Extracting prog: 56m8.477212237s
Minimizing prog: 2h28m22.853495771s
Simplifying prog options: 0s
Extracting C: 3m8.638400015s
Simplifying C: 23m47.766712262s


extracting reproducer from 24 programs
testing a last program of every proc
single: executing 4 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc-unshare$auto-read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc
detailed listing:
executing program 0:
r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare$auto(0x9)
read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NL80211_CMD_GET_REG-close_range$auto-socket-sendmsg$auto_SEG6_CMD_SETHMAC-socket-sendmsg$auto_NL80211_CMD_GET_REG-socket-sendmmsg$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0181"], 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x24000090)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000)
socket(0x6, 0x3, 0x41e4731a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-bind$auto-openat$auto_proc_gid_map_operations_base-sendmmsg$auto-mmap$auto-socketpair$auto-close_range$auto-open-socket-setsockopt$auto-connect$auto-sendmmsg$auto-sendmmsg$auto-sendmsg$auto_NL80211_CMD_DISASSOCIATE-sendfile$auto-poll$auto-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @broadcast}, 0x206a)
openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/gid_map\x00', 0x22040, 0x0)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000b00)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1)
sendfile$auto(0x1, r0, 0x0, 0x7ffff080)
poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$auto-mmap$auto-socket$nl_generic-socket$nl_generic-clone$auto-close_range$auto-socket-io_uring_enter$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-socket$nl_generic-write$auto-write$auto-ioctl$auto_SNDCTL_DSP_SETTRIGGER-socket$nl_generic-sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET-sendmsg$auto_NL80211_CMD_DISASSOCIATE
detailed listing:
executing program 0:
setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x100000000, 0x8000000000080000, 0x0, 0x0, 0xef78)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73)
io_uring_enter$auto(r0, 0x400, 0x40, 0x5, &(0x7f00000000c0)="e3fb059b3bae73eed2f1d06428c9f4fb89770ae995cb3500f778c40e1c6a8b", 0x5)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0x3, 0x0, 0x6)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x1)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 6m0s
testing program (duration=6m6s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30, 30, 21, 8, 26, 30, 40, 13, 7, 11, 18, 30, 16, 21, 26, 11, 16, 18, 30, 28, 6, 9, 3]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
read$auto(r0, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x80800, 0x0)
read$auto_tomoyo_operations_securityfs_if(r4, 0x0, 0x0)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='$'], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmmsg$auto(r5, 0x0, 0x7, 0x8)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001080), 0x40640, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sda\x00', 0x8001, 0x0)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000010c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="aaad11c93750ad97ee7839d64c42d961d2be016ca018e60469f23462b9e55708109ad04f80cc6313f4ecbeaa666f8680d0aee64c2f68bf8b0a2af7cfddd0ac87341449916700da3c73b690b36d46f1d88a523a6cc4fdfa21f673d0a48a0407f93bebd77e765b", @ANYRES32=r2], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
write$auto(r1, &(0x7f0000001140)='nl80211\x00', 0x2)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r3)
mlockall$auto(0x7)
mmap$auto(0x2, 0x40000a, 0xdb, 0x9b72, 0x2, 0x8000)
executing program 1:
socket(0x2, 0x5, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x314)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x40, 0x0)
ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000000000)=0xd7)
r0 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy18/hwsim/ps\x00', 0x828182, 0x0)
close_range$auto(0xffffffffffffffff, r0, 0x9bc)
unshare$auto(0x40000080)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x105240, 0x0)
r1 = socket(0x11, 0x80003, 0x300)
sendfile$auto(0x1, r1, 0x0, 0x8fb5)
dup2$auto(0x0, 0x3)
sysfs$auto(0x1000006, 0x1, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
ioctl$auto(0x3, 0x541b, 0x10000000000402)
open(0x0, 0x2002, 0x1)
r2 = prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0)
socket(0xa, 0x1, 0x84)
r3 = socket(0x2a, 0x2, 0xdd2a)
bpf$auto(0x0, &(0x7f00000002c0)=@bpf_attr_4={0x16, r2, 0x4, r3}, 0x11)
socket(0xa, 0x4, 0x0)
mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x2, 0xf)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000040), 0x20280, 0x0)
socket(0xa, 0x801, 0x106)
socket(0x2b, 0x1, 0x1)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x2000, 0x0)
executing program 1:
mmap$auto(0x5, 0x40009, 0x1, 0x9b72, 0x7, 0x400000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket(0x2, 0x1, 0x106)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0x27, 0x800, 0x84)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
getsockopt$auto(r1, 0x84, 0x16, 0x0, 0x0)
r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
ioctl$auto_I2C_SMBUS(r2, 0x720, 0xfffffffffffffffe)
socket(0x2, 0x6, 0x0)
sysfs$auto(0x2, 0x0, 0x0)
fsopen$auto(0x0, 0x1)
epoll_create$auto(0x4)
epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0)
connect$auto(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0xfffffffffffffffc)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mincore$auto(0x1000, 0x8001, 0x0)
r3 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r3, 0x84, 0x21, 0x0, 0x0)
open(0x0, 0x22040, 0x75)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
executing program 1:
r0 = socket(0x2, 0x80002, 0x73)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gre0\x00'})
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x3258e79c, 0x401, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x2, 0x1, 0x106)
getcwd$auto(0x0, 0xffffffffffffffff)
inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(0x4, 0x0, 0x9)
getcwd$auto(0x0, 0xffffffffffffffff)
inotify_add_watch$auto(0x4, 0x0, 0x9)
socket(0x2c, 0x80003, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 3:
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x410800, 0x0)
socket(0x2b, 0x1, 0x0)
splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
read$auto(r0, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x80800, 0x0)
read$auto_tomoyo_operations_securityfs_if(r4, &(0x7f0000000080)=""/4096, 0x1000)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4)
sendmmsg$auto(r5, 0x0, 0x7, 0x8)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001080), 0x40640, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sda\x00', 0x8001, 0x0)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000010c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="aaad11c93750ad97ee7839d64c42d961d2be016ca018e60469f23462b9e55708109ad04f80cc6313f4ecbeaa666f8680d0aee64c2f68bf8b0a2af7cfddd0ac87341449916700da3c73b690b36d46f1d88a523a6cc4fdfa21f673d0a48a0407f93bebd77e765b", @ANYRES32=r2], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
write$auto(r1, &(0x7f0000001140)='nl80211\x00', 0x2)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r3)
mlockall$auto(0x7)
mmap$auto(0x2, 0x40000a, 0xdb, 0x9b72, 0x2, 0x8000)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
close_range$auto(0x0, 0xe903, 0x2)
socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40)
r0 = socket(0x10, 0x6, 0x200000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000140)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x7, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex, 0x3, 0x40081, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1, 0x4}}, 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="08000000eec0bca86a508ecd32a31443f7054946658400da6e25e8480c9853875de3494256052f02f0e4833ade6feccdf253b05b21067b421919ab9f7460603194f918a85f30a27217bd8cf63bca54d14c7cf77db511e53b3a73da69ca8d339b9d23a2ebc8e597accbf6d514b044c13ea1be5f8b3b82ce1356342dce5f44e4b8db6a62e6f3c735848e32d52e7fbb93dcdb4224ae56ea2f945cc624eab9e65d64230e35a7c24bbc531c8e7a91992b50fdd0907d050001a054232ca5b8c3fa0421e7b9481e6b419c8df86b136df51f48e6d6a7c93e36817b479292fab095", @ANYBLOB="89f735b2b58320ea7bb8c97372ec23cc32f62c280766d0cf9f35951eb69cc220cfc81ed2cde7e5d302c69933adcab501c1d911c3003a6e7e99e788ea734f02b518e6b8a232154625964b055c4e7000be0e909eff2e723606832d1789d1f835c90ede48fe67b176c1e49ecc50e537607aed8226d1ffe2", @ANYBLOB="9bff29bd7000fbdbdf2501000000"], 0x14}}, 0x0)
connect$auto(r2, &(0x7f0000000200)=@isdn={0x22, 0x4, 0x5, 0x2, 0x4}, 0x55)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x0)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(r3, 0x0, 0x40800)
memfd_secret$auto(0x0)
executing program 3:
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/dev_snmp6/ip6tnl0\x00', 0x141000, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/250, 0xfa) (async)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/250, 0xfa)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = getpgid(0x0)
