Extracting prog: 29m15.175051062s
Minimizing prog: 35m52.396109958s
Simplifying prog options: 0s
Extracting C: 3m37.970807921s
Simplifying C: 1h13m20.854089207s


extracting reproducer from 31 programs
testing a last program of every proc
single: executing 6 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-io_uring_setup$auto-mmap$auto-close_range$auto-socket-socket-sendmsg$auto_CTRL_CMD_GETPOLICY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-socket-io_uring_setup$auto-close_range$auto-open-socket-setsockopt$auto-capset$auto-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-socket-bind$auto-connect$auto-socketpair$auto-statx$auto-openat$auto_fops_x64_ro_-setsockopt$auto-sendto$auto-fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB-write$auto-recvfrom$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5daa3ce299010025bd706000000035dd0de93ff66e67b87f9a5d9da446a8175cdd5528eadc53a05293a3565557f42cbd4cbac8130069b32fa98cf11886968cfac22088c525c2a3cc1cc218c571907da7eab6431a7994a38197ca04af0c7dabf387f716989f9b8a8ecd87f3898759c34c17c58db37bd4adab0cd98154951081485d8e1a19eebb423d4fe92ae2df2ad1953b7f221cf08566af73"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = socket(0x2, 0x3, 0x9)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004)
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x1, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0)
r4 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x100, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sendto$auto(0x3, 0x0, 0x2000f, 0x102, 0x0, 0x6)
fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r4, 0x2, &(0x7f00000002c0)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', &(0x7f00000000c0)="0a6725bd3f6332e0e356afa53b6ee83973", 0x5)
write$auto(0x3, 0x0, 0xfdf3)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-socket-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-close_range$auto-socket-socket$nl_generic-socket-socket-connect$auto-openat$auto_fuse_dev_operations_fuse_i-ioctl$sock_SIOCGIFINDEX-sendfile$auto
detailed listing:
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0)
r1 = socket(0x18, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
r3 = socket(0x25, 0x1, 0x9)
connect$auto(r3, &(0x7f0000000000)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, 0x3a)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x80880, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x40047459, 0x0)
sendfile$auto(r0, r0, 0x0, 0x1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_sys_file_operations_proc_sysctl-mmap$auto-socket-setsockopt$auto-openat$auto_proc_fail_nth_operations_base-write$auto-socket-openat$auto_fb_fops_fb_chrdev-pwrite64$auto-mmap$auto-syz_clone-socket-close_range$auto-openat$auto_console_fops_tty_io-mmap$auto-mmap$auto-setsockopt$auto-openat$auto_proc_oom_adj_operations_base-syz_genetlink_get_family_id$auto_nl80211-mmap$auto-setresuid$auto-open$dir-open_tree$auto-statx$auto-openat$auto_tty_fops_tty_io-ioctl$auto_TCFLSH2-openat$auto_tty_fops_tty_io-ioctl$auto-capset$auto-sendmmsg$auto
detailed listing:
executing program 0:
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r0, 0x65, 0x7, 0x0, 0x4)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='O\xa2\xfb\xea<\x0e\x80\xa0n\xc5n\x86\x82g\xe6\x90G+\x85~?i\xae\x82\xdaH\x05X\xa0j\xc4\xe2n\xd6\x19\xcbA(4r\x9aP9\xbdy\xa5\x80\xb5\xf7\x1c\xe4\xcf\xb2e\xbe\x85\xcc\x85Jw\x8fb\xc7|d\x19\x11#\xdb<\x8fk\xb5\xe2\xd5\x1f\x11\xfb\xd5\x02\xb9\x94\x19\xe7\xfe\x15\x84\xd0\x8e\xf31\v\x89%[', 0x81)
r2 = socket(0x11, 0x3, 0x9)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
pwrite64$auto(r3, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x4, 0x8)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x1, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(r4, 0x29, 0x7ca, 0x0, 0xaa)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
setresuid$auto(0xee01, 0x0, 0x0)
r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x42, 0x20)
r6 = open_tree$auto(r5, 0x0, 0x1001)
statx$auto(r6, 0x0, 0x4001000, 0x8, 0x0)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x80, 0x0)
ioctl$auto_TCFLSH2(r7, 0x5408, 0x0)
r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto(r8, 0x80045438, r8)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc8745d18a5956210d2de44402", 0x49}, 0x5, &(0x7f0000000400), 0x5, 0x1000}}, 0x1, 0x100)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto-openat$auto_def_blk_fops_fs-socket$nl_generic-openat$auto_snd_rawmidi_f_ops_rawmidi-openat$auto_mousedev_fops_mousedev-io_uring_setup$auto-ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT-openat$auto_vhci_fops_hci_vhci-read$auto_vhci_fops_hci_vhci-select$auto-write$auto-socket-keyctl$auto-prctl$auto-madvise$auto-madvise$auto-mmap$auto-close_range$auto-memfd_create$auto-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-socket-close_range$auto-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_kvm_chardev_ops_kvm_main
detailed listing:
executing program 0:
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd4\x00', 0x745100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x200000, 0x0)
r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r2, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}})
ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(0xffffffffffffffff, 0x4004550d, &(0x7f00000001c0)=0x9)
r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x200, 0x0)
read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\t\x00\x00\x00\x00\x00\x00\x00\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x4)
socket(0x2b, 0x1, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2000000002003f2, 0x15)
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, r1, 0x28000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
memfd_create$auto(0x0, 0xe)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/memory/memory15/valid_zones\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x40c9)
socket(0x15, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
close_range$auto(r1, r2, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socketpair$auto-mmap$auto-close_range$auto-socket-openat$auto_snd_seq_f_ops_seq_clientmgr-move_pages$auto-ioctl$auto-semctl$auto_SETALL
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0xc08c5332, 0x38)
semctl$auto_SETALL(0x1, 0xcf1, 0x11, 0x1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socketpair$auto-mmap$auto-close_range$auto-socket-openat$auto_snd_seq_f_ops_seq_clientmgr-move_pages$auto-ioctl$auto-semctl$auto_SETALL
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0xc08c5332, 0x38)
semctl$auto_SETALL(0x1, 0xcf1, 0x11, 0x1)

