f28b0fbb1febef4b7edfc750993a5bd1e29433b14d8f0cead123f8f01b96c3ac8dd5fbe59f6c6aa1fd0bbc9d9cfa89066236b73abb565d9d0be6d915783fa8d94d57b13a7555535ec85a939e2769477e95d22ad1023c8a34f9232b93ae648c2e9f93396ac5c51fae136caeb01174196c1f14863981d26d82d5d4ae8c5d0b6c16f3e862128156ce744d7b71942f3f3fa8cb673fde92c12903a22defa8c22acd8c2c3d1fcf0fe2ef534eba7fe54db56cdb7710cb9b3a2bc3f4797d174cf9f524ce5c8bd6af9d2f27d2765bb670f79671098db76188aab45c1bad358daea7337f1c56527697a2b8d412f11226a7373589f874676603b5fa0ea5c5393a19810450dbc1e181e5bf064557816e74bf064b772a8420cfbf9e11b166df8285428153da1de2d5f7f8a6b66dfb8493b6d2af8bd1ab6e58206238868d4ee187887a4046dd7d4067d88e87884f9735c6807d2470b30f12c9e997d93ae244c03a9903cc6074abd281490a05046dea2e5dc2a7fd60597ef22ced8eb408df8a3836bd1bbe877327cb9454eb1f1fd09d8892c5748427d217fd3e38b485841dee3c9a75662900ae9df66b0fdb276e353948ddaec67ce6f9b6cd715b16bc5debe4c6a78106e3b12372df5c72b7507dace12faecaf4acad6dc954b297e3601798692c27b5bd1681c7298d035a0af561d027aaf9ee6335fc6fcb7259cae83e4218d3d8017191cadeebe2531e871240d0b54f2a37252d636eeb50a6f056bd985d8d3978cbb955dbfd9b35110d5eac9258f14c77cbff259772d219e5c317350ae2ab6519a8f913ebb5829498a58b4670b7a37c03a94bc372ee0c2d59ee01b9177f12fadf5eb920d57793a59b21840882c8866124878a333d2832563f0532969a12ef3e0e264ddd3dc00de754ee118dfa1eaadc96f5d35916478dd55e82cf10417cbcdc8362a73eb32d01206fae78ae09d9e2e649cf399dd0707f4370213c1118b2a22e5d74705d2a0915984a07dc21dcdc0bff517457927bfc1e42876696f38abd0081b5dd3b270019c360b2b7c4193a2e8be6e49dbce4fd55299291cde1edcb1f64725599a2b08d03889b089228daca2d96668d57e6be4636ba62f31ebac13d03c52fcc41841e23873d47db7d9ff4ecbf2f03942e3bb1ec4d0729ed73960861ef749e810579a658178f286b5c5abaeddef59d773f4f304874aef7fbffa840407f5c68b63dc2cdc8c2c9ce0fdbd3c1bf5dd79368531ec06b4da217c56ae1221a342f65e4aaca0c861846142c37fdd84d070d73d2c4f9fc690f6b7b3f75504a13886d8b641e6f14a0f3c5ce3d371056989014f2a204dfccae673c13e9594651e8ec1da321e2d206fe441b51c5b92c4116869dd18b1f1b6dbd848808c53795902abb6644350e90151aee23e9d7db52b5135a5a89147b51bf4ed330c09fea6b499d571dc7805a04e5e4acf320fea0a8095c0058ad50035f1e9786ba560d64a8e537b5125c0d0e5ec9706aa89abf66d60a3feae4f4dd963630cb905091fa7360ff0b85285b2b4aeb5132b376942c477d8c6a31171e987068afa3c7e20181364499fd05b2cd9ee9d01a0f345701158311e911f6ce87a0db6b263cb41370be65996b1e4c964f5e22a9fabd0783b4252417737b0b80a630e3cf627f59312bd7446c07baf96d261ccbd8e4b2eca40421cbbbc102b7047035b0e2e202ac211fbc3ef028d6ab8bf3505c25b544410cd7346e62c91a6e4d422bac15102e309b5b56f750c75405c4abf7d9fd592eca6bdcf6d7c58fafd598fc3a0868a75da8c3826ca6ec9332d037deecbcb904ec50f3a06f17987522803d6697baf8d45663ef63423ab1c0bcff2fb621c0618a27ac1e045de98585c142b463d165a1d9c58fac2f01565a60c8406c9ad118be374a8ff10349be8c9a2d976b0df9e82ee9a75c4607610e3548abcea46cb83a21f5b22c63ea94aa100ec6936b3f2584a81750c9974a20d0444eecd6259ac924f98eae79fbefed5e59852b4e502b7d9ad39547c4317027bb2c7963efaa02acaa8a27790e819d8832fe5ae6af96e4666cfb215860e4a003ca0cfc405f1fbaaef87daba5cc7b30fa9000af86ad3ff3476e1c9003e759d24216907cfd49d432ecf6b89c287544c79354cf9ece61799770f1d667689946ab514721d9181c60fd1ba91d089b227601b97dfd842446c2dae3cb89676c2963ddf9b569816140235e496ac1f61972b5b41d6f7cc84659d0bbd53d2e1e0eb0b5e43cf37ab0402887ea71617abbc7e978840b530b6dbb23ca801523d80d0a7a5090edb5072af24b5eec68fdcd13959b7d44a80a189149047cf4701758b97c6d83704f3c8f47c4d9f0794e834e1981f96457b1f6da8438d1ca02310055c51eff0bf6624e5d640b53aa7b7569ec0648be595db8a54796aa7a0e427214592def5c1003d3cdcbfc60987d35ce36860a55b062fa2314b31df20fe6bf95191eba5fb83c399593fc1efc1cfd9e15f069d998869c7ff65a890b887df00515bc5837f55aa01c0c005c8a973b88956248d589540c9e67760d0824901d8d96adfe8c1fb5bc42323fa9a5d42faf3a12360881cda97800984b5b7f84f0ae834e0a5f7bf027b4ce0cac6e36d1ce0b04c894d3965ce97a8cabbb01832985d925c1f2d908d8638b6be52bf8e73d3df202b63dcf28c55dfe1bbfa8862a2aaa2fb1f6a660d1247785ffc07e5acad49078ba9eb5d1a280669b71e159d4c1518a793cc2def05c14a82e2965ad0b57a3c5a56b9c1bef379f55100254b4efe98bfb7661a363a45294638ec6bb6cededf3654fe6c67c930a0c595246a4ade3dc928fccd8a2ba774dd6d4edfb82ca68639ff417a9b0e48fa8cc335ba82a98ef19276d4c477a38e985b09ec9f6c43a23d3edfb33809caf9fe3d14677f7294e0a5b423a2e20ee015e692ee938aca13182094983b0d73c8e2ba931eb30ec3cc33f582b826fa28181529984b5034b43aedbd87dcdc5e06f44c3fba3656c7c61607c0d053247a274b96b3bfff62f25def3dddb9b46e6d6406b0fe2a3fbda8c2462297c0b84ffcde582c63694eec0db157511088b6acd8efb616857ea962c3a1c30fb22112d613390dbe3f0b0301b7faed4d48502791263ae2459ab23fd21b235b9b87813c68f2581c0f4fc411aa5a0ef09bc19dbd65a63c9a131b7e72fe1d26ec5847f36f7e24356ded54c8779dcc296e13c2ba16b804526250890cfd03944ac79a4ec9c71be1adbb03955c6cb3e510b78f554257b18c8bde325f0cd6ef727ae6982b97e670975f2b109cdd32d567acbf71a07bbdbb863ef258869bede4c32d0b6e49ffb5869706d56ade508ea286a82d0bf5e54487f0db871ea2c310a5182429d38e761fbbecaf62c9cfaf1fe06888862bc06a441bbdd05bc8ef48f0c94969bebfc016bb8d37c843ff72f97603d0cccce08fdacbabe1203ed0393e00dee592771f596f83aed1b995adc587e9f6538e68b66ccf01c3229c8647240d92abdc63ab057fd0adb9fd356882c310faf6906de2da0f6b506c9456250e8b95a3f3565487633e6c30b88510a2a73562f6c2ea251c8905810afb280f9288056b222ebbe1c6ba28eb61aa8422316821c38fdf99ff1b7d048b141dd5b36cbe7d8aad6cd9305fb6181509bddbb2c6135ba535c34b2949c57761fcd4dd0f286bc15272574fa28afd3ac9787b35a1d66735f3dabd9cefd38198493130219", 0x1000)
r2 = open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
r3 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x3, 0x1ffdf, 0x7, 0x200003, 0x209b, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x280, 0x100000000, 0x0, 0x7, 0x2100, 0x220, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffbff5, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x891, 0x7, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0x4, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
fstat$auto(r2, &(0x7f0000001380)={0x2, 0x10001, 0x4, 0xffffff4b, <r4=>0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x10, 0x6c5434c8, 0x6, 0x8000, 0x8000, 0xfff, 0x0, 0xf2})
r5 = getegid()
statx$auto(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x7, 0x1, &(0x7f0000001440)={0x1, 0xfffffdc0, 0x5, 0x1000, r4, r5, 0xba0c, 0x2f5c, 0x5, 0x3, 0x1, 0x81, {0x7, 0x9}, {0x7f, 0x5}, {0x6, 0x10000}, {0x7, 0xff}, 0x9, 0x0, 0x80, 0xf1, 0x4, 0x1, 0x8, 0x5, 0x81, 0x101, 0xffff7fff, 0x3ff, [0x5, 0x5e, 0x4, 0x9, 0x87c, 0x4, 0x9, 0x9d, 0x9]})