prctl$auto(0xfffffffd, 0x1, r1, 0x5, 0x0) (async)
r2 = prctl$auto(0xfffffffd, 0x1, r1, 0x5, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x121000, 0x0)
ioctl$auto_KVM_CHECK_EXTENSION(r3, 0xae03, 0xcb) (async)
ioctl$auto_KVM_CHECK_EXTENSION(r3, 0xae03, 0xcb)
futex_waitv$auto(&(0x7f0000000000)={0x7, 0x5, 0x0, 0x8}, 0x7, 0x0, &(0x7f0000000040)={0x8000000000000001, 0x7ff800}, 0x1) (async)
futex_waitv$auto(&(0x7f0000000000)={0x7, 0x5, 0x0, 0x8}, 0x7, 0x0, &(0x7f0000000040)={0x8000000000000001, 0x7ff800}, 0x1)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x40, 0x0)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bridge0/ra_honor_pio_pflag\x00', 0x42a81, 0x0)
pwrite64$auto(r4, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x2)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0xa)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
getsockopt$auto(0x6, 0x40000000029, 0x31, 0xfffffffffffffffe, 0x0)
openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_marker\x00', 0x1, 0x0) (async)
openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_marker\x00', 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6a)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8) (async)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8)
write$auto(0x3, 0x0, 0x5b0)
keyctl$auto_KEYCTL_UPDATE(0x2, 0x0, 0x0, 0x0, 0x2)
r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001000)='/dev/radio29\x00', 0x88000, 0x0)
poll$auto(&(0x7f0000001040)={r5, 0x3, 0xffff}, 0x80, 0x1)
write$auto_console_fops_tty_io(r2, &(0x7f0000000840)="898f073c86c9ebb106c9929cc4da7f85a812f8350ff9a0c0eeb848ea0d4842d851569124813ca6d448073936303ed75d36f937da3f44c331cb69e00b77abce4df9a8a7a1757fddba9007b3db52c6aba0584bc3bc19753ae686ea26f38c1aa032ac9e0c9af474838c74202913bd305b26bb4152e272c24464031f23b8ba49124d4358e57b27c13941fdbf0a4c110719059b85840d35762cea715f7cae2dd8c5c004adce5acaeeeab99e6ff35166fc947ddce5693cab4a43030e83132e23f2bbcde693be5362952282bc6ab6a2e7b156e8499edd5866f53981b197869fd90d31a872b49b33a8bd3cffb99c2594a118af25cc5ac1c348c8a7880cd3c1631f30a297978223af845fb5eecb41b912daa14f107c0a46161f4827510ecbd9d649e9b38a8be812b57d9ef42fb12fb1581cbe75124069b2399d500e2853c0ac863412131464c5fca55c62aa138d5dad5898646ed65f894fafce07cfc0597f1c74ee92a0eaeea0885ad8c7e8ae97caf82a122c2a1646a6f23f2aa142ee7f732d423ff0485f5d2a57c4631b112d654dd59cecaca3a2d5381634d683674291f26cae982b7f3e8a12f33cd60eee41693acf4be5c7b24f731397399e8e9304bd0921db0ec435546ba4870aa1439314470206c0544c858af1d3de01806427e43333d1388c7ed59a28baa4439af56a8075045e84042faba6057021445e09e2311eba9c7c6e79741ecf80f7834de49a2e8c3aed34f5a600be486320a93c55ca808529624cdaeb4b712f3d8359ec85ae3d436b3ffdc17c83c0da58b9a64dd7c96e5f5fc2e153d8a5a069fb7b5996210f1afb451130c165f04199b57a80d9337eb117066394616d01f76567c5d678bab9d589eb1be04f6e1848fce7d598547987d766dfb4067254057b6dd8cb747cd1768af6b8aa5d80164d7f5894059609274ddd9745594d48bafa9c4b7dda8cb4b33df74944cdbf7444cbd7894ece0db111f4742c902d5c6685fa5eed7fae8cad221a0824e61dde0b69eaf096bd86facde5a896336bbbc10a6699c9e2d74e06c2b9a524a43e80e240a6847120adc8dab9c6dfdcdff2b28b5ccaf0b054d4caec3248c280a1120c037903f6500338bda3ce91e8a9b29f691027b173e75207b6833e5ed787eb3bcb4afe30d3940f0c95e94f26075fd5c90a190bf224f674758c626489d7830b84f364f903fd71fa2bbfc4213ea91cedbda9306063fc88c4bc64fedf8f2149f3d0193e36b17d7e01ac7ee41e9f0bc7a062c265ca03f9a3300f9c523748a839061838d1c4e86746e4201168c48af9ca4aa23edf70932ab244553a61f9b33ada3a459ef1b1b69159259b2ca8948374977765b9bc52142eba7812a8a7d499bf8b3f25ba4088909b4004e0bfd82eef10997c51285cce54c9481aed82ea15de130de30908a76dae096f02f90b25892afb371611ec190ebfe40e8314e99fe8a8084917ae3e97530f1963c3eb0d697ac64c808ac2ed1bc8ae5861f58b435ee761a52facb960bd5dad3b65ba300836e765430bbbbc7358c9d3cbfc4fb44f2fdfbaa67d64334e0e48b7992a6796baea6b46bbf53ea80162dd6d21ccf1f2ae0da8bc6d3656daf29ed7612245ebe565a053a90fa773561df4298122adbb85056a6accdd4f32e06084e14dc3d3fceab5e92a01b70798c9f98ba96988d0426079a88ad4a5f50f5cd2ff4460d5c367bed51494786452e19dda005fb3adf7c1eb71a5624d58fd839346082a6a5c2ba14daafc205c70266bf42b2d948e0c0818cf553baaa57a065226aea9731cd321dd1f848b1262bbab533d565061684a54ecdc86bfd9c622457be4d0605dda976e5c52219ab0dd1d35d9450ba41c4d6d07e27178ba8b94cf7066a8a0f984b39fee1f7b8510448ff8d99b677a6b23f6761e3c0936cbef8d8ae7493b9fb3ff4d44eba9178f09f6be97856f16bfaad93967edfe3182ed322ec75c084bab7a66d4be2405ae957d9e90661fd5c0eb194f4a49744ca169a4fe2b31fbe33fa01b24fc1632ba516f5591722cb2193cf96c7606443849884c1a720184c28c8c2df28fa7db83fc01249ae734f092b3b88d336341e99a80cbbcb5a3b6c25823fbdc11b1dd32afa340d08f446e15f96045f8100c240e8d3a3ea0e144c995763ea3c5ef16fcd4f1282a381ac5a46fc5a990051f3c9dce177718807e3f4c3df6f0f12e0807f2c170ef19841b424d5e99ab34a022758c950f8104f9f63470695d5a94859335b88d72e7a14aa6aa9b2e4bc28f056f4e4efbbadca1669aef579cdce2a30ee8192d667818472ebff5ebc4a1f83655ae73e45cc8ff93b777b2ff08af34aeae12baf29c2ad90b9afcb37eae521ff5667429be35b3af480d7cde43c012d8357d48c68baf04a554d8510a4236ecb8579869eff0f865e70a804e0f37ef90e6674b42231030abcf0372b8612df7c36b8def0b60b073cd75aa0ecd57546a476da55764958586d47fe66c0f5eb35e35ae40ef0593d48aee35a9ab3b5b22bd47dac1c9d95ed0f70a78f027cbe3fbd12e3f382f6f599fcd1651a2d3c2ee6b997f217c904a80116135d54d2d15f6a39f1e93caf18ebcb5e9835c60bee7689b4be12cf23dcb8dd2b7365d2b011a52a496d45185c1192241c1a5413cddf44c24a280717138788b2170d9d9602d78fcaa03ef1939f47050638153549e06078617304085c996b2880a52b81b212e6755cf34e1f43f52cb5f27f97f9c51c6259183ef15fbc0efeb27c9ac552f3459510cd71d5b7a53a0a13f3daaec0ddb1fc8df94298027580a97b734dba27c7713770da7bd5fa7a512247b8afd2edd51f0a4e6298aff0e160855df1ed5787b0b27ac5dbd733f0758bea7afdefad276e88a6b3a8faf41754e5c1402a907443fa4fe3cad88d5d684d32d40e0a3084193c40b9acc67be5dbb6d2abe163422c917763dbaf7dffe4c38afb0f48b69abe2019202d1ccb9fcc2196fdca26bee648cc42cf003567d95ac2725034aef9b60f275fd0d45e3e71bd5781775d815f633ead07a57a398bce94c11779075165938e7f15adf6cc53aa1f3e14841fb6212d4716cd9ba4954e4b1db7525eb0c3f1e19d3bd151762d8be2c8e7579d38884ed99e120e6f870c1bfceb1a5002f3d39238388f695cf48a9a8b3ffff883cb9cea5b5c2333b9b15b3a43522b67c067e7b13fcdb3533efc6761556f20d55b8cc1617b5d73a784ea423957ca9f5748b321414d184c1898706f01ecf4c7584a185335ee29f274f3a95ad717b67980db84b04fa0eef4ec0f30e749d18bb3dcf165151104fd844057c6cc8c42a29ebaa788b6f8a0197732643940e61266bf19013457a113d2bc86ea261842aefaa0309756f77f5dc9a356f684c2513c56f6df1ff611ae7a6d8e39cc8f041b4165b0da787ce77e20d858ca33c450e323b0bc9a1c11087788f0e341f70d610655934bed2d6fdb04c9630d22ac122e59fc6decdb3f178def65476ffbe2f6a076e937e143793f5ca4593db1efedb4494643f4023de79ba5ea9fc5de9240eccf3ac98cc38f3f88d1d4ff80a613a42222de3e4baeb4d2f8f88cecc17fd639b4495aaf74a32602118f310965128009edf2713ab7769e55fb2fbc06901b91bda93dd0e7949a01525e0c3dd4bef7b47171929d7f1a3c0a3a57080df9d8b66623700b632fcbf614ff391db4e3f2c2935aa639652c43940f40057aa44037da29bd3a15182a12dc4b037c22474e4b41453d9dcf1346c64f95f1d77187e3a1b3e34ab16d4fae949439b31df052328399cee379558ff12d1c838669d0399ac25fbc95d34240c7e74ba79964c79335a91a037f03d8f0c2773a49a7541ec15d85a5dc22d17a07a4bed03d0fde1143ee9ca740d04125222440b958a10a9ecfd30635575a173007eb150b8b3538f139790eeb8c891d40694a079147aee5b9ff1c165e41b839707dfbf5ae0d7596eada1a2892d15c67403c2396dc406e9a5058cf1b7372170609ef6c55177992299d57f4960978863843c910d78d2dccff386799f7e2b175dcabd5ef9a820c72120837cbbd2bf5528ad160c240a15191b0aa9902679a578d9cef912fcbaadcb26146c7bc9c4062aa2c4c021cf16b266366a2107130b034ee8874e6d9c0472b2ab2172276e88db314320b3ecb5271859ed82ef54fb6d3e195bff5a8328fd7c41c3d52705311f4b3f5e6c954b787004cebf105eb75e23ff429874677eb62a7c190aec37c8af0ec9c60e532b65eab9de023217c8ba16cc663dfe45c7687e51b31c58878cfa82bd0692bbafa63c8a7af279c3db07a3a6c50d289fa1395fc95e4bea789fa73622938fa53e6837cdbd8d0dd25037650218a2485c7fcde296404ea558fcb3eb98680fb6136505c4de36e82ff0538142d2dc3285a5555630d45d466ccb69ec437f8301b86e398aaea219e5f55056a9ee4f94b8365b9abe580d57576b36310f1a40e24f79435801e2a589669f0d7d22d4d67d82dfe1be80d23a6a6f2cd847f9476cf78e521a68125e3f105ca817222b010fb2d4ea1232f952b0ab17770beac8d12f8125a2e97df1511ebc69f27c986d1a2b83d4bb1fe1afee37783c213b91e384426c7376d91f89a9d4e3b08a9991226b71e4ee4375dce24d15ae2d5510e1383af1f3b3ba9dd35744d93a46891aba5c21381f7e8664c6e0bb25b044f488c63d0e623446fdfd652ead61d26df9c12c64b580908055bdbddee383bac05e0ab364764fcc8cb04c6fd1f026a2d6d8b501e9b01bfbbd8457876684752eee9b83806719d3c094fb167a5bebd04d71c15b2709de04e4681c3c0540696dfcf9bc4ebf044b91d9c1cefccf9d80927b1c5d54db379c0bf81970eaa3f7f8a7f600ffc2a753a11e37140b4365fa11e0b33d4bfbcbcd73e7eb22a6afe5257058e73123c938a5a8bce2712a13c0490676bbc13192169459f8a8269d7cb877034dd96a34199005e9e3ef8afe5ee3a1d0bd4d2ba358a6b3eb984e6fc15f606df645d9556235ba0349d9fabf2086958fce033cc6864293d18c355e32cd159d2dda6dd7b6874cefe26252586bbee4d05c2b3495b413b39925f46d8534899672cdad648b4e8704ad642c648e5a466310e844cd3d99c390227c1f8c1b33c9ae91363a6e7856f3313c8ee333d8025040062da20ef021685f5f880abf99cebd9ab7b3bbb42f995c39face3f0197740e5ba53d0e27fb09cc0d8624076333211e4dc9b234c1e020745907c6cf041bae2dd6ef68d52e9026f15244e9257e50bcb9619a96cf6f261f09b5e80f4df7e9a490df3a93c78a3edd817a7327f43d7518cdc4d119575dcd26f762a230d43b472169f57e9a1c8cb37878b23b65db6666cf6cbddfb5db3b2c7903ea52ee1fe227a08a2971bfad07a2816d8461bb12fcaee5d25380e7407a1bb3d2710b65000e5b011c4b07ee4c97d7c93220ba0a0de526148a9f94bf93a470b7f0a4971e6860e0fc0da8201ca1901516e8192619d61053d2cf22465efdf2fb92a9a4c95d6d1240d6d19c06d61074b40170ad8d5dc702b15f671620c2525352e4a92f9c6dea3f0696cc22c965148e22295a899daf4ed081ed31cb3989c0c8e759147f71fc74d4f0e36d8d1fb9d9d697b8d57642b8e2cbc2a005b43d73de041d2caa71b95dbde6124bd233bc85671de0e87a30bec614315f06e09620a401c484fb2b417fbeb8cdff43159c6252abd2792a7ad3993e3ccd55b80b0dec7642138db23a1f05dd83127a7213d1b8f1958e797875cfb7c5d50b04cd506f4fe2189539c64aa5290978f46ed9f8939c865efb3b4c46e906655da834f87dd4c20a3c25020ce2c325a4edfd6f25", 0x1000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 0:
ioperm$auto(0x7ff, 0x1, 0x4000005)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0x2505}, 0x7fe}, 0x4, 0x1000)
r0 = socket(0x29, 0x2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r0, 0x8b0f, 0x24)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010800000000000000254500000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000895}, 0x24000004)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000810}, 0x10)
executing program 0:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r0, 0x4, r0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap$auto(0x6, 0x3, 0x0, 0x7fffffff, 0x2, 0x8000)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)
write$auto(0x3, 0x0, 0xfdef)
executing program 3:
setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x100000000, 0x8000000000080000, 0x0, 0x0, 0xef78)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73)
io_uring_enter$auto(r0, 0x400, 0x40, 0x5, &(0x7f00000000c0)="e3fb059b3bae73eed2f1d06428c9f4fb89770ae995cb3500f778c40e1c6a8b13", 0x5)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0x3, 0x0, 0x6)
write$auto(0x3, 0x0, 0x100082)
executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004300)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r1}]}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x40800)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xffffffffffffffff, 0xff)
io_uring_setup$auto(0x6, 0x0)
rseq$auto(&(0x7f00000001c0)={0x1000, 0x2, 0x9, 0x3, 0x253, 0xa848, "395d7a07f960af58e4ec8714d31e8a56d62454158f360b437ab59e4e6c7036aa6e3116a3824c5814648c9b9ae87bfafc3ecb569c19f8b3955f6b0e56d8bacc3f968936b39804c2be8e9a0424922b66de80993193204cfdef43ca7da23e2c0bcabffa67f818a057ca69d755f38a1b6840beb7e28dcdf86b15dfe2c28479d7c12a9ff521abef461105bddda54065889959780f635443a8"}, 0x6, 0xff, 0x1)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x1)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/031/001\x00', 0x40400, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x100000001, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
open(0x0, 0xa240, 0x15e)
open(0x0, 0x161342, 0x100)
executing program 2:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0)
mmap$auto(0xfeffffff, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x149443, 0x14)
fcntl$auto(r1, 0x409, 0x40003f)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/192, 0xc0)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567)
unshare$auto(0x40000080)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
acct$auto(0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x2, 0x0)
migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
mprotect$auto(0x0, 0x806121, 0x6)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0)
r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$auto_TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)=0x4)
sendfile$auto(r3, r3, 0x0, 0x5)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x6d2fc1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0)
executing program 0:
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x16f802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x10, 0x2, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
r4 = socket(0xa, 0x2, 0x3a)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
socket(0x2, 0x1, 0x106)
setsockopt$auto(r4, 0x29, 0x32, 0x0, 0x113)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)={0x28, r2, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef)
executing program 2:
r0 = socket(0x2, 0x80002, 0x73)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gre0\x00'})
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x3258e79c, 0x401, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x2, 0x1, 0x106)
getcwd$auto(0x0, 0xffffffffffffffff)
inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(0x4, 0x0, 0x9)
getcwd$auto(0x0, 0xffffffffffffffff)
inotify_add_watch$auto(0x4, 0x0, 0x9)
socket(0x2c, 0x80003, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
read$auto(r0, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x80800, 0x0)
read$auto_tomoyo_operations_securityfs_if(r4, &(0x7f0000000080)=""/4096, 0x1000)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4)
sendmmsg$auto(r5, 0x0, 0x7, 0x8)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001080), 0x40640, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sda\x00', 0x8001, 0x0)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000010c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="aaad11c93750ad97ee7839d64c42d961d2be016ca018e60469f23462b9e55708109ad04f80cc6313f4ecbeaa666f8680d0aee64c2f68bf8b0a2af7cfddd0ac87341449916700da3c73b690b36d46f1d88a523a6cc4fdfa21f673d0a48a0407f93bebd77e765b", @ANYRES32=r2], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
write$auto(r1, &(0x7f0000001140)='nl80211\x00', 0x2)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r3)
mlockall$auto(0x7)
mmap$auto(0x2, 0x40000a, 0xdb, 0x9b72, 0x2, 0x8000)
executing program 0:
mmap$auto(0x0, 0x5, 0xdf, 0x9255, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r1 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x400, 0x0)
openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x577100, 0x0)
read$auto(r1, 0x0, 0x9)
ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
adjtimex$auto(0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0xfdfdffff)
executing program 1:
setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x100000000, 0x8000000000080000, 0x0, 0x0, 0xef78)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73)
io_uring_enter$auto(r0, 0x400, 0x40, 0x5, &(0x7f00000000c0)="e3fb059b3bae73eed2f1d06428c9f4fb89770ae995cb3500f778c40e1c6a8b", 0x5)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0x3, 0x0, 0x6)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x1)
executing program 3:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @broadcast}, 0x206a)
openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/gid_map\x00', 0x22040, 0x0)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000b00)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1)
sendfile$auto(0x1, r0, 0x0, 0x7ffff080)
poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400)
write$auto(0x3, 0x0, 0xfffffdef)
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x4000, 0x0)
write$auto_fuse_dev_operations_fuse_i(r4, 0x0, 0x0)
r5 = set_tid_address$auto(&(0x7f0000000100)=0x34e)
prlimit64$auto(r5, 0x101, &(0x7f0000000140)={0xfff, 0x55b}, &(0x7f0000000180)={0x8, 0xfffffffffffffff7})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1c, 0x0)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000080)={0x24, r1, 0x403, 0x70bd26, 0x25dfdbf9, {}, [@HWSIM_ATTR_FRAME={0x4}, @HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "197588149b0c"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
socket(0x1, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x5, 0x0)
mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e')
r5 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95)
close_range$auto(0x2, 0x8, 0x0)
acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00')
socket(0x2, 0x3, 0x100)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h', @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100", @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4)
ioctl$auto_I2C_RDWR(r5, 0x707, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000003f9d0338994b331a3a7a5e901d7d78663c02c5e3023029671e6cf5612e7811ba35f84e09c7bf98fb8168ebf2f37c61849e07aae4cba3950fd000e8dca8b3e0a754eeb94d69c8bd8a0997861bd6afe1d9e3a2aef684d9db5d37d2c61c56634b912352c07e9d11b6509036812b6e953c9cf6d9f423b67d1d41684aa5a93ad72fd9a685fe8b217b5ef15698bbccc23693c4f23a4dfabbb4e6f572979b22", @ANYRES16=r6, @ANYBLOB="010023bd7000fadbdf2501000000040007800c000200050000000000000008000100232e0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000010)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x18}, 0x1)
close_range$auto(0x2, 0xa, 0x0)
executing program 2:
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0181"], 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x24000090)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000)
socket(0x6, 0x3, 0x41e4731a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 0:
r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare$auto(0x9)
read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x0)