program did not crash
single: failed to extract reproducer
bisect: bisecting 31 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 30, 7, 28, 30, 9, 9, 18, 30, 30, 22, 30, 16, 2, 4, 18, 11, 7, 30, 23, 15, 10, 9, 4, 2, 15, 11, 12, 30, 13, 30]
detailed listing:
executing program 0:
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0xffdffffffffffffe, 0xffffffffffffffff, 0x1, 0x80000000)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440))
r1 = io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, r1, 0xfffffffc)
open(0x0, 0x163340, 0x16e)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
socket(0xa, 0x1, 0x0)
socket(0x2, 0x1, 0x84)
connect$auto(0x3, 0x0, 0x55)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
listen$auto(0x3, 0x81)
r2 = accept$auto(0x3, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
open(0x0, 0xcd1e23e41b02d660, 0x154)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r2, 0x8000)
move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0)
r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r4, 0x5393, r3)
executing program 0:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200))
r1 = open(&(0x7f0000000000)='./file1\x00', 0x361342, 0x130)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x3f, 0x5}, 0x4f4)
timerfd_create$auto(0x9, 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
fallocate$auto(r1, 0x1, 0x820, 0x7fff)
mmap$auto(0x0, 0xb9c, 0xdb, 0x2009b72, r1, 0x8002)
prctl$auto(0x3f, 0xffffffffffffffff, 0x4, 0x8000000000000000, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x1, 0x106)
getsockopt$auto(r2, 0x11c, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffd)
r3 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x5054c2, 0x0)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x2, 0x6, 0x1)
socket(0x1e, 0x1, 0x0)
socket(0x1a, 0x2, 0x6)
memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4)
mmap$auto(0xffffffffffffffff, 0x8, 0x1000000016, 0x13, 0xffffffffffffffff, 0xe02e2e4)
ftruncate$auto(0x3, 0x0)
execveat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)=&(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8f\xf5Cm\x12\x1c\xf1Xe2\n|\xe1\xc5%\xfa\x04\x8fE_\x88\xa5\xb7\x97\x03\xd6\x1cZ\xce?=\xf9\xc6\xc7\x11\xa4\xa5\xc3\x8e\xd5\rL}9~\'\xef\x04\xb1T\xdcW\xbd\x9a\x1c~\xf6\xb6\x8b\xa6\xd4\xe5\x17\x12t\xa1=\x88\x19;1\x84\xb4\xc74\xa4\x16\x16\xad\xbe\x1e\xdfZ\'l\xe2&\x8b\xd2\x9f\x9b d\xd2\\\x18\x87\x9fm9A\xb9(!B\x94m\x1a\xdf\x82k.\xd45\x9d\x0f(8NI Tr\x9a]', &(0x7f0000000400)=&(0x7f0000000340)='(-*4', 0x6)
bpf$auto(0x5, 0x0, 0x1)
unshare$auto(0x40000080)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$auto(r3, 0x5, 0x3, &(0x7f0000000300)='/sys/kernel/debug/page_owner_stacks/show_stacks\x00', 0x4)
getsockopt$auto_SO_BINDTODEVICE(r1, 0x6, 0x19, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f00000001c0)=0x7)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
io_uring_setup$auto(0x1, 0x0)
close_range$auto(r0, 0xa, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r1, 0x545c, 0x0)
executing program 0:
mmap$auto(0x5, 0x400008, 0xe1, 0x5e, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10442, 0x0)
mmap$auto(0x4, 0x2, 0x10, 0x10, 0xffffffffffffffff, 0x80)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0)
sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB], 0x198}, 0x1, 0x0, 0x0, 0x810}, 0x0)
mmap$auto(0x0, 0x101, 0xdf, 0x9bf2, 0x2, 0x4)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
ioctl$auto(0x3, 0x402c542b, 0x38)
getrlimit$auto(0x3, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r3 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000080)="83f72950c4a15930c2601a4a9bc630bc64855986ae86b0e5edcb4ff873f9ac90f6362e3c28d6bded6152cae220b4b23cff0bd19118c132f0908bba3bb4fa2cc8a9da3c288fa1061077e1548f206de75fb69de8718758268f4a59cb52f79b1dd32c31fedbb3b9899a46c0721ac716a3ac49bc")
r4 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x24280, 0x0)
mmap$auto(0x80, 0x5, 0x2, 0x7fffffffffffffff, r4, 0x1)
r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRESHEX, @ANYRESOCT=r3, @ANYRES16=0x0], 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000040)
sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14d80040", @ANYRES16=r5, @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000)
mmap$auto(0xa, 0x8, 0x9d, 0x18, r4, 0x4)
r6 = syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES8=r4, @ANYRES16=r6, @ANYRES64=0x0], 0x100}, 0x1, 0x0, 0x0, 0x844}, 0x4010)
sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x14)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000500)=0x751)
pread64$auto(r7, 0x0, 0x2e0423d, 0x588)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
writev$auto(r8, &(0x7f0000000200)={0x0, 0x9}, 0x7)
executing program 0:
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range$auto(0x2, 0xa, 0x0)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec4\x00', 0x183e02, 0x0)
mmap$auto(0x0, 0x7, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
r1 = socket(0x22, 0x2, 0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
fstat$auto(r1, 0x0)
r4 = ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x23, 0x80805, 0x2)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/status\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/37, 0x25)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, r4)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0xc08c5332, 0x38)
semctl$auto_SETALL(0x1, 0xcf1, 0x11, 0x1)
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0xc08c5332, 0x38)
semctl$auto_SETALL(0x1, 0xcf1, 0x11, 0x1)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/ext4/sda1/session_write_kbytes\x00', 0x0, 0x0)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
r1 = socket(0x1e, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000000c0), r1)
msgctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000180)={{0x2, <r3=>0xffffffffffffffff, 0xee01, 0x3, 0x10001, 0x9, 0x6}, &(0x7f0000000100)=0xfa, &(0x7f0000000140)=0xa5, 0x0, 0x0, 0x4, 0x2, 0x9, 0x6, 0x3, 0x2, @inferred, @raw=0x2})
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r4 = socket(0x23, 0x80805, 0x0)
inotify_init1$auto(0x3000000000000)
syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000d80), r4)
mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1cc5087217524dd0}}, 0x6a)
close_range$auto(0x2, 0x8, 0x0)
r5 = getpid()
sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000200)={0xab8, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x7}, @OVS_VPORT_ATTR_UPCALL_STATS={0x500, 0xa, 0x0, 0x1, [@nested={0x1bc, 0x122, 0x0, 0x1, [@generic="efd884e430cb53e1c4571f8fb680689684b869cf8f0e03f81d81bd66f62c09c50849f7f39ac21214b4a18e6e018f5999d857306fbb6491daf63c2f139a47b567f8c9cc29de70280572d71e6494073800a2facb4a828e602b9eb91d60862109ca405e6b82ff3ac067802a21fc208f7b735b4c4061d45836b75ed15a3a441b0dc2a5e8c8342f0c90df9291fcb867c9d08ed54f9b7b40956f94827908f32f1c459ca002aae4822a4a16e791baf546b2f901ba747a60ad2d01640371e9a91edd95ac478b7c4dabb74c7eb0d4d2cc330f2f83b6de65637d0842fc31268be87ca503caf2bf165599cd08f0884e0abef38f60", @generic="b5a236b48daae231a5c1adf289487ca0608da88f8dd922a4e7195212a8b4f85533fe2fb4697be32777ee3b76d80b07d7c4714efc7e18a61db1ab838d91ab6962de49d91b5b4ad44472da8ce6f3ee766d57ec4fe8405c08069240c23fa9e536ce79e84ad4c5d9de3adfc36dc7a02e6297b1e636f08ff93b55eac11c55567fc946d09cdac853be3d4b5e9cae1f30d11ff6bdf65ea5cbe688f6b9610d32a49f1c05530ea9dd357d06adba86ccc2ec9a35c25330b320b3b2c4832bd65c1972", @typed={0xc, 0x15c, 0x0, 0x0, @u64=0x3ff}]}, @nested={0xb3, 0x10d, 0x0, 0x1, [@generic="7a95219f6e5c3f6fb8c9dbcea1eadf44", @generic="4d334cc4f21e4533d82f30990d91ed8a7d1a34dae94cafdfb9e30c55b03e87de32f4c1e2f3200690aaeb88d1320e346435289b13b349b3c4a086d1c8370c160684115a4dcf7e5d293d2a6d4a892a4fe024c2b9703d1ca12742d5a30cd5d102e899f49ee6b219daa0c3fc4e155db00e148b9267d5401e1f3ac29b652e99bdbab3aab49eb68931fdc99644d65e25e7cb6641f53ae9ad7bf9bce0ed261a5ec9c0"]}, @nested={0x140, 0x67, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="7fd2e2a85524124e8e04c38f94010dd6be144c526be2e3b2f766e3b2b70030c8dca345e2488c96c366ab14c3199e3ba900", @generic="1744f9b80b988c3ff943c950acff3cd100b48142977178b59430a6dfe2a3e1476b263963f574cc390f3bd20ca8654bc17b06a5266bdd0d0f24b9e78b5ff626e56509afae87813418be8a820fed7519c3881b7ff7afb6547f15717a848c54577ef50a45a5e22d383c4841a57af2caa9f88b27601bd1364b1c9386a41f4d8149c8e4be9b4db5859792fd109bbd1b2040f8e505388cd4441a27eef1b8e25e1d1999b1a9eb040c1ce166fcac3db53e74538fca2ca53f6e7fd184c1a7091387b937b14cd2a746461ff52f76803cb5619b4c", @nested={0x4, 0xfc}, @nested={0x4, 0xbf}, @typed={0x2b, 0x46, 0x0, 0x0, @str='/sys/fs/ext4/sda1/session_write_kbytes\x00'}]}, @generic="f8889c0b913062832da72844e2977d33bad6949a4fccd5aac5d1a506ebaf38a8454c51722de27c427fba3b4e05840bae77e7615a009655a5ca97fd967c67cd62e7d9deb5ea0982b65b1dddd5c7d4aa6ae9f961a0f6d03c10a4d9f83b782192afaddf29f16c2ce4d18d63ea21e18ffbe9abb5bfaed0504775c429e274d57b3bc929d3bebfafccb4f5a86ae0432726e68aa471b899e1307569ce746887d686b8a5c66146c4592ed48aaba9a6bf", @nested={0x8c, 0x11c, 0x0, 0x1, [@typed={0x8, 0x11c, 0x0, 0x0, @u32=0x80000000}, @generic="54a286aa40feb26d6b508bec95a4945c7da53d8b0ccf1d37dc6ba704769331c2eb658b1f8c8617bcceddbdaccb2c5674541bf08c87dd7daffb89816437902621adaf6d32f4fbf96e38c24fe607544c9ba0a583204ff08ace8ff761cf244ec9854da092747dd1440f8ad16791", @typed={0xc, 0xb, 0x0, 0x0, @u64=0xb}, @typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x0, 0xc4e, 0x3, 0xd333, 0xfffffffffffff78a, 0x7f, 0xf, 0xbb}}, @OVS_VPORT_ATTR_OPTIONS={0xc0, 0x4, 0x0, 0x1, [@typed={0xbc, 0xf4, 0x0, 0x0, @binary="79011f942be3a23c80c943aa93ee4d5a57c3c917a73c96900d3fb02f97e7282bc98e7ffb364f0f273a4b2a2bee7ab6d94927f05d2fc171e0904bd74be9da574402eaa331558086a9b1d74837da51c72d42c551d13fc6b526a4a50ff7a56e5777467bb4301f8594f62d4e7442ca1725c0d5b08cd75758ac599ab7a17156ba8263ee8316f0d06d064f111ff887ed39e697c8846e7dd490172baf5142e40d130dff2333ebbbb319726b35c3dbfe0f519a9ec0f22d64c26524f9"}]}, @OVS_VPORT_ATTR_UPCALL_PID={0xed, 0x5, "5db86deb7ea0c15dac069e09bc767bac9539a658624a9995093fb6049c23e3b1ca6fa7b0e94dd9235820cba01f04a52bf3e8cc18bbb46bb99b119bba4c565939de601e4480c1904c82e5719bc74658674a52670af00d85b155457e74bcc10c1a078f7d0d50a777d4356697b93c58e1c5abbff56404c477ae10d2e2d0b5dcfc9ea256c4e8db6a179feee7527227cfcc0f409791c94d5b6dbf232eee44902e982cb074024070b923a08820649a2c189875f8e82081ab722a9ac1aaf1e808a33190f2e76943fe5c23edcc7a8cd7e1d90ee9053fe5ce8d19d27b67934ca2dec66d7546346a0655f54ebcd5"}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x1}, @OVS_VPORT_ATTR_NAME={0x7, 0x3, '\\#\x00'}, @OVS_VPORT_ATTR_OPTIONS={0x2f7, 0x4, 0x0, 0x1, [@generic="49486e0201ac3f1b56162e6d423f5310a98ab0741a3fb940349c1be22167e011938d926a5a3b67b4c69e0afa5b72f3da2e1da434", @nested={0x2c, 0xae, 0x0, 0x1, [@nested={0x4, 0xca}, @typed={0x8, 0x113, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x15c}, @nested={0x4, 0xa5}, @nested={0x4, 0x126}, @typed={0x8, 0xec, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @generic="dd92ea865bf6c81b3ed701c76351b7b84bc258e226f5f31e7090d3ac76c5ed986c9ee1ec598050172ab4deed6ec41863672e26dbf98d3695655537caa9c49f6e9d690b0833c6177431bb7c9af3cccd195eebf28c7cb04dc2a812f92dc734c42893c953479a1a221815077ecf01e9e058bb2fa209da2c1f3db046a222c983376254255109b90b98b7b27f0cc0e5d076776d4867d8f989c5ad74e45e10f1f8a2430929470599331ecded4466ffc323994c1a00f1ade3e79872dda58cec13197ee6e5", @typed={0x44, 0x106, 0x0, 0x0, @binary="83a39d51fc96ed5c696be2e5b206fae4c190e3c00abba6a2f448e121cc9084423c837853d5bdaf5a372c8ff65ac9e31f528e52863bcb2a6347932096dfb282f0"}, @generic="9f9e058deb73d66be54ed5fcc9e871f4a3a41d8ee5ea5823350882bd48a7be4d489a7f8eb04539f295cc7edb55178a8b36fa351c901fffe2c1c2f6eed8b3e3fecc0238b9a7c857e4ebdf1c22133067457683688465d0ce6d1b3c94ef7225ac3136fbe33a82836616712a6b9b7b76b83a943d8c0f1a11edcbca181e895dcf", @nested={0x7e, 0x130, 0x0, 0x1, [@typed={0xc, 0x152, 0x0, 0x0, @u64=0x4}, @generic="1e92507446d67b14d6505af07af1218dae6ec525468c355707dc502ad7c5ed4f179d8834bd9f26accde15255c7355ef8ce160ef78d634bb3fa74663e57a5e0290166c49b50b4014ea8af54694138eacab2ca23eb7b8281358962b3eefa25", @typed={0x8, 0x104, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x121}, @typed={0x4, 0x1a}]}, @nested={0x90, 0x12c, 0x0, 0x1, [@generic="6662a85a8942c19564711ef6e43fc512425e5654a9a126525779081029c2aff1737305826ff08f984e1ee0752e3f3133fb8eda1d680f189ad5ea88e2f13065d87a0a0846411fdd9e8c8565d5ca23ad843913b23c04f11bfa0808a57afb06e8dcce2156859fea8dd66370057b732f1871fa26cb9fb2455f4cb05162fe23aa75925fe45815c625c0eb28260e38"]}]}, @OVS_VPORT_ATTR_UPCALL_STATS={0xa0, 0xa, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @pid=r5}, @generic="4dfec34ae64b2f8c1bb82525f9b313e9fbd006165ca8cf777aff183014eee149a2582eec7dbbaf0c564bc01fcebce78f48d0a77667c386fb009b59dbe592b105a9c38c44e7743aee473e6a14e1978d", @generic="84dd6d55be46933aa664d4c6ccb795794cc42be311cc71913d90987804aa3f0c0dfd3275d98a77addb8c0a0e065975b3bb4e4c45e959a5368799756aaf2ba275b77f544e19"]}]}, 0xab8}, 0x1, 0x0, 0x0, 0x4000000}, 0x48441)
setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003480)=""/247, 0xf7)
executing program 1:
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x400008, 0xa9b, 0x9b72, 0x2, 0x8000)
r0 = epoll_create$auto(0x4e)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0)
move_pages$auto(r1, 0x100, &(0x7f0000000040)=&(0x7f0000000180)="18a9575bf8f75b00c0bb93329935fc4d666b1faae160257cc4a45d49ba8768cb235c2ca5a450029bdb2b6ff78335105f5ce23f0e8f6572eeddd645bb0b3e8e138e9f9a46281a6e5f25873a3efee842d8ac6a4673fc3c648a1a383470964959b6ef8951a6f6b92512c00da892c5c2be4a392d7b998e1e1df1d01ec1159a6c02f308d05dd72d3dc3d01addec7e1f7e4f7162b942ee527843ea", &(0x7f0000000080)=0x80000001, &(0x7f0000000240)=0x5, 0x200)
capset$auto(0x0, 0x0)
epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0)
read$auto(r2, 0x0, 0x8)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000)
socketpair$auto(0xca4, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x23, 0x80805, 0x0)
memfd_secret$auto(0x0)
socket(0x2b, 0x1, 0x1)
setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c)
syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5daa3ce299010025bd706000000035dd0de93ff66e67b87f9a5d9da446a8175cdd5528eadc53a05293a3565557f42cbd4cbac8130069b32fa98cf11886968cfac22088c525c2a3cc1cc218c571907da7eab6431a7994a38197ca04af0c7dabf387f716989f9b8a8ecd87f3898759c34c17c58db37bd4adab0cd98154951081485d8e1a19eebb423d4fe92ae2df2ad1953b7f221cf08566af73"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = socket(0x2, 0x3, 0x9)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004)
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x1, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0)
r4 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x100, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sendto$auto(0x3, 0x0, 0x2000f, 0x102, 0x0, 0x6)
fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r4, 0x2, &(0x7f00000002c0)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', &(0x7f00000000c0)="0a6725bd3f6332e0e356afa53b6ee83973", 0x5)
write$auto(0x3, 0x0, 0xfdf3)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
executing program 1:
listen$auto(0x3, 0x81)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x430b01, 0x0)
r0 = socket(0x1d, 0x3, 0xbffffffe)
getsockname$auto(r0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xa75e69c17229b10b, 0x0)
fgetxattr$auto(r1, &(0x7f00000000c0)='/s\x89s/devices/\x93S\x1b\xbb\x86virtual/et/ip6tnl0/statisuics/tx_comp+\x17\x00', &(0x7f0000001280)="08d014a84c4b3e884bb54ae712c723e353887b6289f41b0f730348f3613bec0af14a82bac0091fd21e39375d16a02b409a9123073609a2a0f917642386a6a9a89864e23cd1a0d2940c8ce1e4039914d7a9d3b65da8c5fa741180eadcb0205af702291d00000003000000000000", 0x8)
r2 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x440040, 0x0)
ioctl$auto_BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000001300)={@raw=0x80000000, "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"})
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x1c5082, 0x18)
open_by_handle_at$auto(r3, &(0x7f0000000140)={0x8, 0x30001, "b190a905237d4b53"}, 0x42)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18)
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55)
sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x100000)
executing program 2:
r0 = socket(0xa, 0x1, 0x84)
ioperm$auto(0x4, 0x4, 0x4000007)
getsockopt$auto(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2d)
inotify_add_watch$auto(r0, &(0x7f0000000080)='./file0\x00', 0x7)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex, r2, 0x9c, 0x0, r1, @relative_fd=r2, 0x80}, 0x1)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000118, 0x400, 0x9}]})
select$auto(0x4, 0x0, &(0x7f0000000100)={[0x8, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x3]}, 0x0, 0x0)
r5 = socket(0x2, 0x3, 0x2)
setsockopt$auto_SO_ATTACH_FILTER(r5, 0x0, 0x1a, 0x0, 0x0)
r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x101000, 0x0)
ioctl$auto_EVIOCRMFF(r6, 0x40044581, 0x0)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x0, 0x0)
write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioperm$auto(0x8, 0xa, 0xeffffffa)
executing program 1:
socket(0xa, 0x3, 0xff)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
read$auto(r0, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/dmi/id/uevent\x00', 0x0, 0x0)
syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r1)
executing program 4:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0)
sendfile$auto(r0, r0, 0x0, 0x200) (fail_nth: 7)
executing program 4:
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130026ea95f173d8973e6a00000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
executing program 4:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/ext4/sda1/session_write_kbytes\x00', 0x0, 0x0)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
r1 = socket(0x1e, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000000c0), r1)
msgctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000180)={{0x2, <r3=>0xffffffffffffffff, 0xee01, 0x3, 0x10001, 0x9, 0x6}, &(0x7f0000000100)=0xfa, &(0x7f0000000140)=0xa5, 0x0, 0x0, 0x4, 0x2, 0x9, 0x6, 0x3, 0x2, @inferred, @raw=0x2})
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r4 = socket(0x23, 0x80805, 0x0)
inotify_init1$auto(0x3000000000000)
syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000d80), r4)
mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1cc5087217524dd0}}, 0x6a)
close_range$auto(0x2, 0x8, 0x0)
r5 = getpid()
sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000200)={0xab8, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x7}, @OVS_VPORT_ATTR_UPCALL_STATS={0x500, 0xa, 0x0, 0x1, [@nested={0x1bc, 0x122, 0x0, 0x1, [@generic="efd884e430cb53e1c4571f8fb680689684b869cf8f0e03f81d81bd66f62c09c50849f7f39ac21214b4a18e6e018f5999d857306fbb6491daf63c2f139a47b567f8c9cc29de70280572d71e6494073800a2facb4a828e602b9eb91d60862109ca405e6b82ff3ac067802a21fc208f7b735b4c4061d45836b75ed15a3a441b0dc2a5e8c8342f0c90df9291fcb867c9d08ed54f9b7b40956f94827908f32f1c459ca002aae4822a4a16e791baf546b2f901ba747a60ad2d01640371e9a91edd95ac478b7c4dabb74c7eb0d4d2cc330f2f83b6de65637d0842fc31268be87ca503caf2bf165599cd08f0884e0abef38f60", @generic="b5a236b48daae231a5c1adf289487ca0608da88f8dd922a4e7195212a8b4f85533fe2fb4697be32777ee3b76d80b07d7c4714efc7e18a61db1ab838d91ab6962de49d91b5b4ad44472da8ce6f3ee766d57ec4fe8405c08069240c23fa9e536ce79e84ad4c5d9de3adfc36dc7a02e6297b1e636f08ff93b55eac11c55567fc946d09cdac853be3d4b5e9cae1f30d11ff6bdf65ea5cbe688f6b9610d32a49f1c05530ea9dd357d06adba86ccc2ec9a35c25330b320b3b2c4832bd65c1972", @typed={0xc, 0x15c, 0x0, 0x0, @u64=0x3ff}]}, @nested={0xb3, 0x10d, 0x0, 0x1, [@generic="7a95219f6e5c3f6fb8c9dbcea1eadf44", @generic="4d334cc4f21e4533d82f30990d91ed8a7d1a34dae94cafdfb9e30c55b03e87de32f4c1e2f3200690aaeb88d1320e346435289b13b349b3c4a086d1c8370c160684115a4dcf7e5d293d2a6d4a892a4fe024c2b9703d1ca12742d5a30cd5d102e899f49ee6b219daa0c3fc4e155db00e148b9267d5401e1f3ac29b652e99bdbab3aab49eb68931fdc99644d65e25e7cb6641f53ae9ad7bf9bce0ed261a5ec9c0"]}, @nested={0x140, 0x67, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="7fd2e2a85524124e8e04c38f94010dd6be144c526be2e3b2f766e3b2b70030c8dca345e2488c96c366ab14c3199e3ba900", @generic="1744f9b80b988c3ff943c950acff3cd100b48142977178b59430a6dfe2a3e1476b263963f574cc390f3bd20ca8654bc17b06a5266bdd0d0f24b9e78b5ff626e56509afae87813418be8a820fed7519c3881b7ff7afb6547f15717a848c54577ef50a45a5e22d383c4841a57af2caa9f88b27601bd1364b1c9386a41f4d8149c8e4be9b4db5859792fd109bbd1b2040f8e505388cd4441a27eef1b8e25e1d1999b1a9eb040c1ce166fcac3db53e74538fca2ca53f6e7fd184c1a7091387b937b14cd2a746461ff52f76803cb5619b4c", @nested={0x4, 0xfc}, @nested={0x4, 0xbf}, @typed={0x2b, 0x46, 0x0, 0x0, @str='/sys/fs/ext4/sda1/session_write_kbytes\x00'}]}, @generic="f8889c0b913062832da72844e2977d33bad6949a4fccd5aac5d1a506ebaf38a8454c51722de27c427fba3b4e05840bae77e7615a009655a5ca97fd967c67cd62e7d9deb5ea0982b65b1dddd5c7d4aa6ae9f961a0f6d03c10a4d9f83b782192afaddf29f16c2ce4d18d63ea21e18ffbe9abb5bfaed0504775c429e274d57b3bc929d3bebfafccb4f5a86ae0432726e68aa471b899e1307569ce746887d686b8a5c66146c4592ed48aaba9a6bf", @nested={0x8c, 0x11c, 0x0, 0x1, [@typed={0x8, 0x11c, 0x0, 0x0, @u32=0x80000000}, @generic="54a286aa40feb26d6b508bec95a4945c7da53d8b0ccf1d37dc6ba704769331c2eb658b1f8c8617bcceddbdaccb2c5674541bf08c87dd7daffb89816437902621adaf6d32f4fbf96e38c24fe607544c9ba0a583204ff08ace8ff761cf244ec9854da092747dd1440f8ad16791", @typed={0xc, 0xb, 0x0, 0x0, @u64=0xb}, @typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x0, 0xc4e, 0x3, 0xd333, 0xfffffffffffff78a, 0x7f, 0xf, 0xbb}}, @OVS_VPORT_ATTR_OPTIONS={0xc0, 0x4, 0x0, 0x1, [@typed={0xbc, 0xf4, 0x0, 0x0, @binary="79011f942be3a23c80c943aa93ee4d5a57c3c917a73c96900d3fb02f97e7282bc98e7ffb364f0f273a4b2a2bee7ab6d94927f05d2fc171e0904bd74be9da574402eaa331558086a9b1d74837da51c72d42c551d13fc6b526a4a50ff7a56e5777467bb4301f8594f62d4e7442ca1725c0d5b08cd75758ac599ab7a17156ba8263ee8316f0d06d064f111ff887ed39e697c8846e7dd490172baf5142e40d130dff2333ebbbb319726b35c3dbfe0f519a9ec0f22d64c26524f9"}]}, @OVS_VPORT_ATTR_UPCALL_PID={0xed, 0x5, "5db86deb7ea0c15dac069e09bc767bac9539a658624a9995093fb6049c23e3b1ca6fa7b0e94dd9235820cba01f04a52bf3e8cc18bbb46bb99b119bba4c565939de601e4480c1904c82e5719bc74658674a52670af00d85b155457e74bcc10c1a078f7d0d50a777d4356697b93c58e1c5abbff56404c477ae10d2e2d0b5dcfc9ea256c4e8db6a179feee7527227cfcc0f409791c94d5b6dbf232eee44902e982cb074024070b923a08820649a2c189875f8e82081ab722a9ac1aaf1e808a33190f2e76943fe5c23edcc7a8cd7e1d90ee9053fe5ce8d19d27b67934ca2dec66d7546346a0655f54ebcd5"}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x1}, @OVS_VPORT_ATTR_NAME={0x7, 0x3, '\\#\x00'}, @OVS_VPORT_ATTR_OPTIONS={0x2f7, 0x4, 0x0, 0x1, [@generic="49486e0201ac3f1b56162e6d423f5310a98ab0741a3fb940349c1be22167e011938d926a5a3b67b4c69e0afa5b72f3da2e1da434", @nested={0x2c, 0xae, 0x0, 0x1, [@nested={0x4, 0xca}, @typed={0x8, 0x113, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x15c}, @nested={0x4, 0xa5}, @nested={0x4, 0x126}, @typed={0x8, 0xec, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @generic="dd92ea865bf6c81b3ed701c76351b7b84bc258e226f5f31e7090d3ac76c5ed986c9ee1ec598050172ab4deed6ec41863672e26dbf98d3695655537caa9c49f6e9d690b0833c6177431bb7c9af3cccd195eebf28c7cb04dc2a812f92dc734c42893c953479a1a221815077ecf01e9e058bb2fa209da2c1f3db046a222c983376254255109b90b98b7b27f0cc0e5d076776d4867d8f989c5ad74e45e10f1f8a2430929470599331ecded4466ffc323994c1a00f1ade3e79872dda58cec13197ee6e5", @typed={0x44, 0x106, 0x0, 0x0, @binary="83a39d51fc96ed5c696be2e5b206fae4c190e3c00abba6a2f448e121cc9084423c837853d5bdaf5a372c8ff65ac9e31f528e52863bcb2a6347932096dfb282f0"}, @generic="9f9e058deb73d66be54ed5fcc9e871f4a3a41d8ee5ea5823350882bd48a7be4d489a7f8eb04539f295cc7edb55178a8b36fa351c901fffe2c1c2f6eed8b3e3fecc0238b9a7c857e4ebdf1c22133067457683688465d0ce6d1b3c94ef7225ac3136fbe33a82836616712a6b9b7b76b83a943d8c0f1a11edcbca181e895dcf", @nested={0x7e, 0x130, 0x0, 0x1, [@typed={0xc, 0x152, 0x0, 0x0, @u64=0x4}, @generic="1e92507446d67b14d6505af07af1218dae6ec525468c355707dc502ad7c5ed4f179d8834bd9f26accde15255c7355ef8ce160ef78d634bb3fa74663e57a5e0290166c49b50b4014ea8af54694138eacab2ca23eb7b8281358962b3eefa25", @typed={0x8, 0x104, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x121}, @typed={0x4, 0x1a}]}, @nested={0x90, 0x12c, 0x0, 0x1, [@generic="6662a85a8942c19564711ef6e43fc512425e5654a9a126525779081029c2aff1737305826ff08f984e1ee0752e3f3133fb8eda1d680f189ad5ea88e2f13065d87a0a0846411fdd9e8c8565d5ca23ad843913b23c04f11bfa0808a57afb06e8dcce2156859fea8dd66370057b732f1871fa26cb9fb2455f4cb05162fe23aa75925fe45815c625c0eb28260e38"]}]}, @OVS_VPORT_ATTR_UPCALL_STATS={0xa0, 0xa, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @pid=r5}, @generic="4dfec34ae64b2f8c1bb82525f9b313e9fbd006165ca8cf777aff183014eee149a2582eec7dbbaf0c564bc01fcebce78f48d0a77667c386fb009b59dbe592b105a9c38c44e7743aee473e6a14e1978d", @generic="84dd6d55be46933aa664d4c6ccb795794cc42be311cc71913d90987804aa3f0c0dfd3275d98a77addb8c0a0e065975b3bb4e4c45e959a5368799756aaf2ba275b77f544e19"]}]}, 0xab8}, 0x1, 0x0, 0x0, 0x4000000}, 0x48441)
setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003480)=""/247, 0xf7)
executing program 1:
mremap$auto(0x200000000000, 0x4, 0xff, 0x6e8f, 0x100000000)
timer_settime$auto(0x0, 0x100, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x4, 0x100000000)
waitid$auto_P_PID(0x1, r0, 0x0, 0x7, &(0x7f0000000080)={{0x3, 0x8}, {0x7, 0x7}, 0x2, 0x3, 0x7fffffff, 0x2f, 0x7, 0x19e296a3, 0x100000001, 0x3883, 0x7, 0x7, 0x81, 0x81, 0x0, 0x7})
mmap$auto(0xaa7b, 0x4020009, 0x8, 0xeb1, 0x401, 0x8000)
r1 = open(0x0, 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r1, 0x18, 0x2}, 0xc)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x5420, 0x38)
executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 32)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram4\x00', 0x26040, 0x0) (rerun: 32)
ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf810000000004e8ffffff000000aeed34830d00", 0x3ff, 0xfffffff7, 0xffc, 0x400004, 0x200000000040000d})
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x474d}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4611, 0x0)
executing program 1:
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd4\x00', 0x745100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x200000, 0x0)
r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r2, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}})
ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(0xffffffffffffffff, 0x4004550d, &(0x7f00000001c0)=0x9)
r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x200, 0x0)
read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\t\x00\x00\x00\x00\x00\x00\x00\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x4)
socket(0x2b, 0x1, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2000000002003f2, 0x15)
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, r1, 0x28000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
memfd_create$auto(0x0, 0xe)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/memory/memory15/valid_zones\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x40c9)
socket(0x15, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
close_range$auto(r1, r2, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
executing program 2:
read$auto(0xffffffffffffffff, &(0x7f0000000140)='/sys/devZces/platform/vhci_hcd\x00\x93S\x1asb26/descriptors\x00', 0x9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
ioctl$auto(r1, 0xc0104d08, r1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x810)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_BEACON(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfff}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20004010)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0)
write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
sysfs$auto(0x2, 0x7, 0x0)
r6 = fsopen$auto(0x0, 0x1)
r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000000)={{0x3, 0x1000, 0x1, 0x2, 0x9faf}, "654c6dbc7a4d3098b281ed4f8207ed72d7e40000000000ebff0400000600"})
readv$auto(r7, &(0x7f0000000a80)={0x0, 0x100000ffff}, 0x1)
fsconfig$auto(r6, 0x6, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r8 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r8, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x18)
pipe$auto(0x0)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
write$auto(r0, &(0x7f0000000040)='/dev/dsp\x00', 0x1)
mmap$auto(0x10000000001, 0x2020009, 0x3, 0x20000000000eb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20002, 0x1ff, 0xeb1, r0, 0x60fb)
r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
ioctl$auto(r2, 0x4008af22, r1)
openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0)
socket(0x2, 0x2, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0)
sendfile$auto(r3, r3, 0x0, 0x200)
executing program 3:
r0 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_send_size\x00', 0x48041, 0x0)
openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x88180, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r1, 0x0, 0x1f40)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000)
setsockopt$auto(r0, 0x10000000084, 0x7f, 0x0, 0xad4)
executing program 3:
socket(0x2, 0x1, 0x0) (async)
socket(0x2, 0x1, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd)
r0 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x401, 0x0) (async)
io_uring_setup$auto(0x401, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$auto(r0, 0x84, 0x7d, 0x0, 0x0)
executing program 3:
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r0, 0x13, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, '\x00\x00\x00\x00\xff\xff\xff\xfc'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0)
sendfile$auto(r0, r0, 0x0, 0x200) (fail_nth: 8)
executing program 2:
socket(0xa, 0x3, 0xff)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
read$auto(r0, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/dmi/id/uevent\x00', 0x0, 0x0)
syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r1)
executing program 3:
mremap$auto(0x200000000000, 0x4, 0xff, 0x6e8f, 0x100000000)
timer_settime$auto(0x0, 0x100, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x4, 0x100000000)
waitid$auto_P_PID(0x1, r0, 0x0, 0x7, &(0x7f0000000080)={{0x3, 0x8}, {0x7, 0x7}, 0x2, 0x3, 0x7fffffff, 0x2f, 0x7, 0x19e296a3, 0x100000001, 0x3883, 0x7, 0x7, 0x81, 0x81, 0x0, 0x7})
mmap$auto(0xaa7b, 0x4020009, 0x8, 0xeb1, 0x401, 0x8000)
r1 = open(0x0, 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r1, 0x18, 0x2}, 0xc)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x5420, 0x38)
executing program 2:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x2, 0x5, 0x13, 0x9) (async)
r2 = socket(0xa, 0x801, 0x84)
setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) (async)
gettid() (async)
sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x2a8}, 0x1, 0x0, 0x0, 0x6004000}, 0x20814) (async)
clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103)
executing program 3:
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r0, 0x65, 0x7, 0x0, 0x4)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='O\xa2\xfb\xea<\x0e\x80\xa0n\xc5n\x86\x82g\xe6\x90G+\x85~?i\xae\x82\xdaH\x05X\xa0j\xc4\xe2n\xd6\x19\xcbA(4r\x9aP9\xbdy\xa5\x80\xb5\xf7\x1c\xe4\xcf\xb2e\xbe\x85\xcc\x85Jw\x8fb\xc7|d\x19\x11#\xdb<\x8fk\xb5\xe2\xd5\x1f\x11\xfb\xd5\x02\xb9\x94\x19\xe7\xfe\x15\x84\xd0\x8e\xf31\v\x89%[', 0x81)
r2 = socket(0x11, 0x3, 0x9)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
pwrite64$auto(r3, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x4, 0x8)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x1, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(r4, 0x29, 0x7ca, 0x0, 0xaa)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
setresuid$auto(0xee01, 0x0, 0x0)
r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x42, 0x20)
r6 = open_tree$auto(r5, 0x0, 0x1001)
statx$auto(r6, 0x0, 0x4001000, 0x8, 0x0)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x80, 0x0)
ioctl$auto_TCFLSH2(r7, 0x5408, 0x0)
r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto(r8, 0x80045438, r8)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc8745d18a5956210d2de44402", 0x49}, 0x5, &(0x7f0000000400), 0x5, 0x1000}}, 0x1, 0x100)
executing program 2:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0)
r1 = socket(0x18, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
r3 = socket(0x25, 0x1, 0x9)
connect$auto(r3, &(0x7f0000000000)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, 0x3a)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x80880, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x40047459, 0x0)
sendfile$auto(r0, r0, 0x0, 0x1)
executing program 4:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5daa3ce299010025bd706000000035dd0de93ff66e67b87f9a5d9da446a8175cdd5528eadc53a05293a3565557f42cbd4cbac8130069b32fa98cf11886968cfac22088c525c2a3cc1cc218c571907da7eab6431a7994a38197ca04af0c7dabf387f716989f9b8a8ecd87f3898759c34c17c58db37bd4adab0cd98154951081485d8e1a19eebb423d4fe92ae2df2ad1953b7f221cf08566af73"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = socket(0x2, 0x3, 0x9)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004)
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x1, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0)
r4 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x100, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sendto$auto(0x3, 0x0, 0x2000f, 0x102, 0x0, 0x6)
fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r4, 0x2, &(0x7f00000002c0)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', &(0x7f00000000c0)="0a6725bd3f6332e0e356afa53b6ee83973", 0x5)
write$auto(0x3, 0x0, 0xfdf3)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)