program crashed: BUG: corrupted list in remove_wait_queue
bisect: bisecting 24 programs
bisect: split chunks (needed=false): <23>
bisect: split chunk #0 of len 23 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 14, 30, 30, 11, 23, 30, 30, 6, 29, 8, 30, 30, 14, 30, 25]
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x3)
socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x1, 0x2, 0x0)
getsockopt$auto(0x100000006, 0x1, 0x30, 0xfffffffffffffffe, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff)
r2 = socket(0x2, 0x800, 0x106)
getsockopt$auto(r2, 0x11c, 0x2, 0x0, 0x0)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), r2)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3fc57c92", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf250400000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4)
executing program 2:
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(r0, 0x0, 0x10a, 0x8, 0x0)
mmap$auto(0x1000, 0x20009, 0xe6, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r1 = socket(0x2, 0x1, 0xfffffff9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xea769c9ebb14b2a8, 0x0)
select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/phonet\x00', 0x100, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/reboot/force\x00', 0x20000, 0x0)
r3 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/force_wakeup\x00', 0x88f42, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r3, &(0x7f0000000040)=""/38, 0x26)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r5, 0x560f, r6)
read$auto_usbfs_devices_fops_usb(r6, &(0x7f0000000140)=""/163, 0xa3)
socket(0xa, 0x806, 0x0)
socketpair$auto(0x21, 0x7, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
executing program 1:
read$auto(0x3, 0x0, 0x7ffffffff000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3)
mmap$auto(0x1, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram0\x00', 0x270740, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x1, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3)
write$auto(0x3, 0x0, 0x7fffffff)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
statx$auto(r0, 0x0, 0x2, 0x4, 0x0)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-touch13\x00', 0x280, 0x0)
ioctl$auto(r1, 0x4020565b, 0x38)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf251600000018000180140002007673696d3000698bc5b2b34bb0bcb50000000000050002000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)
r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r4, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b73830b7803aef33addb33f3a80008966bc86505849bf472949a7264a1b000000006fa2e5f21fce0030523201000000da9b64050a923b47b1cb1cf290e4810a16df17f1149f6eca420fbf7d53a56549111c87c69d637c1ae28405b2dff3826520c933442f745156c04be88be45a2e684a4ba9e89c89519737cf46cdb0f517a1056e0e8b5e017dae87f18fe2b8d7a969c8cc789c710200000000000000ab38c0c68c0e7f99d620dadeb18194128da7fcbd021e903d487682306888d0ab2dd66504b7f74a0e4327fafaba2f7e3f1c0c85f3f9a46a03ce414ce9919dd3b60025f7f4c45b65e53caff7c6e8357c48239edc19584076b5e272b7562951ef3ff0fd35a89b724ffbc2605d978ed5b72e7b2261d65c42ec43b314", 0x15b)
writev$auto(0x1, 0x0, 0x1)
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(r0, 0x0, 0x10a, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 2:
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket(0xa, 0x801, 0x84)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sysfs$auto(0x2, 0x0, 0x0) (async)
fsopen$auto(0x0, 0x1) (async)
epoll_create$auto(0x4) (async, rerun: 32)
close_range$auto(r0, r1, 0x0) (rerun: 32)
epoll_create$auto(0x4)
epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40001, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8)
write$auto(r2, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x7ff, &(0x7f0000000080)={0x7, 0x4, 0x80000001, 0x7c, 0x2, 0x9, r2, [0x0, 0xf1a, 0x802e], {0x40, 0xe6, 0xc4744f3, 0xf, 0x2, 0xff, 0x4, 0x80000001, 0xf9}, {0x8, 0xffff0ffe, 0xbc, 0x6, 0xf, 0x7fff, 0x9, 0x1, 0x8001}})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0)
executing program 2:
madvise$auto(0x0, 0x7fffffffffffffff, 0xb) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x69c2, 0x84) (async)
io_uring_setup$auto(0x6, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0) (async)
r2 = socket(0xa, 0x2, 0x88)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'erspan0\x00'}) (async)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000040)="86ad180916cd35e093b9901f03de02ef", 0x5d) (async)
bpf$auto(0x0, &(0x7f00000000c0)=@token_create={0x0, r3}, 0xf)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) (async)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r5 = socket(0x10, 0x3, 0x0) (async)
r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r6, @ANYBLOB="f50128bd7000fbdbdf250a00000a0b0002006e6c6374726c0000b6000200237d44a0d718ffd47bf0a1a5ee684c009409520147b78184bb44fb36d37d06f764f82aae04694a6ae777e2b91e158877a942cab380a39c25faca3e1ac07960d8a4350e6c71ea7a9c245d36ca9e8d687aa2731960831d43c94288024fd770ad4d20dc4885dadfb364efe2c36102cadf191d0a2eafa47e4ac9680a5f65beaaa103336b6da7154f8e38e8eb225f72f06692f3ed1b5ec666a013da8557925a0c372ebc2aa7cd33e417503b1596125d0d5c8d6b7b0000", @ANYBLOB="d8000000"], 0xd8}}, 0x22044080)
r7 = socket(0x2a, 0x2, 0x1)
connect$auto(r7, &(0x7f0000000180)=@ethernet={0x1, @local}, 0x8)
r8 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/bdi/7:13/stats\x00', 0x88f00, 0x0)
read$auto_bdi_debug_stats_fops_(r8, &(0x7f0000000980)=""/7, 0x7) (async)
connect$auto(r7, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x55)
unshare$auto(0xc)
mmap$auto(0x0, 0x20006, 0x3, 0xe72, 0x401, 0x8000) (async)
r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto_def_blk_fops_fs(r9, 0x80081280, 0x0)
futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xb94ea9e)
executing program 3:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/acpi/interrupts/gpe0E\x00', 0x0, 0x0)
socket(0x22, 0x2, 0x4)
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
r0 = open(0x0, 0x22240, 0x155)
open(0x0, 0xa240, 0x1de)
r1 = pipe$auto(0x0)
mmap$auto(0x0, 0x4000a, 0xdb, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x1d, 0x2, 0x7)
r3 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x2b03, 0x0)
r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), r1)
poll$auto(&(0x7f00000002c0)={<r6=>r0, 0x9, 0x1}, 0x4, 0x6c0)
r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000340), r0)
sendmsg$auto_NFC_CMD_SE_IO(r6, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1cdab992ed30e074131d2d753d10607912c18f9cbc05945910b9a9776061bb1ba803fabe69e7dc3896f61ad2cd4b91561c1f350027a02e6aee4de8095d68fd4596efb10a394a42834902724121b47b86d0ada22da47bd3165a09f90f224fa996d6a64b1e0478ad5c13037cdd7ea2ee5b2818c03521bb54b967b89b57ad453e919f231d587e4ffb9ff586b52a7415a49c97a916cf0c6bca82e83bb657945fbc46d8", @ANYRES16=r7, @ANYBLOB="000229bd7000fcdbdf251b00000008001e0000000000060014002a2e000005000f0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48880}, 0x2000c048)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.list\x00', 0x48a22, 0x0)
read$auto(r8, 0x0, 0x13)
sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRES16=r2, @ANYRES32=r8, @ANYBLOB="6cb980a37a86f28bb6709107597036c53f15a8e334463d801cb12519197c8b9e31230c7ebe04dec7b8a400000802ff0b73542650878f396c7ffea0c12e1a27adf7794bf7c4cd38bd42fd4de0411621887f2c"], 0x1c}}, 0x404c030)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, <r9=>r4}, 0x6a)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
sysfs$auto(0x2, 0x16, 0x0)
fsopen$auto(0x0, 0x1)
sendto$auto(r2, 0x0, 0xfdef, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r9}, 0x36)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x8000, 0x0)
ioctl$auto(0x3, 0x1, 0x90000800000402)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000045c0), 0x802, 0x0)