program crashed: INFO: task hung in jbd2_journal_commit_transaction
bisect: bisecting 24 programs
bisect: split chunks (needed=false): <24>
bisect: split chunk #0 of len 24 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=6m4s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 7, 11, 18, 30, 16, 21, 26, 11, 16, 18, 30, 28, 6, 9, 3]
detailed listing:
executing program 0:
ioperm$auto(0x7ff, 0x1, 0x4000005)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0x2505}, 0x7fe}, 0x4, 0x1000)
r0 = socket(0x29, 0x2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r0, 0x8b0f, 0x24)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010800000000000000254500000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000895}, 0x24000004)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000810}, 0x10)
executing program 0:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r0, 0x4, r0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap$auto(0x6, 0x3, 0x0, 0x7fffffff, 0x2, 0x8000)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)
write$auto(0x3, 0x0, 0xfdef)
executing program 3:
setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x100000000, 0x8000000000080000, 0x0, 0x0, 0xef78)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73)
io_uring_enter$auto(r0, 0x400, 0x40, 0x5, &(0x7f00000000c0)="e3fb059b3bae73eed2f1d06428c9f4fb89770ae995cb3500f778c40e1c6a8b13", 0x5)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0x3, 0x0, 0x6)
write$auto(0x3, 0x0, 0x100082)
executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004300)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r1}]}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x40800)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xffffffffffffffff, 0xff)
io_uring_setup$auto(0x6, 0x0)
rseq$auto(&(0x7f00000001c0)={0x1000, 0x2, 0x9, 0x3, 0x253, 0xa848, "395d7a07f960af58e4ec8714d31e8a56d62454158f360b437ab59e4e6c7036aa6e3116a3824c5814648c9b9ae87bfafc3ecb569c19f8b3955f6b0e56d8bacc3f968936b39804c2be8e9a0424922b66de80993193204cfdef43ca7da23e2c0bcabffa67f818a057ca69d755f38a1b6840beb7e28dcdf86b15dfe2c28479d7c12a9ff521abef461105bddda54065889959780f635443a8"}, 0x6, 0xff, 0x1)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x1)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/031/001\x00', 0x40400, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x100000001, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
open(0x0, 0xa240, 0x15e)
open(0x0, 0x161342, 0x100)
executing program 2:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0)
mmap$auto(0xfeffffff, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x149443, 0x14)
fcntl$auto(r1, 0x409, 0x40003f)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/192, 0xc0)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567)
unshare$auto(0x40000080)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
acct$auto(0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x2, 0x0)
migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
mprotect$auto(0x0, 0x806121, 0x6)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0)
r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$auto_TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)=0x4)
sendfile$auto(r3, r3, 0x0, 0x5)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x6d2fc1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0)
executing program 0:
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x16f802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x10, 0x2, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
r4 = socket(0xa, 0x2, 0x3a)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
socket(0x2, 0x1, 0x106)
setsockopt$auto(r4, 0x29, 0x32, 0x0, 0x113)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)={0x28, r2, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef)
executing program 2:
r0 = socket(0x2, 0x80002, 0x73)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gre0\x00'})
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x3258e79c, 0x401, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x2, 0x1, 0x106)
getcwd$auto(0x0, 0xffffffffffffffff)
inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(0x4, 0x0, 0x9)
getcwd$auto(0x0, 0xffffffffffffffff)
inotify_add_watch$auto(0x4, 0x0, 0x9)
socket(0x2c, 0x80003, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
read$auto(r0, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x80800, 0x0)
read$auto_tomoyo_operations_securityfs_if(r4, &(0x7f0000000080)=""/4096, 0x1000)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4)
sendmmsg$auto(r5, 0x0, 0x7, 0x8)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001080), 0x40640, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sda\x00', 0x8001, 0x0)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000010c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="aaad11c93750ad97ee7839d64c42d961d2be016ca018e60469f23462b9e55708109ad04f80cc6313f4ecbeaa666f8680d0aee64c2f68bf8b0a2af7cfddd0ac87341449916700da3c73b690b36d46f1d88a523a6cc4fdfa21f673d0a48a0407f93bebd77e765b", @ANYRES32=r2], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
write$auto(r1, &(0x7f0000001140)='nl80211\x00', 0x2)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r3)
mlockall$auto(0x7)
mmap$auto(0x2, 0x40000a, 0xdb, 0x9b72, 0x2, 0x8000)
executing program 0:
mmap$auto(0x0, 0x5, 0xdf, 0x9255, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r1 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x400, 0x0)
openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x577100, 0x0)
read$auto(r1, 0x0, 0x9)
ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
adjtimex$auto(0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0xfdfdffff)
executing program 1:
setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x100000000, 0x8000000000080000, 0x0, 0x0, 0xef78)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73)
io_uring_enter$auto(r0, 0x400, 0x40, 0x5, &(0x7f00000000c0)="e3fb059b3bae73eed2f1d06428c9f4fb89770ae995cb3500f778c40e1c6a8b", 0x5)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0x3, 0x0, 0x6)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x1)
executing program 3:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @broadcast}, 0x206a)
openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/gid_map\x00', 0x22040, 0x0)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000b00)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1)
sendfile$auto(0x1, r0, 0x0, 0x7ffff080)
poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400)
write$auto(0x3, 0x0, 0xfffffdef)
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x4000, 0x0)
write$auto_fuse_dev_operations_fuse_i(r4, 0x0, 0x0)
r5 = set_tid_address$auto(&(0x7f0000000100)=0x34e)
prlimit64$auto(r5, 0x101, &(0x7f0000000140)={0xfff, 0x55b}, &(0x7f0000000180)={0x8, 0xfffffffffffffff7})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1c, 0x0)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000080)={0x24, r1, 0x403, 0x70bd26, 0x25dfdbf9, {}, [@HWSIM_ATTR_FRAME={0x4}, @HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "197588149b0c"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
socket(0x1, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x5, 0x0)
mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e')
r5 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95)
close_range$auto(0x2, 0x8, 0x0)
acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00')
socket(0x2, 0x3, 0x100)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h', @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100", @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4)
ioctl$auto_I2C_RDWR(r5, 0x707, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000003f9d0338994b331a3a7a5e901d7d78663c02c5e3023029671e6cf5612e7811ba35f84e09c7bf98fb8168ebf2f37c61849e07aae4cba3950fd000e8dca8b3e0a754eeb94d69c8bd8a0997861bd6afe1d9e3a2aef684d9db5d37d2c61c56634b912352c07e9d11b6509036812b6e953c9cf6d9f423b67d1d41684aa5a93ad72fd9a685fe8b217b5ef15698bbccc23693c4f23a4dfabbb4e6f572979b22", @ANYRES16=r6, @ANYBLOB="010023bd7000fadbdf2501000000040007800c000200050000000000000008000100232e0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000010)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x18}, 0x1)
close_range$auto(0x2, 0xa, 0x0)
executing program 2:
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0181"], 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x24000090)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000)
socket(0x6, 0x3, 0x41e4731a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 0:
r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare$auto(0x9)
read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x0)