program crashed: BUG: Bad rss-counter state
bisect: bisecting 31 programs
bisect: split chunks (needed=false): <31>
bisect: split chunk #0 of len 31 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 16, 2, 4, 18, 11, 7, 30, 23, 15, 10, 9, 4, 2, 15, 11, 12, 30, 13, 30]
detailed listing:
executing program 2:
r0 = socket(0xa, 0x1, 0x84)
ioperm$auto(0x4, 0x4, 0x4000007)
getsockopt$auto(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2d)
inotify_add_watch$auto(r0, &(0x7f0000000080)='./file0\x00', 0x7)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex, r2, 0x9c, 0x0, r1, @relative_fd=r2, 0x80}, 0x1)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000118, 0x400, 0x9}]})
select$auto(0x4, 0x0, &(0x7f0000000100)={[0x8, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x3]}, 0x0, 0x0)
r5 = socket(0x2, 0x3, 0x2)
setsockopt$auto_SO_ATTACH_FILTER(r5, 0x0, 0x1a, 0x0, 0x0)
r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x101000, 0x0)
ioctl$auto_EVIOCRMFF(r6, 0x40044581, 0x0)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x0, 0x0)
write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioperm$auto(0x8, 0xa, 0xeffffffa)
executing program 1:
socket(0xa, 0x3, 0xff)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
read$auto(r0, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/dmi/id/uevent\x00', 0x0, 0x0)
syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r1)
executing program 4:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0)
sendfile$auto(r0, r0, 0x0, 0x200) (fail_nth: 7)
executing program 4:
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130026ea95f173d8973e6a00000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
executing program 4:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/ext4/sda1/session_write_kbytes\x00', 0x0, 0x0)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
r1 = socket(0x1e, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000000c0), r1)
msgctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000180)={{0x2, <r3=>0xffffffffffffffff, 0xee01, 0x3, 0x10001, 0x9, 0x6}, &(0x7f0000000100)=0xfa, &(0x7f0000000140)=0xa5, 0x0, 0x0, 0x4, 0x2, 0x9, 0x6, 0x3, 0x2, @inferred, @raw=0x2})
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r4 = socket(0x23, 0x80805, 0x0)
inotify_init1$auto(0x3000000000000)
syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000d80), r4)
mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1cc5087217524dd0}}, 0x6a)
close_range$auto(0x2, 0x8, 0x0)
r5 = getpid()
sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000200)={0xab8, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x7}, @OVS_VPORT_ATTR_UPCALL_STATS={0x500, 0xa, 0x0, 0x1, [@nested={0x1bc, 0x122, 0x0, 0x1, [@generic="efd884e430cb53e1c4571f8fb680689684b869cf8f0e03f81d81bd66f62c09c50849f7f39ac21214b4a18e6e018f5999d857306fbb6491daf63c2f139a47b567f8c9cc29de70280572d71e6494073800a2facb4a828e602b9eb91d60862109ca405e6b82ff3ac067802a21fc208f7b735b4c4061d45836b75ed15a3a441b0dc2a5e8c8342f0c90df9291fcb867c9d08ed54f9b7b40956f94827908f32f1c459ca002aae4822a4a16e791baf546b2f901ba747a60ad2d01640371e9a91edd95ac478b7c4dabb74c7eb0d4d2cc330f2f83b6de65637d0842fc31268be87ca503caf2bf165599cd08f0884e0abef38f60", @generic="b5a236b48daae231a5c1adf289487ca0608da88f8dd922a4e7195212a8b4f85533fe2fb4697be32777ee3b76d80b07d7c4714efc7e18a61db1ab838d91ab6962de49d91b5b4ad44472da8ce6f3ee766d57ec4fe8405c08069240c23fa9e536ce79e84ad4c5d9de3adfc36dc7a02e6297b1e636f08ff93b55eac11c55567fc946d09cdac853be3d4b5e9cae1f30d11ff6bdf65ea5cbe688f6b9610d32a49f1c05530ea9dd357d06adba86ccc2ec9a35c25330b320b3b2c4832bd65c1972", @typed={0xc, 0x15c, 0x0, 0x0, @u64=0x3ff}]}, @nested={0xb3, 0x10d, 0x0, 0x1, [@generic="7a95219f6e5c3f6fb8c9dbcea1eadf44", @generic="4d334cc4f21e4533d82f30990d91ed8a7d1a34dae94cafdfb9e30c55b03e87de32f4c1e2f3200690aaeb88d1320e346435289b13b349b3c4a086d1c8370c160684115a4dcf7e5d293d2a6d4a892a4fe024c2b9703d1ca12742d5a30cd5d102e899f49ee6b219daa0c3fc4e155db00e148b9267d5401e1f3ac29b652e99bdbab3aab49eb68931fdc99644d65e25e7cb6641f53ae9ad7bf9bce0ed261a5ec9c0"]}, @nested={0x140, 0x67, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="7fd2e2a85524124e8e04c38f94010dd6be144c526be2e3b2f766e3b2b70030c8dca345e2488c96c366ab14c3199e3ba900", @generic="1744f9b80b988c3ff943c950acff3cd100b48142977178b59430a6dfe2a3e1476b263963f574cc390f3bd20ca8654bc17b06a5266bdd0d0f24b9e78b5ff626e56509afae87813418be8a820fed7519c3881b7ff7afb6547f15717a848c54577ef50a45a5e22d383c4841a57af2caa9f88b27601bd1364b1c9386a41f4d8149c8e4be9b4db5859792fd109bbd1b2040f8e505388cd4441a27eef1b8e25e1d1999b1a9eb040c1ce166fcac3db53e74538fca2ca53f6e7fd184c1a7091387b937b14cd2a746461ff52f76803cb5619b4c", @nested={0x4, 0xfc}, @nested={0x4, 0xbf}, @typed={0x2b, 0x46, 0x0, 0x0, @str='/sys/fs/ext4/sda1/session_write_kbytes\x00'}]}, @generic="f8889c0b913062832da72844e2977d33bad6949a4fccd5aac5d1a506ebaf38a8454c51722de27c427fba3b4e05840bae77e7615a009655a5ca97fd967c67cd62e7d9deb5ea0982b65b1dddd5c7d4aa6ae9f961a0f6d03c10a4d9f83b782192afaddf29f16c2ce4d18d63ea21e18ffbe9abb5bfaed0504775c429e274d57b3bc929d3bebfafccb4f5a86ae0432726e68aa471b899e1307569ce746887d686b8a5c66146c4592ed48aaba9a6bf", @nested={0x8c, 0x11c, 0x0, 0x1, [@typed={0x8, 0x11c, 0x0, 0x0, @u32=0x80000000}, @generic="54a286aa40feb26d6b508bec95a4945c7da53d8b0ccf1d37dc6ba704769331c2eb658b1f8c8617bcceddbdaccb2c5674541bf08c87dd7daffb89816437902621adaf6d32f4fbf96e38c24fe607544c9ba0a583204ff08ace8ff761cf244ec9854da092747dd1440f8ad16791", @typed={0xc, 0xb, 0x0, 0x0, @u64=0xb}, @typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x0, 0xc4e, 0x3, 0xd333, 0xfffffffffffff78a, 0x7f, 0xf, 0xbb}}, @OVS_VPORT_ATTR_OPTIONS={0xc0, 0x4, 0x0, 0x1, [@typed={0xbc, 0xf4, 0x0, 0x0, @binary="79011f942be3a23c80c943aa93ee4d5a57c3c917a73c96900d3fb02f97e7282bc98e7ffb364f0f273a4b2a2bee7ab6d94927f05d2fc171e0904bd74be9da574402eaa331558086a9b1d74837da51c72d42c551d13fc6b526a4a50ff7a56e5777467bb4301f8594f62d4e7442ca1725c0d5b08cd75758ac599ab7a17156ba8263ee8316f0d06d064f111ff887ed39e697c8846e7dd490172baf5142e40d130dff2333ebbbb319726b35c3dbfe0f519a9ec0f22d64c26524f9"}]}, @OVS_VPORT_ATTR_UPCALL_PID={0xed, 0x5, "5db86deb7ea0c15dac069e09bc767bac9539a658624a9995093fb6049c23e3b1ca6fa7b0e94dd9235820cba01f04a52bf3e8cc18bbb46bb99b119bba4c565939de601e4480c1904c82e5719bc74658674a52670af00d85b155457e74bcc10c1a078f7d0d50a777d4356697b93c58e1c5abbff56404c477ae10d2e2d0b5dcfc9ea256c4e8db6a179feee7527227cfcc0f409791c94d5b6dbf232eee44902e982cb074024070b923a08820649a2c189875f8e82081ab722a9ac1aaf1e808a33190f2e76943fe5c23edcc7a8cd7e1d90ee9053fe5ce8d19d27b67934ca2dec66d7546346a0655f54ebcd5"}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x1}, @OVS_VPORT_ATTR_NAME={0x7, 0x3, '\\#\x00'}, @OVS_VPORT_ATTR_OPTIONS={0x2f7, 0x4, 0x0, 0x1, [@generic="49486e0201ac3f1b56162e6d423f5310a98ab0741a3fb940349c1be22167e011938d926a5a3b67b4c69e0afa5b72f3da2e1da434", @nested={0x2c, 0xae, 0x0, 0x1, [@nested={0x4, 0xca}, @typed={0x8, 0x113, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x15c}, @nested={0x4, 0xa5}, @nested={0x4, 0x126}, @typed={0x8, 0xec, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @generic="dd92ea865bf6c81b3ed701c76351b7b84bc258e226f5f31e7090d3ac76c5ed986c9ee1ec598050172ab4deed6ec41863672e26dbf98d3695655537caa9c49f6e9d690b0833c6177431bb7c9af3cccd195eebf28c7cb04dc2a812f92dc734c42893c953479a1a221815077ecf01e9e058bb2fa209da2c1f3db046a222c983376254255109b90b98b7b27f0cc0e5d076776d4867d8f989c5ad74e45e10f1f8a2430929470599331ecded4466ffc323994c1a00f1ade3e79872dda58cec13197ee6e5", @typed={0x44, 0x106, 0x0, 0x0, @binary="83a39d51fc96ed5c696be2e5b206fae4c190e3c00abba6a2f448e121cc9084423c837853d5bdaf5a372c8ff65ac9e31f528e52863bcb2a6347932096dfb282f0"}, @generic="9f9e058deb73d66be54ed5fcc9e871f4a3a41d8ee5ea5823350882bd48a7be4d489a7f8eb04539f295cc7edb55178a8b36fa351c901fffe2c1c2f6eed8b3e3fecc0238b9a7c857e4ebdf1c22133067457683688465d0ce6d1b3c94ef7225ac3136fbe33a82836616712a6b9b7b76b83a943d8c0f1a11edcbca181e895dcf", @nested={0x7e, 0x130, 0x0, 0x1, [@typed={0xc, 0x152, 0x0, 0x0, @u64=0x4}, @generic="1e92507446d67b14d6505af07af1218dae6ec525468c355707dc502ad7c5ed4f179d8834bd9f26accde15255c7355ef8ce160ef78d634bb3fa74663e57a5e0290166c49b50b4014ea8af54694138eacab2ca23eb7b8281358962b3eefa25", @typed={0x8, 0x104, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x121}, @typed={0x4, 0x1a}]}, @nested={0x90, 0x12c, 0x0, 0x1, [@generic="6662a85a8942c19564711ef6e43fc512425e5654a9a126525779081029c2aff1737305826ff08f984e1ee0752e3f3133fb8eda1d680f189ad5ea88e2f13065d87a0a0846411fdd9e8c8565d5ca23ad843913b23c04f11bfa0808a57afb06e8dcce2156859fea8dd66370057b732f1871fa26cb9fb2455f4cb05162fe23aa75925fe45815c625c0eb28260e38"]}]}, @OVS_VPORT_ATTR_UPCALL_STATS={0xa0, 0xa, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @pid=r5}, @generic="4dfec34ae64b2f8c1bb82525f9b313e9fbd006165ca8cf777aff183014eee149a2582eec7dbbaf0c564bc01fcebce78f48d0a77667c386fb009b59dbe592b105a9c38c44e7743aee473e6a14e1978d", @generic="84dd6d55be46933aa664d4c6ccb795794cc42be311cc71913d90987804aa3f0c0dfd3275d98a77addb8c0a0e065975b3bb4e4c45e959a5368799756aaf2ba275b77f544e19"]}]}, 0xab8}, 0x1, 0x0, 0x0, 0x4000000}, 0x48441)
setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003480)=""/247, 0xf7)
executing program 1:
mremap$auto(0x200000000000, 0x4, 0xff, 0x6e8f, 0x100000000)
timer_settime$auto(0x0, 0x100, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x4, 0x100000000)
waitid$auto_P_PID(0x1, r0, 0x0, 0x7, &(0x7f0000000080)={{0x3, 0x8}, {0x7, 0x7}, 0x2, 0x3, 0x7fffffff, 0x2f, 0x7, 0x19e296a3, 0x100000001, 0x3883, 0x7, 0x7, 0x81, 0x81, 0x0, 0x7})
mmap$auto(0xaa7b, 0x4020009, 0x8, 0xeb1, 0x401, 0x8000)
r1 = open(0x0, 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r1, 0x18, 0x2}, 0xc)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x5420, 0x38)
executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 32)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram4\x00', 0x26040, 0x0) (rerun: 32)
ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf810000000004e8ffffff000000aeed34830d00", 0x3ff, 0xfffffff7, 0xffc, 0x400004, 0x200000000040000d})
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x474d}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4611, 0x0)
executing program 1:
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd4\x00', 0x745100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x200000, 0x0)
r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r2, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}})
ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(0xffffffffffffffff, 0x4004550d, &(0x7f00000001c0)=0x9)
r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x200, 0x0)
read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\t\x00\x00\x00\x00\x00\x00\x00\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x4)
socket(0x2b, 0x1, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2000000002003f2, 0x15)
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, r1, 0x28000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
memfd_create$auto(0x0, 0xe)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/memory/memory15/valid_zones\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x40c9)
socket(0x15, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
close_range$auto(r1, r2, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
executing program 2:
read$auto(0xffffffffffffffff, &(0x7f0000000140)='/sys/devZces/platform/vhci_hcd\x00\x93S\x1asb26/descriptors\x00', 0x9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
ioctl$auto(r1, 0xc0104d08, r1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x810)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_BEACON(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfff}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20004010)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0)
write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
sysfs$auto(0x2, 0x7, 0x0)
r6 = fsopen$auto(0x0, 0x1)
r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000000)={{0x3, 0x1000, 0x1, 0x2, 0x9faf}, "654c6dbc7a4d3098b281ed4f8207ed72d7e40000000000ebff0400000600"})
readv$auto(r7, &(0x7f0000000a80)={0x0, 0x100000ffff}, 0x1)
fsconfig$auto(r6, 0x6, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r8 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r8, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x18)
pipe$auto(0x0)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
write$auto(r0, &(0x7f0000000040)='/dev/dsp\x00', 0x1)
mmap$auto(0x10000000001, 0x2020009, 0x3, 0x20000000000eb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20002, 0x1ff, 0xeb1, r0, 0x60fb)
r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
ioctl$auto(r2, 0x4008af22, r1)
openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0)
socket(0x2, 0x2, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0)
sendfile$auto(r3, r3, 0x0, 0x200)
executing program 3:
r0 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_send_size\x00', 0x48041, 0x0)
openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x88180, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r1, 0x0, 0x1f40)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000)
setsockopt$auto(r0, 0x10000000084, 0x7f, 0x0, 0xad4)
executing program 3:
socket(0x2, 0x1, 0x0) (async)
socket(0x2, 0x1, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd)
r0 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x401, 0x0) (async)
io_uring_setup$auto(0x401, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$auto(r0, 0x84, 0x7d, 0x0, 0x0)
executing program 3:
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r0, 0x13, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, '\x00\x00\x00\x00\xff\xff\xff\xfc'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0)
sendfile$auto(r0, r0, 0x0, 0x200) (fail_nth: 8)
executing program 2:
socket(0xa, 0x3, 0xff)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
read$auto(r0, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/dmi/id/uevent\x00', 0x0, 0x0)
syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r1)
executing program 3:
mremap$auto(0x200000000000, 0x4, 0xff, 0x6e8f, 0x100000000)
timer_settime$auto(0x0, 0x100, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x4, 0x100000000)
waitid$auto_P_PID(0x1, r0, 0x0, 0x7, &(0x7f0000000080)={{0x3, 0x8}, {0x7, 0x7}, 0x2, 0x3, 0x7fffffff, 0x2f, 0x7, 0x19e296a3, 0x100000001, 0x3883, 0x7, 0x7, 0x81, 0x81, 0x0, 0x7})
mmap$auto(0xaa7b, 0x4020009, 0x8, 0xeb1, 0x401, 0x8000)
r1 = open(0x0, 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r1, 0x18, 0x2}, 0xc)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x5420, 0x38)
executing program 2:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x2, 0x5, 0x13, 0x9) (async)
r2 = socket(0xa, 0x801, 0x84)
setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) (async)
gettid() (async)
sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x2a8}, 0x1, 0x0, 0x0, 0x6004000}, 0x20814) (async)
clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103)
executing program 3:
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r0, 0x65, 0x7, 0x0, 0x4)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='O\xa2\xfb\xea<\x0e\x80\xa0n\xc5n\x86\x82g\xe6\x90G+\x85~?i\xae\x82\xdaH\x05X\xa0j\xc4\xe2n\xd6\x19\xcbA(4r\x9aP9\xbdy\xa5\x80\xb5\xf7\x1c\xe4\xcf\xb2e\xbe\x85\xcc\x85Jw\x8fb\xc7|d\x19\x11#\xdb<\x8fk\xb5\xe2\xd5\x1f\x11\xfb\xd5\x02\xb9\x94\x19\xe7\xfe\x15\x84\xd0\x8e\xf31\v\x89%[', 0x81)
r2 = socket(0x11, 0x3, 0x9)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
pwrite64$auto(r3, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x4, 0x8)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x1, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(r4, 0x29, 0x7ca, 0x0, 0xaa)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
setresuid$auto(0xee01, 0x0, 0x0)
r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x42, 0x20)
r6 = open_tree$auto(r5, 0x0, 0x1001)
statx$auto(r6, 0x0, 0x4001000, 0x8, 0x0)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x80, 0x0)
ioctl$auto_TCFLSH2(r7, 0x5408, 0x0)
r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto(r8, 0x80045438, r8)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc8745d18a5956210d2de44402", 0x49}, 0x5, &(0x7f0000000400), 0x5, 0x1000}}, 0x1, 0x100)
executing program 2:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0)
r1 = socket(0x18, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
r3 = socket(0x25, 0x1, 0x9)
connect$auto(r3, &(0x7f0000000000)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, 0x3a)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x80880, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x40047459, 0x0)
sendfile$auto(r0, r0, 0x0, 0x1)
executing program 4:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5daa3ce299010025bd706000000035dd0de93ff66e67b87f9a5d9da446a8175cdd5528eadc53a05293a3565557f42cbd4cbac8130069b32fa98cf11886968cfac22088c525c2a3cc1cc218c571907da7eab6431a7994a38197ca04af0c7dabf387f716989f9b8a8ecd87f3898759c34c17c58db37bd4adab0cd98154951081485d8e1a19eebb423d4fe92ae2df2ad1953b7f221cf08566af73"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = socket(0x2, 0x3, 0x9)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004)
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x1, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0)
r4 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x100, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sendto$auto(0x3, 0x0, 0x2000f, 0x102, 0x0, 0x6)
fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r4, 0x2, &(0x7f00000002c0)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', &(0x7f00000000c0)="0a6725bd3f6332e0e356afa53b6ee83973", 0x5)
write$auto(0x3, 0x0, 0xfdf3)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)