socketpair$auto(0x80000000, 0x5, 0x7, &(0x7f0000000000)=0x7)
ioctl$auto_RTC_PIE_ON(r0, 0x7005, 0xf)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto(0x3, 0x0, 0x10)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r0 = socket(0x32, 0x2, 0x9)
ioctl$auto(0x3, 0x89e0, 0x38) (async)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0)
mmap$auto(0x0, 0x60009, 0x7f, 0xeb1, 0x40000000000a5, 0x8000) (async)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) (async)
r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/ieee80211/phy0/user_power\x00', 0x40000, 0x0)
read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) (async)
ioctl$auto_TIOCGWINSZ2(r1, 0x5413, 0x0) (async)
mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x70) (async)
rmdir$auto(&(0x7f0000000000)='./file0\x00')
mknodat$auto(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0xfffffff8) (async)
lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) (async)
ioctl$auto(0x3, 0x5420, 0x38) (async)
getrandom$auto(0x0, 0x6000000, 0x3)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000300)=""/228, 0xe4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
socket(0x80000000000000a, 0x2, 0x0)
getsockopt$auto(r0, 0x7, 0x65, 0x0, 0x0) (async)
socket(0xa, 0x801, 0x84) (async)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) (async)
fstatfs$auto(0x3, 0x0) (async)
shutdown$auto(0x200000003, 0x2) (async)
setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x632b491c) (async)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0)
openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy2/ht40allow_map\x00', 0x200200, 0x0)
ioctl$auto(r1, 0x5407, r1)
executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0x2, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x400002c, 0x5, 0x0, 0x3}) (async)
ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002800)={'dummy0\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(0xffffffffffffffff, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004680)=ANY=[@ANYBLOB=' \x00h\x00', @ANYRES16=0x0, @ANYBLOB="a54928bd7000ffdbdf251a0000000c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40404}, 0x8800) (async)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4091d4a5f69186e55dc63d6af4467941b8404346f5fc6435176368912db5de57310d86ce", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250b00000008000500fbffffff08000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(r0, 0x0, 0x10a, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(&(0x7f0000000180)={0x6, @inferred=r0, 0x0, 0x7, 0xad90}, &(0x7f00000004c0)={0xfffffffd, 0xef, 0x0, 0x1ff, 0x17e360, 0xc4, 0x4, 0x5, 0x3, 0x4, 0xfffffff6, 0x9, 0x7, 0x4, 0x0, 0x80, 0xd7b6, 0x100, 0xb, 0xa0f, 0x1, 0x5, 0x6, 0x5, 0x6, 0x1, [0x4, 0xa5f4, 0xee2, 0xfffffffffffffff9, 0x9, 0x3, 0xffff, 0x4, 0x81, 0x7fff, 0x1, 0x7, 0x2, 0x98, 0x7ff, 0x8, 0x6, 0xf756, 0xfffffffffffff5d5, 0x5, 0x40, 0x4, 0x76e14948, 0x3, 0x4, 0x9, 0x8000000000000001, 0x0, 0x5, 0xb, 0x2, 0x3467, 0x9dc5, 0x7, 0x1, 0xe, 0xea5, 0xd8f3, 0x3, 0x100000000000000, 0x8000000000000001, 0x5a7, 0x8, 0x2, 0x8001, 0x81], "d8739aa5b66d4b9b398d0369f021f2ddb014935e94caee889178ab1fa60161b5f65183f8a88f7b6aec73ea27fb"}, 0x9, 0x2)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
setresuid$auto(0x0, 0x8, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mq_open$auto(0x0, 0x3ff, 0x7, &(0x7f0000000140)={0x7, 0x100000000, 0xa509, 0x4})
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x180002}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1a0, r1, 0x2, 0x70bd29, 0x8001, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x69, 0xbe, "c6935cb981cbf9574455a423b3d14cbc60ab429866f9838c462898927301891e6fc473e4fa48275c570139dac942d424e1dd5fe0ac9708d7eb6ae38d42ccc12400c2c5e6db352ec2dbc2925ec49826afc0194f37725fb901739c164a37e5d85947ce256b06"}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [@typed={0x2a, 0x105, 0x0, 0x0, @binary="6d0550407beb20c106c95648b69c52999f8c6224b394aa94b17fb9ac72e22744e587e37d08d5"}]}, @NL80211_ATTR_STA_WME={0x44, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}]}, @NL80211_ATTR_MLO_TTLM_DLINK={0xab, 0x148, "b0282b04d956222e92fdc4e0fcdb068347e77c0294e9897f63688d8f84b972b44e3c515f12205d752f430248161f411afd4df7f3fe4581bed42c5c65dcfcc9c9900a779d573e0d2ee6eb6a57db5c399b82a6f07d6ea6a103aef7399b1ec31d636bbd1fd84ae307fbf6f5441618b5053a9390c86ba722e21288d670684aa32a32e3ca8609653fd6acb5445e0370ea261b4c4841e95e9503b475b8d9678cc7a3d13c6686b76a9ce3"}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8051}, 0x85)
socket(0x1d, 0x2, 0x6)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/sda/sched/read0_next_rq\x00', 0x121000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x11, 0x80003, 0x300)
socket(0x2c, 0x80003, 0x0)
bind$auto(0x3, 0x0, 0xb)
pread64$auto(r2, 0x0, 0x68, 0xfc)
r3 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r5 = socket(0xa, 0x3, 0x3b)
getsockopt$auto(r5, 0x29, 0x24, 0x0, 0x0)
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000700), r5)
sendmsg$auto_TIPC_NL_LINK_SET(r3, &(0x7f0000000a00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x268, r6, 0x10, 0x70bd25, 0xffff, {}, [@TIPC_NLA_MON={0x253, 0x9, 0x0, 0x1, [@generic="e9fdb054d31cb1958f516a128ebbbe2e4db11383c638da9e23e6e2a97b20a010d13f619623b1968f97c6448e3cedd86416c0ce3f5386557c51d655bb79548703dd32e481425181658791a0d51741860f0ee1acdaaecca76d0d2ae80530491259214222dac2be51e28dea9a65b13b5a4430b955b989c37e9b734f6c6ba5258658163a36aec7241a8bf42cafba56132f489d9c4799a07e4bd1e68ac8e7337602ab1c758ecb", @nested={0x109, 0xc3, 0x0, 0x1, [@typed={0xc, 0xfb, 0x0, 0x0, @u64=0x8000000000000000}, @nested={0x4, 0x11f}, @nested={0x4, 0x4c}, @generic="2073d22d60ff328a253d607931b7388df11bd6a5cf29a8cdb761ff3a8886f92189b10068ce96a7b9cdbe8e0141f19c1a56c84510d882380547fb2e52b6c8ef8896f7f40507a7bed8e8e1576b2aa1093081f1431c4aa9076f91ddd6ef2c7d26a43332f273eee68c194302108a4e795e04ac36d04c66a99d559ab378cb7f49c83bfd7c5886fbde3135bff6086bf79e10450d74c03e89f2af4a24d0a63d744a6986235ff09da188fe30c592765a832332025a408a6cac828f8b5c2274a31d7bc29dd1f48218b9245027726de568f8b9fb9ed81f867777fed617ca60c8556c59543a828f6c6142e6eda6ab8261ec0f054e3bcb"]}, @generic="541feff6dddab6b15c8033a67f1804ceb473c8235ada792c4b2bae773b1d81f2103b39d0bf0dfba5c11e6ac7f64cd18b5ec309e5f7e31701640efd9c2764bf6d09492fabd92d2d68ea0ab915f3ef53d6db63f0eb23798eb8d52017394a7100f983d7193f141a6c9a37bcac1b70ec1ed9b0072d4e7ed6a1a11b648c7a0994758df9e0bf4808461e0ddc4bd5cb9900d1640dfa83b1281f536679d08dcec29889"]}]}, 0x268}, 0x1, 0x0, 0x0, 0x11}, 0x20000080)
executing program 3:
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00')
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r1, &(0x7f0000000380)="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", 0x1000)
r2 = open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
r3 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x3, 0x1ffdf, 0x7, 0x200003, 0x209b, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x280, 0x100000000, 0x0, 0x7, 0x2100, 0x220, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffbff5, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x891, 0x7, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0x4, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
fstat$auto(r2, &(0x7f0000001380)={0x2, 0x10001, 0x4, 0xffffff4b, <r4=>0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x10, 0x6c5434c8, 0x6, 0x8000, 0x8000, 0xfff, 0x0, 0xf2})
r5 = getegid()
statx$auto(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x7, 0x1, &(0x7f0000001440)={0x1, 0xfffffdc0, 0x5, 0x1000, r4, r5, 0xba0c, 0x2f5c, 0x5, 0x3, 0x1, 0x81, {0x7, 0x9}, {0x7f, 0x5}, {0x6, 0x10000}, {0x7, 0xff}, 0x9, 0x0, 0x80, 0xf1, 0x4, 0x1, 0x8, 0x5, 0x81, 0x101, 0xffff7fff, 0x3ff, [0x5, 0x5e, 0x4, 0x9, 0x87c, 0x4, 0x9, 0x9d, 0x9]})