program crashed: INFO: task hung in do_get_write_access
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 16, 18, 30, 28, 6, 9, 3]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x5, 0xdf, 0x9255, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r1 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x400, 0x0)
openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x577100, 0x0)
read$auto(r1, 0x0, 0x9)
ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
adjtimex$auto(0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0xfdfdffff)
executing program 1:
setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x100000000, 0x8000000000080000, 0x0, 0x0, 0xef78)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73)
io_uring_enter$auto(r0, 0x400, 0x40, 0x5, &(0x7f00000000c0)="e3fb059b3bae73eed2f1d06428c9f4fb89770ae995cb3500f778c40e1c6a8b", 0x5)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0x3, 0x0, 0x6)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x1)
executing program 3:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @broadcast}, 0x206a)
openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/gid_map\x00', 0x22040, 0x0)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000b00)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1)
sendfile$auto(0x1, r0, 0x0, 0x7ffff080)
poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400)
write$auto(0x3, 0x0, 0xfffffdef)
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x4000, 0x0)
write$auto_fuse_dev_operations_fuse_i(r4, 0x0, 0x0)
r5 = set_tid_address$auto(&(0x7f0000000100)=0x34e)
prlimit64$auto(r5, 0x101, &(0x7f0000000140)={0xfff, 0x55b}, &(0x7f0000000180)={0x8, 0xfffffffffffffff7})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1c, 0x0)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000080)={0x24, r1, 0x403, 0x70bd26, 0x25dfdbf9, {}, [@HWSIM_ATTR_FRAME={0x4}, @HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "197588149b0c"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
socket(0x1, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x5, 0x0)
mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e')
r5 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95)
close_range$auto(0x2, 0x8, 0x0)
acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00')
socket(0x2, 0x3, 0x100)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h', @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100", @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4)
ioctl$auto_I2C_RDWR(r5, 0x707, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000003f9d0338994b331a3a7a5e901d7d78663c02c5e3023029671e6cf5612e7811ba35f84e09c7bf98fb8168ebf2f37c61849e07aae4cba3950fd000e8dca8b3e0a754eeb94d69c8bd8a0997861bd6afe1d9e3a2aef684d9db5d37d2c61c56634b912352c07e9d11b6509036812b6e953c9cf6d9f423b67d1d41684aa5a93ad72fd9a685fe8b217b5ef15698bbccc23693c4f23a4dfabbb4e6f572979b22", @ANYRES16=r6, @ANYBLOB="010023bd7000fadbdf2501000000040007800c000200050000000000000008000100232e0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000010)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x18}, 0x1)
close_range$auto(0x2, 0xa, 0x0)
executing program 2:
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0181"], 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x24000090)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000)
socket(0x6, 0x3, 0x41e4731a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 0:
r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare$auto(0x9)
read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x0)