program crashed: BUG: Bad rss-counter state
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 4, 2, 15, 11, 12, 30, 13, 30]
detailed listing:
executing program 3:
socket(0x2, 0x1, 0x0) (async)
socket(0x2, 0x1, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd)
r0 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x401, 0x0) (async)
io_uring_setup$auto(0x401, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$auto(r0, 0x84, 0x7d, 0x0, 0x0)
executing program 3:
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r0, 0x13, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, '\x00\x00\x00\x00\xff\xff\xff\xfc'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0)
sendfile$auto(r0, r0, 0x0, 0x200) (fail_nth: 8)
executing program 2:
socket(0xa, 0x3, 0xff)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
read$auto(r0, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/dmi/id/uevent\x00', 0x0, 0x0)
syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r1)
executing program 3:
mremap$auto(0x200000000000, 0x4, 0xff, 0x6e8f, 0x100000000)
timer_settime$auto(0x0, 0x100, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x4, 0x100000000)
waitid$auto_P_PID(0x1, r0, 0x0, 0x7, &(0x7f0000000080)={{0x3, 0x8}, {0x7, 0x7}, 0x2, 0x3, 0x7fffffff, 0x2f, 0x7, 0x19e296a3, 0x100000001, 0x3883, 0x7, 0x7, 0x81, 0x81, 0x0, 0x7})
mmap$auto(0xaa7b, 0x4020009, 0x8, 0xeb1, 0x401, 0x8000)
r1 = open(0x0, 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r1, 0x18, 0x2}, 0xc)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x5420, 0x38)
executing program 2:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x2, 0x5, 0x13, 0x9) (async)
r2 = socket(0xa, 0x801, 0x84)
setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) (async)
gettid() (async)
sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x2a8}, 0x1, 0x0, 0x0, 0x6004000}, 0x20814) (async)
clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103)
executing program 3:
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r0, 0x65, 0x7, 0x0, 0x4)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='O\xa2\xfb\xea<\x0e\x80\xa0n\xc5n\x86\x82g\xe6\x90G+\x85~?i\xae\x82\xdaH\x05X\xa0j\xc4\xe2n\xd6\x19\xcbA(4r\x9aP9\xbdy\xa5\x80\xb5\xf7\x1c\xe4\xcf\xb2e\xbe\x85\xcc\x85Jw\x8fb\xc7|d\x19\x11#\xdb<\x8fk\xb5\xe2\xd5\x1f\x11\xfb\xd5\x02\xb9\x94\x19\xe7\xfe\x15\x84\xd0\x8e\xf31\v\x89%[', 0x81)
r2 = socket(0x11, 0x3, 0x9)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
pwrite64$auto(r3, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x4, 0x8)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x1, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(r4, 0x29, 0x7ca, 0x0, 0xaa)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
setresuid$auto(0xee01, 0x0, 0x0)
r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x42, 0x20)
r6 = open_tree$auto(r5, 0x0, 0x1001)
statx$auto(r6, 0x0, 0x4001000, 0x8, 0x0)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x80, 0x0)
ioctl$auto_TCFLSH2(r7, 0x5408, 0x0)
r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto(r8, 0x80045438, r8)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc8745d18a5956210d2de44402", 0x49}, 0x5, &(0x7f0000000400), 0x5, 0x1000}}, 0x1, 0x100)
executing program 2:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0)
r1 = socket(0x18, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
r3 = socket(0x25, 0x1, 0x9)
connect$auto(r3, &(0x7f0000000000)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, 0x3a)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x80880, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x40047459, 0x0)
sendfile$auto(r0, r0, 0x0, 0x1)
executing program 4:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5daa3ce299010025bd706000000035dd0de93ff66e67b87f9a5d9da446a8175cdd5528eadc53a05293a3565557f42cbd4cbac8130069b32fa98cf11886968cfac22088c525c2a3cc1cc218c571907da7eab6431a7994a38197ca04af0c7dabf387f716989f9b8a8ecd87f3898759c34c17c58db37bd4adab0cd98154951081485d8e1a19eebb423d4fe92ae2df2ad1953b7f221cf08566af73"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = socket(0x2, 0x3, 0x9)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004)
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x1, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0)
r4 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x100, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sendto$auto(0x3, 0x0, 0x2000f, 0x102, 0x0, 0x6)
fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r4, 0x2, &(0x7f00000002c0)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', &(0x7f00000000c0)="0a6725bd3f6332e0e356afa53b6ee83973", 0x5)
write$auto(0x3, 0x0, 0xfdf3)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)