program crashed: BUG: corrupted list in remove_wait_queue
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 29, 8, 30, 30, 14, 30, 25]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000045c0), 0x802, 0x0)
socketpair$auto(0x80000000, 0x5, 0x7, &(0x7f0000000000)=0x7)
ioctl$auto_RTC_PIE_ON(r0, 0x7005, 0xf)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto(0x3, 0x0, 0x10)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r0 = socket(0x32, 0x2, 0x9)
ioctl$auto(0x3, 0x89e0, 0x38) (async)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0)
mmap$auto(0x0, 0x60009, 0x7f, 0xeb1, 0x40000000000a5, 0x8000) (async)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) (async)
r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/ieee80211/phy0/user_power\x00', 0x40000, 0x0)
read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) (async)
ioctl$auto_TIOCGWINSZ2(r1, 0x5413, 0x0) (async)
mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x70) (async)
rmdir$auto(&(0x7f0000000000)='./file0\x00')
mknodat$auto(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0xfffffff8) (async)
lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) (async)
ioctl$auto(0x3, 0x5420, 0x38) (async)
getrandom$auto(0x0, 0x6000000, 0x3)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000300)=""/228, 0xe4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
socket(0x80000000000000a, 0x2, 0x0)
getsockopt$auto(r0, 0x7, 0x65, 0x0, 0x0) (async)
socket(0xa, 0x801, 0x84) (async)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) (async)
fstatfs$auto(0x3, 0x0) (async)
shutdown$auto(0x200000003, 0x2) (async)
setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x632b491c) (async)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0)
openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy2/ht40allow_map\x00', 0x200200, 0x0)
ioctl$auto(r1, 0x5407, r1)
executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0x2, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x400002c, 0x5, 0x0, 0x3}) (async)
ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002800)={'dummy0\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(0xffffffffffffffff, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004680)=ANY=[@ANYBLOB=' \x00h\x00', @ANYRES16=0x0, @ANYBLOB="a54928bd7000ffdbdf251a0000000c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40404}, 0x8800) (async)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4091d4a5f69186e55dc63d6af4467941b8404346f5fc6435176368912db5de57310d86ce", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250b00000008000500fbffffff08000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(r0, 0x0, 0x10a, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(&(0x7f0000000180)={0x6, @inferred=r0, 0x0, 0x7, 0xad90}, &(0x7f00000004c0)={0xfffffffd, 0xef, 0x0, 0x1ff, 0x17e360, 0xc4, 0x4, 0x5, 0x3, 0x4, 0xfffffff6, 0x9, 0x7, 0x4, 0x0, 0x80, 0xd7b6, 0x100, 0xb, 0xa0f, 0x1, 0x5, 0x6, 0x5, 0x6, 0x1, [0x4, 0xa5f4, 0xee2, 0xfffffffffffffff9, 0x9, 0x3, 0xffff, 0x4, 0x81, 0x7fff, 0x1, 0x7, 0x2, 0x98, 0x7ff, 0x8, 0x6, 0xf756, 0xfffffffffffff5d5, 0x5, 0x40, 0x4, 0x76e14948, 0x3, 0x4, 0x9, 0x8000000000000001, 0x0, 0x5, 0xb, 0x2, 0x3467, 0x9dc5, 0x7, 0x1, 0xe, 0xea5, 0xd8f3, 0x3, 0x100000000000000, 0x8000000000000001, 0x5a7, 0x8, 0x2, 0x8001, 0x81], "d8739aa5b66d4b9b398d0369f021f2ddb014935e94caee889178ab1fa60161b5f65183f8a88f7b6aec73ea27fb"}, 0x9, 0x2)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
setresuid$auto(0x0, 0x8, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mq_open$auto(0x0, 0x3ff, 0x7, &(0x7f0000000140)={0x7, 0x100000000, 0xa509, 0x4})
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x180002}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1a0, r1, 0x2, 0x70bd29, 0x8001, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x69, 0xbe, "c6935cb981cbf9574455a423b3d14cbc60ab429866f9838c462898927301891e6fc473e4fa48275c570139dac942d424e1dd5fe0ac9708d7eb6ae38d42ccc12400c2c5e6db352ec2dbc2925ec49826afc0194f37725fb901739c164a37e5d85947ce256b06"}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [@typed={0x2a, 0x105, 0x0, 0x0, @binary="6d0550407beb20c106c95648b69c52999f8c6224b394aa94b17fb9ac72e22744e587e37d08d5"}]}, @NL80211_ATTR_STA_WME={0x44, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}]}, @NL80211_ATTR_MLO_TTLM_DLINK={0xab, 0x148, "b0282b04d956222e92fdc4e0fcdb068347e77c0294e9897f63688d8f84b972b44e3c515f12205d752f430248161f411afd4df7f3fe4581bed42c5c65dcfcc9c9900a779d573e0d2ee6eb6a57db5c399b82a6f07d6ea6a103aef7399b1ec31d636bbd1fd84ae307fbf6f5441618b5053a9390c86ba722e21288d670684aa32a32e3ca8609653fd6acb5445e0370ea261b4c4841e95e9503b475b8d9678cc7a3d13c6686b76a9ce3"}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8051}, 0x85)
socket(0x1d, 0x2, 0x6)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/sda/sched/read0_next_rq\x00', 0x121000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x11, 0x80003, 0x300)
socket(0x2c, 0x80003, 0x0)
bind$auto(0x3, 0x0, 0xb)
pread64$auto(r2, 0x0, 0x68, 0xfc)
r3 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r5 = socket(0xa, 0x3, 0x3b)
getsockopt$auto(r5, 0x29, 0x24, 0x0, 0x0)
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000700), r5)
sendmsg$auto_TIPC_NL_LINK_SET(r3, &(0x7f0000000a00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x268, r6, 0x10, 0x70bd25, 0xffff, {}, [@TIPC_NLA_MON={0x253, 0x9, 0x0, 0x1, [@generic="e9fdb054d31cb1958f516a128ebbbe2e4db11383c638da9e23e6e2a97b20a010d13f619623b1968f97c6448e3cedd86416c0ce3f5386557c51d655bb79548703dd32e481425181658791a0d51741860f0ee1acdaaecca76d0d2ae80530491259214222dac2be51e28dea9a65b13b5a4430b955b989c37e9b734f6c6ba5258658163a36aec7241a8bf42cafba56132f489d9c4799a07e4bd1e68ac8e7337602ab1c758ecb", @nested={0x109, 0xc3, 0x0, 0x1, [@typed={0xc, 0xfb, 0x0, 0x0, @u64=0x8000000000000000}, @nested={0x4, 0x11f}, @nested={0x4, 0x4c}, @generic="2073d22d60ff328a253d607931b7388df11bd6a5cf29a8cdb761ff3a8886f92189b10068ce96a7b9cdbe8e0141f19c1a56c84510d882380547fb2e52b6c8ef8896f7f40507a7bed8e8e1576b2aa1093081f1431c4aa9076f91ddd6ef2c7d26a43332f273eee68c194302108a4e795e04ac36d04c66a99d559ab378cb7f49c83bfd7c5886fbde3135bff6086bf79e10450d74c03e89f2af4a24d0a63d744a6986235ff09da188fe30c592765a832332025a408a6cac828f8b5c2274a31d7bc29dd1f48218b9245027726de568f8b9fb9ed81f867777fed617ca60c8556c59543a828f6c6142e6eda6ab8261ec0f054e3bcb"]}, @generic="541feff6dddab6b15c8033a67f1804ceb473c8235ada792c4b2bae773b1d81f2103b39d0bf0dfba5c11e6ac7f64cd18b5ec309e5f7e31701640efd9c2764bf6d09492fabd92d2d68ea0ab915f3ef53d6db63f0eb23798eb8d52017394a7100f983d7193f141a6c9a37bcac1b70ec1ed9b0072d4e7ed6a1a11b648c7a0994758df9e0bf4808461e0ddc4bd5cb9900d1640dfa83b1281f536679d08dcec29889"]}]}, 0x268}, 0x1, 0x0, 0x0, 0x11}, 0x20000080)
executing program 3:
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00')
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r1, &(0x7f0000000380)="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", 0x1000)
r2 = open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
r3 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x3, 0x1ffdf, 0x7, 0x200003, 0x209b, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x280, 0x100000000, 0x0, 0x7, 0x2100, 0x220, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffbff5, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x891, 0x7, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0x4, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
fstat$auto(r2, &(0x7f0000001380)={0x2, 0x10001, 0x4, 0xffffff4b, <r4=>0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x10, 0x6c5434c8, 0x6, 0x8000, 0x8000, 0xfff, 0x0, 0xf2})
r5 = getegid()
statx$auto(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x7, 0x1, &(0x7f0000001440)={0x1, 0xfffffdc0, 0x5, 0x1000, r4, r5, 0xba0c, 0x2f5c, 0x5, 0x3, 0x1, 0x81, {0x7, 0x9}, {0x7f, 0x5}, {0x6, 0x10000}, {0x7, 0xff}, 0x9, 0x0, 0x80, 0xf1, 0x4, 0x1, 0x8, 0x5, 0x81, 0x101, 0xffff7fff, 0x3ff, [0x5, 0x5e, 0x4, 0x9, 0x87c, 0x4, 0x9, 0x9d, 0x9]})