program crashed: INFO: task hung in __ext4_find_entry
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
bisect: split chunks (needed=true): <8>
bisect: split chunk #0 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 6, 9, 3]
detailed listing:
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000080)={0x24, r1, 0x403, 0x70bd26, 0x25dfdbf9, {}, [@HWSIM_ATTR_FRAME={0x4}, @HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "197588149b0c"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
socket(0x1, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x5, 0x0)
mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e')
r5 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95)
close_range$auto(0x2, 0x8, 0x0)
acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00')
socket(0x2, 0x3, 0x100)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h', @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100", @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4)
ioctl$auto_I2C_RDWR(r5, 0x707, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000003f9d0338994b331a3a7a5e901d7d78663c02c5e3023029671e6cf5612e7811ba35f84e09c7bf98fb8168ebf2f37c61849e07aae4cba3950fd000e8dca8b3e0a754eeb94d69c8bd8a0997861bd6afe1d9e3a2aef684d9db5d37d2c61c56634b912352c07e9d11b6509036812b6e953c9cf6d9f423b67d1d41684aa5a93ad72fd9a685fe8b217b5ef15698bbccc23693c4f23a4dfabbb4e6f572979b22", @ANYRES16=r6, @ANYBLOB="010023bd7000fadbdf2501000000040007800c000200050000000000000008000100232e0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000010)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x18}, 0x1)
close_range$auto(0x2, 0xa, 0x0)
executing program 2:
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0181"], 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x24000090)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000)
socket(0x6, 0x3, 0x41e4731a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 0:
r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare$auto(0x9)
read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 16, 18, 30]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x5, 0xdf, 0x9255, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r1 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x400, 0x0)
openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x577100, 0x0)
read$auto(r1, 0x0, 0x9)
ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
adjtimex$auto(0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0xfdfdffff)
executing program 1:
setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x100000000, 0x8000000000080000, 0x0, 0x0, 0xef78)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73)
io_uring_enter$auto(r0, 0x400, 0x40, 0x5, &(0x7f00000000c0)="e3fb059b3bae73eed2f1d06428c9f4fb89770ae995cb3500f778c40e1c6a8b", 0x5)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0x3, 0x0, 0x6)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x1)
executing program 3:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @broadcast}, 0x206a)
openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/gid_map\x00', 0x22040, 0x0)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000b00)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1)
sendfile$auto(0x1, r0, 0x0, 0x7ffff080)
poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400)
write$auto(0x3, 0x0, 0xfffffdef)
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x4000, 0x0)
write$auto_fuse_dev_operations_fuse_i(r4, 0x0, 0x0)
r5 = set_tid_address$auto(&(0x7f0000000100)=0x34e)
prlimit64$auto(r5, 0x101, &(0x7f0000000140)={0xfff, 0x55b}, &(0x7f0000000180)={0x8, 0xfffffffffffffff7})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1c, 0x0)