program crashed: BUG: Bad rss-counter state
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
bisect: split chunks (needed=true): <9>
bisect: split chunk #0 of len 9 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 30, 13, 30]
detailed listing:
executing program 2:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x2, 0x5, 0x13, 0x9) (async)
r2 = socket(0xa, 0x801, 0x84)
setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) (async)
gettid() (async)
sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x2a8}, 0x1, 0x0, 0x0, 0x6004000}, 0x20814) (async)
clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103)
executing program 3:
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r0, 0x65, 0x7, 0x0, 0x4)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='O\xa2\xfb\xea<\x0e\x80\xa0n\xc5n\x86\x82g\xe6\x90G+\x85~?i\xae\x82\xdaH\x05X\xa0j\xc4\xe2n\xd6\x19\xcbA(4r\x9aP9\xbdy\xa5\x80\xb5\xf7\x1c\xe4\xcf\xb2e\xbe\x85\xcc\x85Jw\x8fb\xc7|d\x19\x11#\xdb<\x8fk\xb5\xe2\xd5\x1f\x11\xfb\xd5\x02\xb9\x94\x19\xe7\xfe\x15\x84\xd0\x8e\xf31\v\x89%[', 0x81)
r2 = socket(0x11, 0x3, 0x9)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
pwrite64$auto(r3, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x4, 0x8)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x1, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(r4, 0x29, 0x7ca, 0x0, 0xaa)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
setresuid$auto(0xee01, 0x0, 0x0)
r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x42, 0x20)
r6 = open_tree$auto(r5, 0x0, 0x1001)
statx$auto(r6, 0x0, 0x4001000, 0x8, 0x0)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x80, 0x0)
ioctl$auto_TCFLSH2(r7, 0x5408, 0x0)
r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto(r8, 0x80045438, r8)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc8745d18a5956210d2de44402", 0x49}, 0x5, &(0x7f0000000400), 0x5, 0x1000}}, 0x1, 0x100)
executing program 2:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0)
r1 = socket(0x18, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
r3 = socket(0x25, 0x1, 0x9)
connect$auto(r3, &(0x7f0000000000)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, 0x3a)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x80880, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x40047459, 0x0)
sendfile$auto(r0, r0, 0x0, 0x1)
executing program 4:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5daa3ce299010025bd706000000035dd0de93ff66e67b87f9a5d9da446a8175cdd5528eadc53a05293a3565557f42cbd4cbac8130069b32fa98cf11886968cfac22088c525c2a3cc1cc218c571907da7eab6431a7994a38197ca04af0c7dabf387f716989f9b8a8ecd87f3898759c34c17c58db37bd4adab0cd98154951081485d8e1a19eebb423d4fe92ae2df2ad1953b7f221cf08566af73"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = socket(0x2, 0x3, 0x9)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004)
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x1, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0)
r4 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x100, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sendto$auto(0x3, 0x0, 0x2000f, 0x102, 0x0, 0x6)
fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r4, 0x2, &(0x7f00000002c0)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', &(0x7f00000000c0)="0a6725bd3f6332e0e356afa53b6ee83973", 0x5)
write$auto(0x3, 0x0, 0xfdf3)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)