program crashed: BUG: corrupted list in remove_wait_queue
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS-poll$auto-mmap$auto-close_range$auto-memfd_create$auto-socket-ioctl$auto-bpf$auto-close_range$auto-sendmsg$auto_IPVS_CMD_SET_CONFIG-pwrite64$auto-memfd_secret$auto-set_mempolicy$auto-mmap$auto-mmap$auto-openat$auto_vmuser_fops_vmci_host-ioctl$auto_IOCTL_VMCI_VERSION2-ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC-poll$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_GET_WOWLAN-ioctl$auto_PPPIOCSPASS-fanotify_init$auto-read$auto_snd_pcm_f_ops_pcm1-openat$auto_snd_pcm_oss_f_reg_pcm_oss-sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS-ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4091d4a5f69186e55dc63d6af4467941b8404346f5fc6435176368912db5de57310d86ce", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250b00000008000500fbffffff08000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)

program did not crash
bisect: split chunks (needed=true): <7>
bisect: split chunk #0 of len 7 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 14, 30, 25]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4091d4a5f69186e55dc63d6af4467941b8404346f5fc6435176368912db5de57310d86ce", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250b00000008000500fbffffff08000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00')
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r1, &(0x7f0000000380)="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", 0x1000)
r2 = open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
r3 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x3, 0x1ffdf, 0x7, 0x200003, 0x209b, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x280, 0x100000000, 0x0, 0x7, 0x2100, 0x220, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffbff5, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x891, 0x7, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0x4, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
fstat$auto(r2, &(0x7f0000001380)={0x2, 0x10001, 0x4, 0xffffff4b, <r4=>0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x10, 0x6c5434c8, 0x6, 0x8000, 0x8000, 0xfff, 0x0, 0xf2})
r5 = getegid()
statx$auto(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x7, 0x1, &(0x7f0000001440)={0x1, 0xfffffdc0, 0x5, 0x1000, r4, r5, 0xba0c, 0x2f5c, 0x5, 0x3, 0x1, 0x81, {0x7, 0x9}, {0x7f, 0x5}, {0x6, 0x10000}, {0x7, 0xff}, 0x9, 0x0, 0x80, 0xf1, 0x4, 0x1, 0x8, 0x5, 0x81, 0x101, 0xffff7fff, 0x3ff, [0x5, 0x5e, 0x4, 0x9, 0x87c, 0x4, 0x9, 0x9d, 0x9]})

program crashed: BUG: corrupted list in remove_wait_queue
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <3>
bisect: split chunk #0 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 25]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4091d4a5f69186e55dc63d6af4467941b8404346f5fc6435176368912db5de57310d86ce", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250b00000008000500fbffffff08000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00')
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r1, &(0x7f0000000380)="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", 0x1000)
r2 = open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
r3 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x3, 0x1ffdf, 0x7, 0x200003, 0x209b, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x280, 0x100000000, 0x0, 0x7, 0x2100, 0x220, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffbff5, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x891, 0x7, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0x4, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
fstat$auto(r2, &(0x7f0000001380)={0x2, 0x10001, 0x4, 0xffffff4b, <r4=>0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x10, 0x6c5434c8, 0x6, 0x8000, 0x8000, 0xfff, 0x0, 0xf2})
r5 = getegid()
statx$auto(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x7, 0x1, &(0x7f0000001440)={0x1, 0xfffffdc0, 0x5, 0x1000, r4, r5, 0xba0c, 0x2f5c, 0x5, 0x3, 0x1, 0x81, {0x7, 0x9}, {0x7f, 0x5}, {0x6, 0x10000}, {0x7, 0xff}, 0x9, 0x0, 0x80, 0xf1, 0x4, 0x1, 0x8, 0x5, 0x81, 0x101, 0xffff7fff, 0x3ff, [0x5, 0x5e, 0x4, 0x9, 0x87c, 0x4, 0x9, 0x9d, 0x9]})

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 14, 30]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4091d4a5f69186e55dc63d6af4467941b8404346f5fc6435176368912db5de57310d86ce", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250b00000008000500fbffffff08000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
select$auto(0x4, &(0x7f0000000240)={[0x9, 0x8, 0x3, 0x4, 0x4, 0x8002, 0x4, 0x5, 0x8, 0x34, 0x5, 0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x5]}, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a03f, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0x8)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4091d4a5f69186e55dc63d6af4467941b8404346f5fc6435176368912db5de57310d86ce", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250b00000008000500fbffffff08000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ccae60b4363fedbbf08cf781f0428739f9cddbde0a6ee72789cac99ae3b4509f10437bf2fa1ff51255e9cc46086a4f2f42188ae365b685ffd530918f466a730a2543ae7278a148f6c7d358d1722a7d4c651b1c136dccde63346b3c04ca818e027d9d1772c9366969927bda7d1bc40f462f2c487fa74f8fc840534ca1a9d262d66b050000000000000051e355045c1958030a611959cf378ac11a964764617b197d469087c901df54da1f37da0151661aa2de03980efbbaeb9d05bad79c06e964842245ce8547eadaf7179a87e79f2a8e3b9467e6935b45f87cf9160da5ad921033a07981aac573c96b825d4f4fe89cfdbad8f0688c5c1264fdce9d04c3cc1b6ed504144c89e566c74a01089b932e06e90a231fb0798b010c86e56bdc503e0c480737bbb2afba3138d93df0880ddfb53cda6a6d74c46182e405154329937bdb22b3a7c770f2f12b999f94828887a3137b2417ed5412855fb33017042ab65af4768e042e69c1421adc2a1afe0851f081f2cd5b474c618d73e92b0b3f19a86726015482353a5b04d8bb90e88e7949edcd3a568eae25ae99354dfded9f2d3b7f87588ddeee80e4d0d2f9e6ae43f24b39d15dcba42b838cb44fc2f3dd98f461fff60bfdaa292f71ad23293b37bb265ad72c0bfe56bb1b2af2c2e2e741cdfe260f53cc3c15028c636d69fe4a400cdd712149b3777027a7592d03888905a6ac6292de85d63bee2d55c882439b463a62e2bc24589841cad6e3eb7d011c23c4577c87af692a55d57c1033dd6bbaffc6ce56d8d40f07f6b0475eb8717855745401a9b5a2ffd53aea36132ac7620d18035c64f1bc6861"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 2 programs left: 

executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4091d4a5f69186e55dc63d6af4467941b8404346f5fc6435176368912db5de57310d86ce", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250b00000008000500fbffffff08000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')