program crashed: INFO: task hung in jbd2_journal_commit_transaction
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <4>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 30]
detailed listing:
executing program 3:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @broadcast}, 0x206a)
openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/gid_map\x00', 0x22040, 0x0)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000b00)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1)
sendfile$auto(0x1, r0, 0x0, 0x7ffff080)
poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400)
write$auto(0x3, 0x0, 0xfffffdef)
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x4000, 0x0)
write$auto_fuse_dev_operations_fuse_i(r4, 0x0, 0x0)
r5 = set_tid_address$auto(&(0x7f0000000100)=0x34e)
prlimit64$auto(r5, 0x101, &(0x7f0000000140)={0xfff, 0x55b}, &(0x7f0000000180)={0x8, 0xfffffffffffffff7})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1c, 0x0)

program crashed: INFO: task hung in do_get_write_access
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid-openat$auto_ctl_device_fops_user-io_uring_register$auto_IORING_REGISTER_BUFFERS-prctl$auto-openat$auto_proc_reg_file_ops_compat_inode-ioctl$IOCTL_GET_NCIDEV_IDX-bind$auto-connect$auto-openat$auto_fuse_dev_operations_fuse_i-write$auto_fuse_dev_operations_fuse_i-set_tid_address$auto-prlimit64$auto-recvmmsg$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x4000, 0x0)
write$auto_fuse_dev_operations_fuse_i(r4, 0x0, 0x0)
r5 = set_tid_address$auto(&(0x7f0000000100)=0x34e)
prlimit64$auto(r5, 0x101, &(0x7f0000000140)={0xfff, 0x55b}, &(0x7f0000000180)={0x8, 0xfffffffffffffff7})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1c, 0x0)

program crashed: INFO: task hung in do_get_write_access
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 1 programs left: 

executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x4000, 0x0)
write$auto_fuse_dev_operations_fuse_i(r4, 0x0, 0x0)
r5 = set_tid_address$auto(&(0x7f0000000100)=0x34e)
prlimit64$auto(r5, 0x101, &(0x7f0000000140)={0xfff, 0x55b}, &(0x7f0000000180)={0x8, 0xfffffffffffffff7})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1c, 0x0)


bisect: trying to concatenate
bisect: concatenate 1 entries
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid-openat$auto_ctl_device_fops_user-io_uring_register$auto_IORING_REGISTER_BUFFERS-prctl$auto-openat$auto_proc_reg_file_ops_compat_inode-ioctl$IOCTL_GET_NCIDEV_IDX-bind$auto-connect$auto-openat$auto_fuse_dev_operations_fuse_i-write$auto_fuse_dev_operations_fuse_i-set_tid_address$auto-prlimit64$auto-recvmmsg$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x4000, 0x0)
write$auto_fuse_dev_operations_fuse_i(r4, 0x0, 0x0)
r5 = set_tid_address$auto(&(0x7f0000000100)=0x34e)
prlimit64$auto(r5, 0x101, &(0x7f0000000140)={0xfff, 0x55b}, &(0x7f0000000180)={0x8, 0xfffffffffffffff7})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1c, 0x0)

program crashed: INFO: task hung in do_get_write_access
bisect: concatenation succeeded
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid-openat$auto_ctl_device_fops_user-io_uring_register$auto_IORING_REGISTER_BUFFERS-prctl$auto-openat$auto_proc_reg_file_ops_compat_inode-ioctl$IOCTL_GET_NCIDEV_IDX-bind$auto-connect$auto-openat$auto_fuse_dev_operations_fuse_i-write$auto_fuse_dev_operations_fuse_i-set_tid_address$auto-prlimit64$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x4000, 0x0)
write$auto_fuse_dev_operations_fuse_i(r4, 0x0, 0x0)
r5 = set_tid_address$auto(&(0x7f0000000100)=0x34e)
prlimit64$auto(r5, 0x101, &(0x7f0000000140)={0xfff, 0x55b}, &(0x7f0000000180)={0x8, 0xfffffffffffffff7})