program crashed: BUG: Bad rss-counter state
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <4>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30]
detailed listing:
executing program 2:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0)
r1 = socket(0x18, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
r3 = socket(0x25, 0x1, 0x9)
connect$auto(r3, &(0x7f0000000000)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, 0x3a)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x80880, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x40047459, 0x0)
sendfile$auto(r0, r0, 0x0, 0x1)
executing program 4:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5daa3ce299010025bd706000000035dd0de93ff66e67b87f9a5d9da446a8175cdd5528eadc53a05293a3565557f42cbd4cbac8130069b32fa98cf11886968cfac22088c525c2a3cc1cc218c571907da7eab6431a7994a38197ca04af0c7dabf387f716989f9b8a8ecd87f3898759c34c17c58db37bd4adab0cd98154951081485d8e1a19eebb423d4fe92ae2df2ad1953b7f221cf08566af73"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = socket(0x2, 0x3, 0x9)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004)
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x1, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0)
r4 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x100, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sendto$auto(0x3, 0x0, 0x2000f, 0x102, 0x0, 0x6)
fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r4, 0x2, &(0x7f00000002c0)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', &(0x7f00000000c0)="0a6725bd3f6332e0e356afa53b6ee83973", 0x5)
write$auto(0x3, 0x0, 0xfdf3)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 30]
detailed listing:
executing program 2:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x2, 0x5, 0x13, 0x9) (async)
r2 = socket(0xa, 0x801, 0x84)
setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) (async)
gettid() (async)
sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x2a8}, 0x1, 0x0, 0x0, 0x6004000}, 0x20814) (async)
clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103)
executing program 3:
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r0, 0x65, 0x7, 0x0, 0x4)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='O\xa2\xfb\xea<\x0e\x80\xa0n\xc5n\x86\x82g\xe6\x90G+\x85~?i\xae\x82\xdaH\x05X\xa0j\xc4\xe2n\xd6\x19\xcbA(4r\x9aP9\xbdy\xa5\x80\xb5\xf7\x1c\xe4\xcf\xb2e\xbe\x85\xcc\x85Jw\x8fb\xc7|d\x19\x11#\xdb<\x8fk\xb5\xe2\xd5\x1f\x11\xfb\xd5\x02\xb9\x94\x19\xe7\xfe\x15\x84\xd0\x8e\xf31\v\x89%[', 0x81)
r2 = socket(0x11, 0x3, 0x9)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
pwrite64$auto(r3, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x4, 0x8)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x1, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(r4, 0x29, 0x7ca, 0x0, 0xaa)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
setresuid$auto(0xee01, 0x0, 0x0)
r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x42, 0x20)
r6 = open_tree$auto(r5, 0x0, 0x1001)
statx$auto(r6, 0x0, 0x4001000, 0x8, 0x0)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x80, 0x0)
ioctl$auto_TCFLSH2(r7, 0x5408, 0x0)
r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto(r8, 0x80045438, r8)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc8745d18a5956210d2de44402", 0x49}, 0x5, &(0x7f0000000400), 0x5, 0x1000}}, 0x1, 0x100)