bisect: trying to concatenate
bisect: concatenate 2 entries
minimizing program #0 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4091d4a5f69186e55dc63d6af4467941b8404346f5fc6435176368912db5de57310d86ce", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250b00000008000500fbffffff08000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ccae60b4363fedbbf08cf781f0428739f9cddbde0a6ee72789cac99ae3b4509f10437bf2fa1ff51255e9cc46086a4f2f42188ae365b685ffd530918f466a730a2543ae7278a148f6c7d358d1722a7d4c651b1c136dccde63346b3c04ca818e027d9d1772c9366969927bda7d1bc40f462f2c487fa74f8fc840534ca1a9d262d66b050000000000000051e355045c1958030a611959cf378ac11a964764617b197d469087c901df54da1f37da0151661aa2de03980efbbaeb9d05bad79c06e964842245ce8547eadaf7179a87e79f2a8e3b9467e6935b45f87cf9160da5ad921033a07981aac573c96b825d4f4fe89cfdbad8f0688c5c1264fdce9d04c3cc1b6ed504144c89e566c74a01089b932e06e90a231fb0798b010c86e56bdc503e0c480737bbb2afba3138d93df0880ddfb53cda6a6d74c46182e405154329937bdb22b3a7c770f2f12b999f94828887a3137b2417ed5412855fb33017042ab65af4768e042e69c1421adc2a1afe0851f081f2cd5b474c618d73e92b0b3f19a86726015482353a5b04d8bb90e88e7949edcd3a568eae25ae99354dfded9f2d3b7f87588ddeee80e4d0d2f9e6ae43f24b39d15dcba42b838cb44fc2f3dd98f461fff60bfdaa292f71ad23293b37bb265ad72c0bfe56bb1b2af2c2e2e741cdfe260f53cc3c15028c636d69fe4a400cdd712149b3777027a7592d03888905a6ac6292de85d63bee2d55c882439b463a62e2bc24589841cad6e3eb7d011c23c4577c87af692a55d57c1033dd6bbaffc6ce56d8d40f07f6b0475eb8717855745401a9b5a2ffd53aea36132ac7620d18035c64f1bc6861"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = fanotify_init$auto(0x602, 0x1)
read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000000c0)=""/109, 0x6d)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
fanotify_init$auto(0x602, 0x1)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ccae60b4363fedbbf08cf781f0428739f9cddbde0a6ee72789cac99ae3b4509f10437bf2fa1ff51255e9cc46086a4f2f42188ae365b685ffd530918f466a730a2543ae7278a148f6c7d358d1722a7d4c651b1c136dccde63346b3c04ca818e027d9d1772c9366969927bda7d1bc40f462f2c487fa74f8fc840534ca1a9d262d66b050000000000000051e355045c1958030a611959cf378ac11a964764617b197d469087c901df54da1f37da0151661aa2de03980efbbaeb9d05bad79c06e964842245ce8547eadaf7179a87e79f2a8e3b9467e6935b45f87cf9160da5ad921033a07981aac573c96b825d4f4fe89cfdbad8f0688c5c1264fdce9d04c3cc1b6ed504144c89e566c74a01089b932e06e90a231fb0798b010c86e56bdc503e0c480737bbb2afba3138d93df0880ddfb53cda6a6d74c46182e405154329937bdb22b3a7c770f2f12b999f94828887a3137b2417ed5412855fb33017042ab65af4768e042e69c1421adc2a1afe0851f081f2cd5b474c618d73e92b0b3f19a86726015482353a5b04d8bb90e88e7949edcd3a568eae25ae99354dfded9f2d3b7f87588ddeee80e4d0d2f9e6ae43f24b39d15dcba42b838cb44fc2f3dd98f461fff60bfdaa292f71ad23293b37bb265ad72c0bfe56bb1b2af2c2e2e741cdfe260f53cc3c15028c636d69fe4a400cdd712149b3777027a7592d03888905a6ac6292de85d63bee2d55c882439b463a62e2bc24589841cad6e3eb7d011c23c4577c87af692a55d57c1033dd6bbaffc6ce56d8d40f07f6b0475eb8717855745401a9b5a2ffd53aea36132ac7620d18035c64f1bc6861"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={<r3=>r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf25490000009d00d700ed40761c7e1339f141464e38f10f753fa45c4d9ebf755e39669cf55acca3745bacf03bc60328e6d41f3815c26f115ba4705749dbc192a2c45983a07686ac0351f5bd2d64f69c138df00faee819e4e1bcc6a20783e7eb813c12ee8cd98dc75abbfdf7f7e584f7a1f7b1410c82de309402657f90c5e9b0a9ddcd27da0d316727cb7041c21cd0bfc873c7a08534a0ac84694bd2fed19c7a3fbaaf0000001c002680080001ffffffff08000200070000000400d1000c00178005000200070000000400dd00"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c084}, 0x20000000)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={r2, 0x1ff, 0x2f4}, 0x4, 0xb)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={r2, 0x1ff, 0x2f4}, 0x4, 0xb)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ccae60b4363fedbbf08cf781f0428739f9cddbde0a6ee72789cac99ae3b4509f10437bf2fa1ff51255e9cc46086a4f2f42188ae365b685ffd530918f466a730a2543ae7278a148f6c7d358d1722a7d4c651b1c136dccde63346b3c04ca818e027d9d1772c9366969927bda7d1bc40f462f2c487fa74f8fc840534ca1a9d262d66b050000000000000051e355045c1958030a611959cf378ac11a964764617b197d469087c901df54da1f37da0151661aa2de03980efbbaeb9d05bad79c06e964842245ce8547eadaf7179a87e79f2a8e3b9467e6935b45f87cf9160da5ad921033a07981aac573c96b825d4f4fe89cfdbad8f0688c5c1264fdce9d04c3cc1b6ed504144c89e566c74a01089b932e06e90a231fb0798b010c86e56bdc503e0c480737bbb2afba3138d93df0880ddfb53cda6a6d74c46182e405154329937bdb22b3a7c770f2f12b999f94828887a3137b2417ed5412855fb33017042ab65af4768e042e69c1421adc2a1afe0851f081f2cd5b474c618d73e92b0b3f19a86726015482353a5b04d8bb90e88e7949edcd3a568eae25ae99354dfded9f2d3b7f87588ddeee80e4d0d2f9e6ae43f24b39d15dcba42b838cb44fc2f3dd98f461fff60bfdaa292f71ad23293b37bb265ad72c0bfe56bb1b2af2c2e2e741cdfe260f53cc3c15028c636d69fe4a400cdd712149b3777027a7592d03888905a6ac6292de85d63bee2d55c882439b463a62e2bc24589841cad6e3eb7d011c23c4577c87af692a55d57c1033dd6bbaffc6ce56d8d40f07f6b0475eb8717855745401a9b5a2ffd53aea36132ac7620d18035c64f1bc6861"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
poll$auto(&(0x7f0000000000)={r2, 0x1ff, 0x2f4}, 0x4, 0xb)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
r1 = memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb2, 0xfffffffffffffffa, 0x800)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
memfd_secret$auto(0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
memfd_secret$auto(0x0)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ccae60b4363fedbbf08cf781f0428739f9cddbde0a6ee72789cac99ae3b4509f10437bf2fa1ff51255e9cc46086a4f2f42188ae365b685ffd530918f466a730a2543ae7278a148f6c7d358d1722a7d4c651b1c136dccde63346b3c04ca818e027d9d1772c9366969927bda7d1bc40f462f2c487fa74f8fc840534ca1a9d262d66b050000000000000051e355045c1958030a611959cf378ac11a964764617b197d469087c901df54da1f37da0151661aa2de03980efbbaeb9d05bad79c06e964842245ce8547eadaf7179a87e79f2a8e3b9467e6935b45f87cf9160da5ad921033a07981aac573c96b825d4f4fe89cfdbad8f0688c5c1264fdce9d04c3cc1b6ed504144c89e566c74a01089b932e06e90a231fb0798b010c86e56bdc503e0c480737bbb2afba3138d93df0880ddfb53cda6a6d74c46182e405154329937bdb22b3a7c770f2f12b999f94828887a3137b2417ed5412855fb33017042ab65af4768e042e69c1421adc2a1afe0851f081f2cd5b474c618d73e92b0b3f19a86726015482353a5b04d8bb90e88e7949edcd3a568eae25ae99354dfded9f2d3b7f87588ddeee80e4d0d2f9e6ae43f24b39d15dcba42b838cb44fc2f3dd98f461fff60bfdaa292f71ad23293b37bb265ad72c0bfe56bb1b2af2c2e2e741cdfe260f53cc3c15028c636d69fe4a400cdd712149b3777027a7592d03888905a6ac6292de85d63bee2d55c882439b463a62e2bc24589841cad6e3eb7d011c23c4577c87af692a55d57c1033dd6bbaffc6ce56d8d40f07f6b0475eb8717855745401a9b5a2ffd53aea36132ac7620d18035c64f1bc6861"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={<r0=>0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
bpf$auto(0x9, &(0x7f0000000780)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xa3)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ccae60b4363fedbbf08cf781f0428739f9cddbde0a6ee72789cac99ae3b4509f10437bf2fa1ff51255e9cc46086a4f2f42188ae365b685ffd530918f466a730a2543ae7278a148f6c7d358d1722a7d4c651b1c136dccde63346b3c04ca818e027d9d1772c9366969927bda7d1bc40f462f2c487fa74f8fc840534ca1a9d262d66b050000000000000051e355045c1958030a611959cf378ac11a964764617b197d469087c901df54da1f37da0151661aa2de03980efbbaeb9d05bad79c06e964842245ce8547eadaf7179a87e79f2a8e3b9467e6935b45f87cf9160da5ad921033a07981aac573c96b825d4f4fe89cfdbad8f0688c5c1264fdce9d04c3cc1b6ed504144c89e566c74a01089b932e06e90a231fb0798b010c86e56bdc503e0c480737bbb2afba3138d93df0880ddfb53cda6a6d74c46182e405154329937bdb22b3a7c770f2f12b999f94828887a3137b2417ed5412855fb33017042ab65af4768e042e69c1421adc2a1afe0851f081f2cd5b474c618d73e92b0b3f19a86726015482353a5b04d8bb90e88e7949edcd3a568eae25ae99354dfded9f2d3b7f87588ddeee80e4d0d2f9e6ae43f24b39d15dcba42b838cb44fc2f3dd98f461fff60bfdaa292f71ad23293b37bb265ad72c0bfe56bb1b2af2c2e2e741cdfe260f53cc3c15028c636d69fe4a400cdd712149b3777027a7592d03888905a6ac6292de85d63bee2d55c882439b463a62e2bc24589841cad6e3eb7d011c23c4577c87af692a55d57c1033dd6bbaffc6ce56d8d40f07f6b0475eb8717855745401a9b5a2ffd53aea36132ac7620d18035c64f1bc6861"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ccae60b4363fedbbf08cf781f0428739f9cddbde0a6ee72789cac99ae3b4509f10437bf2fa1ff51255e9cc46086a4f2f42188ae365b685ffd530918f466a730a2543ae7278a148f6c7d358d1722a7d4c651b1c136dccde63346b3c04ca818e027d9d1772c9366969927bda7d1bc40f462f2c487fa74f8fc840534ca1a9d262d66b050000000000000051e355045c1958030a611959cf378ac11a964764617b197d469087c901df54da1f37da0151661aa2de03980efbbaeb9d05bad79c06e964842245ce8547eadaf7179a87e79f2a8e3b9467e6935b45f87cf9160da5ad921033a07981aac573c96b825d4f4fe89cfdbad8f0688c5c1264fdce9d04c3cc1b6ed504144c89e566c74a01089b932e06e90a231fb0798b010c86e56bdc503e0c480737bbb2afba3138d93df0880ddfb53cda6a6d74c46182e405154329937bdb22b3a7c770f2f12b999f94828887a3137b2417ed5412855fb33017042ab65af4768e042e69c1421adc2a1afe0851f081f2cd5b474c618d73e92b0b3f19a86726015482353a5b04d8bb90e88e7949edcd3a568eae25ae99354dfded9f2d3b7f87588ddeee80e4d0d2f9e6ae43f24b39d15dcba42b838cb44fc2f3dd98f461fff60bfdaa292f71ad23293b37bb265ad72c0bfe56bb1b2af2c2e2e741cdfe260f53cc3c15028c636d69fe4a400cdd712149b3777027a7592d03888905a6ac6292de85d63bee2d55c882439b463a62e2bc24589841cad6e3eb7d011c23c4577c87af692a55d57c1033dd6bbaffc6ce56d8d40f07f6b0475eb8717855745401a9b5a2ffd53aea36132ac7620d18035c64f1bc6861"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ccae60b4363fedbbf08cf781f0428739f9cddbde0a6ee72789cac99ae3b4509f10437bf2fa1ff51255e9cc46086a4f2f42188ae365b685ffd530918f466a730a2543ae7278a148f6c7d358d1722a7d4c651b1c136dccde63346b3c04ca818e027d9d1772c9366969927bda7d1bc40f462f2c487fa74f8fc840534ca1a9d262d66b050000000000000051e355045c1958030a611959cf378ac11a964764617b197d469087c901df54da1f37da0151661aa2de03980efbbaeb9d05bad79c06e964842245ce8547eadaf7179a87e79f2a8e3b9467e6935b45f87cf9160da5ad921033a07981aac573c96b825d4f4fe89cfdbad8f0688c5c1264fdce9d04c3cc1b6ed504144c89e566c74a01089b932e06e90a231fb0798b010c86e56bdc503e0c480737bbb2afba3138d93df0880ddfb53cda6a6d74c46182e405154329937bdb22b3a7c770f2f12b999f94828887a3137b2417ed5412855fb33017042ab65af4768e042e69c1421adc2a1afe0851f081f2cd5b474c618d73e92b0b3f19a86726015482353a5b04d8bb90e88e7949edcd3a568eae25ae99354dfded9f2d3b7f87588ddeee80e4d0d2f9e6ae43f24b39d15dcba42b838cb44fc2f3dd98f461fff60bfdaa292f71ad23293b37bb265ad72c0bfe56bb1b2af2c2e2e741cdfe260f53cc3c15028c636d69fe4a400cdd712149b3777027a7592d03888905a6ac6292de85d63bee2d55c882439b463a62e2bc24589841cad6e3eb7d011c23c4577c87af692a55d57c1033dd6bbaffc6ce56d8d40f07f6b0475eb8717855745401a9b5a2ffd53aea36132ac7620d18035c64f1bc6861"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ccae60b4363fedbbf08cf781f0428739f9cddbde0a6ee72789cac99ae3b4509f10437bf2fa1ff51255e9cc46086a4f2f42188ae365b685ffd530918f466a730a2543ae7278a148f6c7d358d1722a7d4c651b1c136dccde63346b3c04ca818e027d9d1772c9366969927bda7d1bc40f462f2c487fa74f8fc840534ca1a9d262d66b050000000000000051e355045c1958030a611959cf378ac11a964764617b197d469087c901df54da1f37da0151661aa2de03980efbbaeb9d05bad79c06e964842245ce8547eadaf7179a87e79f2a8e3b9467e6935b45f87cf9160da5ad921033a07981aac573c96b825d4f4fe89cfdbad8f0688c5c1264fdce9d04c3cc1b6ed504144c89e566c74a01089b932e06e90a231fb0798b010c86e56bdc503e0c480737bbb2afba3138d93df0880ddfb53cda6a6d74c46182e405154329937bdb22b3a7c770f2f12b999f94828887a3137b2417ed5412855fb33017042ab65af4768e042e69c1421adc2a1afe0851f081f2cd5b474c618d73e92b0b3f19a86726015482353a5b04d8bb90e88e7949edcd3a568eae25ae99354dfded9f2d3b7f87588ddeee80e4d0d2f9e6ae43f24b39d15dcba42b838cb44fc2f3dd98f461fff60bfdaa292f71ad23293b37bb265ad72c0bfe56bb1b2af2c2e2e741cdfe260f53cc3c15028c636d69fe4a400cdd712149b3777027a7592d03888905a6ac6292de85d63bee2d55c882439b463a62e2bc24589841cad6e3eb7d011c23c4577c87af692a55d57c1033dd6bbaffc6ce56d8d40f07f6b0475eb8717855745401a9b5a2ffd53aea36132ac7620d18035c64f1bc6861"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30]
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 30]
detailed listing:
executing program 0:
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 1:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)
acct$auto(&(0x7f0000000100)='..\x00')

program did not crash
minimized 30 calls -> 2 calls
minimizing program #1 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 29]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r6 = socket(0xa, 0x801, 0x84)
listen$auto(r6, 0x84c)
getsockopt$auto(r5, 0x1fc, 0x2, 0x0, &(0x7f0000000280)=0x2)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 28]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
r5 = socket(0xa, 0x801, 0x84)
listen$auto(r5, 0x84c)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 27]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)
socket(0xa, 0x801, 0x84)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 26]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x43a6cde4, 0x145, 0x1c, 0x401, 0x300000000000)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 25]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
unshare$auto(0x40000080)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 24]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 23]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ccae60b4363fedbbf08cf781f0428739f9cddbde0a6ee72789cac99ae3b4509f10437bf2fa1ff51255e9cc46086a4f2f42188ae365b685ffd530918f466a730a2543ae7278a148f6c7d358d1722a7d4c651b1c136dccde63346b3c04ca818e027d9d1772c9366969927bda7d1bc40f462f2c487fa74f8fc840534ca1a9d262d66b050000000000000051e355045c1958030a611959cf378ac11a964764617b197d469087c901df54da1f37da0151661aa2de03980efbbaeb9d05bad79c06e964842245ce8547eadaf7179a87e79f2a8e3b9467e6935b45f87cf9160da5ad921033a07981aac573c96b825d4f4fe89cfdbad8f0688c5c1264fdce9d04c3cc1b6ed504144c89e566c74a01089b932e06e90a231fb0798b010c86e56bdc503e0c480737bbb2afba3138d93df0880ddfb53cda6a6d74c46182e405154329937bdb22b3a7c770f2f12b999f94828887a3137b2417ed5412855fb33017042ab65af4768e042e69c1421adc2a1afe0851f081f2cd5b474c618d73e92b0b3f19a86726015482353a5b04d8bb90e88e7949edcd3a568eae25ae99354dfded9f2d3b7f87588ddeee80e4d0d2f9e6ae43f24b39d15dcba42b838cb44fc2f3dd98f461fff60bfdaa292f71ad23293b37bb265ad72c0bfe56bb1b2af2c2e2e741cdfe260f53cc3c15028c636d69fe4a400cdd712149b3777027a7592d03888905a6ac6292de85d63bee2d55c882439b463a62e2bc24589841cad6e3eb7d011c23c4577c87af692a55d57c1033dd6bbaffc6ce56d8d40f07f6b0475eb8717855745401a9b5a2ffd53aea36132ac7620d18035c64f1bc6861"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x200000007a8, 0x2020009, 0xa2, 0x16, 0xffffffffffffffff, 0x8000)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 22]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 21]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 20]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})
socket$nl_generic(0x10, 0x3, 0x10)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 19]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)
semtimedop$auto(0x1, &(0x7f0000000000)={0xa, 0x7e, 0xffff}, 0x81, &(0x7f0000000040)={0x3})

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 18]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
semget$auto(0x2, 0x13c, 0x1ff)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 17]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x20100, 0x0)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 16]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 15]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 14]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 13]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 12]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 11]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)
setgroups$auto(0x10001, 0x0)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 10]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/134, 0x40)
ioctl$auto(0x3, 0xc148554b, r0)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 9]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ccae60b4363fedbbf08cf781f0428739f9cddbde0a6ee72789cac99ae3b4509f10437bf2fa1ff51255e9cc46086a4f2f42188ae365b685ffd530918f466a730a2543ae7278a148f6c7d358d1722a7d4c651b1c136dccde63346b3c04ca818e027d9d1772c9366969927bda7d1bc40f462f2c487fa74f8fc840534ca1a9d262d66b050000000000000051e355045c1958030a611959cf378ac11a964764617b197d469087c901df54da1f37da0151661aa2de03980efbbaeb9d05bad79c06e964842245ce8547eadaf7179a87e79f2a8e3b9467e6935b45f87cf9160da5ad921033a07981aac573c96b825d4f4fe89cfdbad8f0688c5c1264fdce9d04c3cc1b6ed504144c89e566c74a01089b932e06e90a231fb0798b010c86e56bdc503e0c480737bbb2afba3138d93df0880ddfb53cda6a6d74c46182e405154329937bdb22b3a7c770f2f12b999f94828887a3137b2417ed5412855fb33017042ab65af4768e042e69c1421adc2a1afe0851f081f2cd5b474c618d73e92b0b3f19a86726015482353a5b04d8bb90e88e7949edcd3a568eae25ae99354dfded9f2d3b7f87588ddeee80e4d0d2f9e6ae43f24b39d15dcba42b838cb44fc2f3dd98f461fff60bfdaa292f71ad23293b37bb265ad72c0bfe56bb1b2af2c2e2e741cdfe260f53cc3c15028c636d69fe4a400cdd712149b3777027a7592d03888905a6ac6292de85d63bee2d55c882439b463a62e2bc24589841cad6e3eb7d011c23c4577c87af692a55d57c1033dd6bbaffc6ce56d8d40f07f6b0475eb8717855745401a9b5a2ffd53aea36132ac7620d18035c64f1bc6861"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000002c0)=""/134, 0x40)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)
socket(0x10, 0x2, 0x0)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)