program crashed: BUG: Bad rss-counter state
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_sys_file_operations_proc_sysctl-mmap$auto-socket-setsockopt$auto-openat$auto_proc_fail_nth_operations_base-write$auto-socket-openat$auto_fb_fops_fb_chrdev-pwrite64$auto-mmap$auto-syz_clone-socket-close_range$auto-openat$auto_console_fops_tty_io-mmap$auto-mmap$auto-setsockopt$auto-openat$auto_proc_oom_adj_operations_base-syz_genetlink_get_family_id$auto_nl80211-mmap$auto-setresuid$auto-open$dir-open_tree$auto-statx$auto-openat$auto_tty_fops_tty_io-ioctl$auto_TCFLSH2-openat$auto_tty_fops_tty_io-ioctl$auto-capset$auto-sendmmsg$auto
detailed listing:
executing program 3:
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r0, 0x65, 0x7, 0x0, 0x4)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='O\xa2\xfb\xea<\x0e\x80\xa0n\xc5n\x86\x82g\xe6\x90G+\x85~?i\xae\x82\xdaH\x05X\xa0j\xc4\xe2n\xd6\x19\xcbA(4r\x9aP9\xbdy\xa5\x80\xb5\xf7\x1c\xe4\xcf\xb2e\xbe\x85\xcc\x85Jw\x8fb\xc7|d\x19\x11#\xdb<\x8fk\xb5\xe2\xd5\x1f\x11\xfb\xd5\x02\xb9\x94\x19\xe7\xfe\x15\x84\xd0\x8e\xf31\v\x89%[', 0x81)
r2 = socket(0x11, 0x3, 0x9)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
pwrite64$auto(r3, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x4, 0x8)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x1, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(r4, 0x29, 0x7ca, 0x0, 0xaa)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
setresuid$auto(0xee01, 0x0, 0x0)
r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x42, 0x20)
r6 = open_tree$auto(r5, 0x0, 0x1001)
statx$auto(r6, 0x0, 0x4001000, 0x8, 0x0)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x80, 0x0)
ioctl$auto_TCFLSH2(r7, 0x5408, 0x0)
r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto(r8, 0x80045438, r8)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc8745d18a5956210d2de44402", 0x49}, 0x5, &(0x7f0000000400), 0x5, 0x1000}}, 0x1, 0x100)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-socket-sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET-syz_genetlink_get_family_id$auto_mac802154_hwsim-mmap$auto-semctl$auto-socket-setsockopt$auto-gettid-sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO-clone$auto
detailed listing:
executing program 2:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x2, 0x5, 0x13, 0x9) (async)
r2 = socket(0xa, 0x801, 0x84)
setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) (async)
gettid() (async)
sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x2a8}, 0x1, 0x0, 0x0, 0x6004000}, 0x20814) (async)
clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103)