program crashed: BUG: corrupted list in remove_wait_queue
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 0]
detailed listing:
executing program 2:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
executing program 0:

program did not crash
minimized 30 calls -> 1 calls
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)

program crashed: BUG: corrupted list in remove_wait_queue
bisect: concatenation succeeded
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=1m19.018067284s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)

program did not crash
testing program (duration=1m19.018067284s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-openat$auto_dvb_dvr_fops_dmxdev
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)

program did not crash
testing program (duration=1m19.018067284s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): poll$auto-openat$auto_dvb_dvr_fops_dmxdev
detailed listing:
executing program 0:
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)

program did not crash
testing program (duration=1m19.018067284s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)

program did not crash
testing program (duration=1m19.018067284s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(0x0, 0x5, 0x106)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)

program did not crash
testing program (duration=1m19.018067284s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x8440, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m19.018067284s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program did not crash
simplifying guilty program options
testing program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
detailed listing:
executing program 0:
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20043, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)

program crashed: BUG: corrupted list in remove_wait_queue
extracting C reproducer
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program crashed: BUG: corrupted list in remove_wait_queue
simplifying C reproducer
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program did not crash
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program did not crash
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program crashed: BUG: corrupted list in remove_wait_queue
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program did not crash
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program crashed: BUG: corrupted list in remove_wait_queue
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program did not crash
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program did not crash
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program crashed: BUG: corrupted list in remove_wait_queue
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program crashed: BUG: corrupted list in remove_wait_queue
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program did not crash
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program crashed: BUG: corrupted list in remove_wait_queue
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program crashed: BUG: corrupted list in remove_wait_queue
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program crashed: BUG: corrupted list in remove_wait_queue
testing compiled C program (duration=1m19.018067284s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dvb_dvr_fops_dmxdev-poll$auto-openat$auto_dvb_dvr_fops_dmxdev
program crashed: BUG: corrupted list in remove_wait_queue
reproducing took 2h35m30.006419827s
repro crashed as (corrupted=false):
list_del corruption. prev->next should be ffffc90003377b98, but was ffff88802a2585c8. (prev=ffff88802a2585c8)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:62!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 0 UID: 0 PID: 9290 Comm: syz-executor367 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x1c0 lib/list_debug.c:62
Code: e8 19 db da fc 90 0f 0b 48 89 ca 48 c7 c7 00 a0 b1 8b e8 07 db da fc 90 0f 0b 48 89 c2 48 c7 c7 60 a0 b1 8b e8 f5 da da fc 90 <0f> 0b 48 89 d1 48 c7 c7 e0 a0 b1 8b 48 89 c2 e8 e0 da da fc 90 0f
RSP: 0018:ffffc90003377880 EFLAGS: 00010086
RAX: 000000000000006d RBX: ffffc90003377b80 RCX: ffffffff8178e449
RDX: 0000000000000000 RSI: ffffffff81798bd6 RDI: 0000000000000005
RBP: ffff88802a258588 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000001 R11: 0000000000000001 R12: 0000000000000286
R13: ffffc90003377b98 R14: ffffc90003377ba0 R15: ffffc90003377b70
FS:  0000555578a00380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f687b8542b0 CR3: 0000000073a90000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __list_del_entry_valid include/linux/list.h:124 [inline]
 __list_del_entry include/linux/list.h:215 [inline]
 list_del include/linux/list.h:229 [inline]
 __remove_wait_queue include/linux/wait.h:207 [inline]
 remove_wait_queue+0x30/0x180 kernel/sched/wait.c:55
 free_poll_entry fs/select.c:132 [inline]
 poll_freewait+0xd5/0x250 fs/select.c:141
 do_sys_poll+0x6f7/0xde0 fs/select.c:1010
 __do_sys_poll fs/select.c:1074 [inline]
 __se_sys_poll fs/select.c:1062 [inline]
 __x64_sys_poll+0x1a8/0x450 fs/select.c:1062
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f687b7d8809
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 1c 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdb8bb93f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
RAX: ffffffffffffffda RBX: 00307276642f3072 RCX: 00007f687b7d8809
RDX: 0000000000000106 RSI: 0000000000000005 RDI: 0000000020000080
RBP: 0000000000000000 R08: 00007ffdb8bb8f60 R09: 00007ffdb8bb8f60
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb8bb941c
R13: 00007ffdb8bb9430 R14: 00007ffdb8bb9470 R15: 0000000000000359
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x1c0 lib/list_debug.c:62
Code: e8 19 db da fc 90 0f 0b 48 89 ca 48 c7 c7 00 a0 b1 8b e8 07 db da fc 90 0f 0b 48 89 c2 48 c7 c7 60 a0 b1 8b e8 f5 da da fc 90 <0f> 0b 48 89 d1 48 c7 c7 e0 a0 b1 8b 48 89 c2 e8 e0 da da fc 90 0f
RSP: 0018:ffffc90003377880 EFLAGS: 00010086
RAX: 000000000000006d RBX: ffffc90003377b80 RCX: ffffffff8178e449
RDX: 0000000000000000 RSI: ffffffff81798bd6 RDI: 0000000000000005
RBP: ffff88802a258588 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000001 R11: 0000000000000001 R12: 0000000000000286
R13: ffffc90003377b98 R14: ffffc90003377ba0 R15: ffffc90003377b70
FS:  0000555578a00380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f687b8542b0 CR3: 0000000073a90000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

final repro crashed as (corrupted=false):
list_del corruption. prev->next should be ffffc90003377b98, but was ffff88802a2585c8. (prev=ffff88802a2585c8)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:62!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 0 UID: 0 PID: 9290 Comm: syz-executor367 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x1c0 lib/list_debug.c:62
Code: e8 19 db da fc 90 0f 0b 48 89 ca 48 c7 c7 00 a0 b1 8b e8 07 db da fc 90 0f 0b 48 89 c2 48 c7 c7 60 a0 b1 8b e8 f5 da da fc 90 <0f> 0b 48 89 d1 48 c7 c7 e0 a0 b1 8b 48 89 c2 e8 e0 da da fc 90 0f
RSP: 0018:ffffc90003377880 EFLAGS: 00010086
RAX: 000000000000006d RBX: ffffc90003377b80 RCX: ffffffff8178e449
RDX: 0000000000000000 RSI: ffffffff81798bd6 RDI: 0000000000000005
RBP: ffff88802a258588 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000001 R11: 0000000000000001 R12: 0000000000000286
R13: ffffc90003377b98 R14: ffffc90003377ba0 R15: ffffc90003377b70
FS:  0000555578a00380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f687b8542b0 CR3: 0000000073a90000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __list_del_entry_valid include/linux/list.h:124 [inline]
 __list_del_entry include/linux/list.h:215 [inline]
 list_del include/linux/list.h:229 [inline]
 __remove_wait_queue include/linux/wait.h:207 [inline]
 remove_wait_queue+0x30/0x180 kernel/sched/wait.c:55
 free_poll_entry fs/select.c:132 [inline]
 poll_freewait+0xd5/0x250 fs/select.c:141
 do_sys_poll+0x6f7/0xde0 fs/select.c:1010
 __do_sys_poll fs/select.c:1074 [inline]
 __se_sys_poll fs/select.c:1062 [inline]
 __x64_sys_poll+0x1a8/0x450 fs/select.c:1062
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f687b7d8809
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 1c 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdb8bb93f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
RAX: ffffffffffffffda RBX: 00307276642f3072 RCX: 00007f687b7d8809
RDX: 0000000000000106 RSI: 0000000000000005 RDI: 0000000020000080
RBP: 0000000000000000 R08: 00007ffdb8bb8f60 R09: 00007ffdb8bb8f60
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb8bb941c
R13: 00007ffdb8bb9430 R14: 00007ffdb8bb9470 R15: 0000000000000359
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x1c0 lib/list_debug.c:62
Code: e8 19 db da fc 90 0f 0b 48 89 ca 48 c7 c7 00 a0 b1 8b e8 07 db da fc 90 0f 0b 48 89 c2 48 c7 c7 60 a0 b1 8b e8 f5 da da fc 90 <0f> 0b 48 89 d1 48 c7 c7 e0 a0 b1 8b 48 89 c2 e8 e0 da da fc 90 0f
RSP: 0018:ffffc90003377880 EFLAGS: 00010086
RAX: 000000000000006d RBX: ffffc90003377b80 RCX: ffffffff8178e449
RDX: 0000000000000000 RSI: ffffffff81798bd6 RDI: 0000000000000005
RBP: ffff88802a258588 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000001 R11: 0000000000000001 R12: 0000000000000286
R13: ffffc90003377b98 R14: ffffc90003377ba0 R15: ffffc90003377b70
FS:  0000555578a00380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f687b8542b0 CR3: 0000000073a90000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400