program crashed: BUG: Bad rss-counter state
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 1 programs left: 

executing program 2:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x2, 0x5, 0x13, 0x9) (async)
r2 = socket(0xa, 0x801, 0x84)
setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) (async)
gettid() (async)
sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x2a8}, 0x1, 0x0, 0x0, 0x6004000}, 0x20814) (async)
clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103)


bisect: trying to concatenate
bisect: concatenate 1 entries
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-socket-sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET-syz_genetlink_get_family_id$auto_mac802154_hwsim-mmap$auto-semctl$auto-socket-setsockopt$auto-gettid-sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO-clone$auto
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x2, 0x5, 0x13, 0x9) (async)
r2 = socket(0xa, 0x801, 0x84)
setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) (async)
gettid() (async)
sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x2a8}, 0x1, 0x0, 0x0, 0x6004000}, 0x20814) (async)
clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103)

program crashed: BUG: Bad rss-counter state
bisect: concatenation succeeded
found reproducer with 12 syscalls
minimizing guilty program
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-socket-sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET-syz_genetlink_get_family_id$auto_mac802154_hwsim-mmap$auto-semctl$auto-socket-setsockopt$auto-gettid-sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x2, 0x5, 0x13, 0x9) (async)
r2 = socket(0xa, 0x801, 0x84)
setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) (async)
gettid() (async)
sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x2a8}, 0x1, 0x0, 0x0, 0x6004000}, 0x20814) (async)

program crashed: KASAN: slab-use-after-free Read in __schedule
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-socket-sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET-syz_genetlink_get_family_id$auto_mac802154_hwsim-mmap$auto-semctl$auto-socket-setsockopt$auto-gettid
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x2, 0x5, 0x13, 0x9) (async)
r2 = socket(0xa, 0x801, 0x84)
setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) (async)
gettid() (async)

program crashed: kernel BUG in filemap_unaccount_folio
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-socket-sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET-syz_genetlink_get_family_id$auto_mac802154_hwsim-mmap$auto-semctl$auto-socket-setsockopt$auto
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x2, 0x5, 0x13, 0x9) (async)
r2 = socket(0xa, 0x801, 0x84)
setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) (async)

program crashed: BUG: Bad rss-counter state
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-socket-sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET-syz_genetlink_get_family_id$auto_mac802154_hwsim-mmap$auto-semctl$auto-socket
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x2, 0x5, 0x13, 0x9) (async)
socket(0xa, 0x801, 0x84)

program crashed: WARNING in __mmdrop
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-socket-sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET-syz_genetlink_get_family_id$auto_mac802154_hwsim-mmap$auto-semctl$auto
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x2, 0x5, 0x13, 0x9) (async)

program crashed: BUG: Bad rss-counter state
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-socket-sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET-syz_genetlink_get_family_id$auto_mac802154_hwsim-mmap$auto
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)

program crashed: WARNING in __mmdrop
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-socket-sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET-syz_genetlink_get_family_id$auto_mac802154_hwsim
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)

program crashed: KASAN: slab-use-after-free Read in __schedule
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-socket-sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)

program crashed: WARNING in __mmdrop
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-socket
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)
socket(0x10, 0x2, 0x14)

program crashed: WARNING in __mmdrop
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)

program crashed: KASAN: slab-use-after-free Read in __schedule
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal
detailed listing:
executing program 0:
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4}) (async)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4})

program crashed: WARNING in __mmdrop
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4})

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: KASAN: slab-use-after-free Read in __schedule
simplifying C reproducer
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program did not crash
testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program did not crash
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: kernel BUG in __mmput
a never seen crash title: kernel BUG in __mmput, ignore
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: KASAN: slab-use-after-free Read in futex_unqueue
a never seen crash title: KASAN: slab-use-after-free Read in futex_unqueue, ignore
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: WARNING in __mmdrop
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: KASAN: slab-use-after-free Read in __schedule
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: WARNING in __mmdrop
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: WARNING in __mmdrop
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: WARNING in __mmdrop
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: WARNING in __mmdrop
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: WARNING in __mmdrop
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: WARNING in __mmdrop
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: KASAN: slab-use-after-free Read in switch_mm_irqs_off
a never seen crash title: KASAN: slab-use-after-free Read in switch_mm_irqs_off, ignore
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: WARNING in __mmdrop
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: WARNING in __mmdrop
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: WARNING in __mmdrop
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: KASAN: slab-use-after-free Read in __schedule
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4})

program crashed: WARNING in __mmdrop
validation run: crashed=true
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4})

program crashed: WARNING in __mmdrop
validation run: crashed=true
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x4})

program crashed: WARNING in __mmdrop
validation run: crashed=true
reproducing took 2h29m34.90545267s
repro crashed as (corrupted=false):
------------[ cut here ]------------
mm == current->mm
WARNING: kernel/fork.c:721 at __mmdrop+0x5de/0x750 kernel/fork.c:721, CPU#0: syz.3.25/6099
Modules linked in:
CPU: 0 UID: 0 PID: 6099 Comm: syz.3.25 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
RIP: 0010:__mmdrop+0x5de/0x750 kernel/fork.c:721
Code: 00 90 0f 0b e8 f3 c9 41 00 90 0f 0b 90 e9 e9 fa ff ff e8 e5 c9 41 00 48 89 df e8 fd 2f aa 00 e9 c0 fb ff ff e8 d3 c9 41 00 90 <0f> 0b 90 e9 85 fa ff ff e8 c5 c9 41 00 90 0f 0b 90 e9 5f fb ff ff
RSP: 0018:ffffc90003a3f8f0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff88807f7d8c40 RCX: ffffffff81d46816
RDX: ffff88801e789e40 RSI: ffffffff81c4c5ed RDI: ffff88801e78a3b0
RBP: ffffc90003a3f988 R08: 0000000000000001 R09: ffffed100fefb188
R10: ffff88807f7d8c43 R11: 0000000000000000 R12: ffff88801e789e40
R13: ffff888029db8000 R14: ffff888029db8000 R15: ffff8880b843bcb0
FS:  00007fd874dfe6c0(0000) GS:ffff8881245bf000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30563fff CR3: 00000000709b6000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 mmdrop include/linux/sched/mm.h:55 [inline]
 mmdrop_sched include/linux/sched/mm.h:83 [inline]
 mmdrop_lazy_tlb_sched include/linux/sched/mm.h:110 [inline]
 finish_task_switch.isra.0+0x779/0xb80 kernel/sched/core.c:5172
 context_switch kernel/sched/core.c:5293 [inline]
 __schedule+0x102b/0x6000 kernel/sched/core.c:6902
 preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7086
 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12
 class_preempt_destructor include/linux/preempt.h:468 [inline]
 try_to_wake_up+0x644/0x1a80 kernel/sched/core.c:4089
 wake_up_process kernel/sched/core.c:4369 [inline]
 wake_up_q+0xa1/0x130 kernel/sched/core.c:1095
 futex_wake+0x460/0x530 kernel/futex/waitwake.c:198
 do_futex+0x32b/0x350 kernel/futex/syscalls.c:135
 __do_sys_futex kernel/futex/syscalls.c:207 [inline]
 __se_sys_futex kernel/futex/syscalls.c:188 [inline]
 __x64_sys_futex+0x34f/0x4d0 kernel/futex/syscalls.c:188
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd87579bf79
Code: Unable to access opcode bytes at 0x7fd87579bf4f.
RSP: 002b:00007fd874dfe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 00007fd875a15fa8 RCX: 00007fd87579bf79
RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd875a15fac
RBP: 00007fd875a15fa0 R08: 0000000000000001 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd875a16038 R14: 00007ffcc98c37d0 R15: 00007ffcc98c38b8
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
mm == current->mm
WARNING: kernel/fork.c:721 at __mmdrop+0x5de/0x750 kernel/fork.c:721, CPU#0: syz.3.25/6099
Modules linked in:
CPU: 0 UID: 0 PID: 6099 Comm: syz.3.25 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
RIP: 0010:__mmdrop+0x5de/0x750 kernel/fork.c:721
Code: 00 90 0f 0b e8 f3 c9 41 00 90 0f 0b 90 e9 e9 fa ff ff e8 e5 c9 41 00 48 89 df e8 fd 2f aa 00 e9 c0 fb ff ff e8 d3 c9 41 00 90 <0f> 0b 90 e9 85 fa ff ff e8 c5 c9 41 00 90 0f 0b 90 e9 5f fb ff ff
RSP: 0018:ffffc90003a3f8f0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff88807f7d8c40 RCX: ffffffff81d46816
RDX: ffff88801e789e40 RSI: ffffffff81c4c5ed RDI: ffff88801e78a3b0
RBP: ffffc90003a3f988 R08: 0000000000000001 R09: ffffed100fefb188
R10: ffff88807f7d8c43 R11: 0000000000000000 R12: ffff88801e789e40
R13: ffff888029db8000 R14: ffff888029db8000 R15: ffff8880b843bcb0
FS:  00007fd874dfe6c0(0000) GS:ffff8881245bf000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30563fff CR3: 00000000709b6000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 mmdrop include/linux/sched/mm.h:55 [inline]
 mmdrop_sched include/linux/sched/mm.h:83 [inline]
 mmdrop_lazy_tlb_sched include/linux/sched/mm.h:110 [inline]
 finish_task_switch.isra.0+0x779/0xb80 kernel/sched/core.c:5172
 context_switch kernel/sched/core.c:5293 [inline]
 __schedule+0x102b/0x6000 kernel/sched/core.c:6902
 preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7086
 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12
 class_preempt_destructor include/linux/preempt.h:468 [inline]
 try_to_wake_up+0x644/0x1a80 kernel/sched/core.c:4089
 wake_up_process kernel/sched/core.c:4369 [inline]
 wake_up_q+0xa1/0x130 kernel/sched/core.c:1095
 futex_wake+0x460/0x530 kernel/futex/waitwake.c:198
 do_futex+0x32b/0x350 kernel/futex/syscalls.c:135
 __do_sys_futex kernel/futex/syscalls.c:207 [inline]
 __se_sys_futex kernel/futex/syscalls.c:188 [inline]
 __x64_sys_futex+0x34f/0x4d0 kernel/futex/syscalls.c:188
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd87579bf79
Code: Unable to access opcode bytes at 0x7fd87579bf4f.
RSP: 002b:00007fd874dfe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 00007fd875a15fa8 RCX: 00007fd87579bf79
RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd875a15fac
RBP: 00007fd875a15fa0 R08: 0000000000000001 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd875a16038 R14: 00007ffcc98c37d0 R15: 00007ffcc98c38b8
 </TASK>