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid-openat$auto_ctl_device_fops_user-io_uring_register$auto_IORING_REGISTER_BUFFERS-prctl$auto-openat$auto_proc_reg_file_ops_compat_inode-ioctl$IOCTL_GET_NCIDEV_IDX-bind$auto-connect$auto-openat$auto_fuse_dev_operations_fuse_i-write$auto_fuse_dev_operations_fuse_i-set_tid_address$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x4000, 0x0)
write$auto_fuse_dev_operations_fuse_i(r4, 0x0, 0x0)
set_tid_address$auto(&(0x7f0000000100)=0x34e)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid-openat$auto_ctl_device_fops_user-io_uring_register$auto_IORING_REGISTER_BUFFERS-prctl$auto-openat$auto_proc_reg_file_ops_compat_inode-ioctl$IOCTL_GET_NCIDEV_IDX-bind$auto-connect$auto-openat$auto_fuse_dev_operations_fuse_i-write$auto_fuse_dev_operations_fuse_i
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x4000, 0x0)
write$auto_fuse_dev_operations_fuse_i(r4, 0x0, 0x0)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid-openat$auto_ctl_device_fops_user-io_uring_register$auto_IORING_REGISTER_BUFFERS-prctl$auto-openat$auto_proc_reg_file_ops_compat_inode-ioctl$IOCTL_GET_NCIDEV_IDX-bind$auto-connect$auto-openat$auto_fuse_dev_operations_fuse_i
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x4000, 0x0)

program crashed: INFO: task hung in jbd2_journal_commit_transaction
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid-openat$auto_ctl_device_fops_user-io_uring_register$auto_IORING_REGISTER_BUFFERS-prctl$auto-openat$auto_proc_reg_file_ops_compat_inode-ioctl$IOCTL_GET_NCIDEV_IDX-bind$auto-connect$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid-openat$auto_ctl_device_fops_user-io_uring_register$auto_IORING_REGISTER_BUFFERS-prctl$auto-openat$auto_proc_reg_file_ops_compat_inode-ioctl$IOCTL_GET_NCIDEV_IDX-bind$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, r3, 0x1, 0x1}, 0x1000)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid-openat$auto_ctl_device_fops_user-io_uring_register$auto_IORING_REGISTER_BUFFERS-prctl$auto-openat$auto_proc_reg_file_ops_compat_inode-ioctl$IOCTL_GET_NCIDEV_IDX
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040))

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid-openat$auto_ctl_device_fops_user-io_uring_register$auto_IORING_REGISTER_BUFFERS-prctl$auto-openat$auto_proc_reg_file_ops_compat_inode
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid-openat$auto_ctl_device_fops_user-io_uring_register$auto_IORING_REGISTER_BUFFERS-prctl$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid-openat$auto_ctl_device_fops_user-io_uring_register$auto_IORING_REGISTER_BUFFERS
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)
io_uring_register$auto_IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240), 0x8001)

program crashed: INFO: task hung in jbd2_journal_commit_transaction
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid-openat$auto_ctl_device_fops_user
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()
openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2-getpid
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)
getpid()

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto-ioctl$auto_SNDRV_PCM_IOCTL_XRUN2
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)
ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-connect$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0xb)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket-setsockopt$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto-socket
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace-mmap$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

program crashed: INFO: task hung in jbd2_journal_commit_transaction
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket-openat$auto_proc_mountinfo_operations_mnt_namespace
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x20000, 0x0)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic-socket
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)

program crashed: INFO: task hung in jbd2_journal_commit_transaction
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto-socket$nl_generic
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)

program did not crash
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)

program did not crash
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-socketpair$auto-write$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x2}, 0x3)

program did not crash
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)

program crashed: INFO: task hung in jbd2_journal_commit_transaction
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-close_range$auto-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_OVS_VPORT_CMD_NEW-openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)

program crashed: INFO: task hung in jbd2_journal_commit_transaction
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)

program crashed: INFO: task hung in do_get_write_access
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)

program did not crash
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)

program did not crash
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140), 0x0)
writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x3)

program did not crash
testing program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r0, 0x0, 0x3)

program did not crash
extracting C reproducer
testing compiled C program (duration=7m4.806908704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: INFO: task hung in do_get_write_access
simplifying C reproducer
testing compiled C program (duration=7m4.806908704s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: INFO: task hung in do_get_write_access
testing compiled C program (duration=7m4.806908704s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: INFO: task hung in do_get_write_access
testing compiled C program (duration=7m4.806908704s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: INFO: task hung in jbd2_journal_commit_transaction
testing compiled C program (duration=7m4.806908704s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: INFO: task hung in jbd2_journal_commit_transaction
testing compiled C program (duration=7m4.806908704s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: INFO: task hung in do_get_write_access
testing compiled C program (duration=7m4.806908704s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: INFO: task hung in do_get_write_access
testing compiled C program (duration=7m4.806908704s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_reg_file_ops_compat_inode-write$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: INFO: task hung in do_get_write_access
reproducing took 3h51m27.735836475s
repro crashed as (corrupted=false):
INFO: task kworker/u8:5:984 blocked for more than 143 seconds.
      Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:5    state:D stack:24904 pid:984   tgid:984   ppid:2      task_flags:0x4248060 flags:0x00004000
Workqueue: writeback wb_workfn (flush-8:0)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x116f/0x5de0 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6860
 io_schedule+0xbf/0x130 kernel/sched/core.c:7742
 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247
 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49
 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64
 wait_on_bit_io include/linux/wait_bit.h:105 [inline]
 do_get_write_access+0x93d/0x12a0 fs/jbd2/transaction.c:1092
 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241
 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241
 ext4_reserve_inode_write+0x1be/0x320 fs/ext4/inode.c:5892
 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6066
 __ext4_ext_dirty+0x1ae/0x230 fs/ext4/extents.c:207
 ext4_ext_insert_extent+0x19bb/0x4610 fs/ext4/extents.c:2190
 ext4_ext_map_blocks+0x205b/0x5d60 fs/ext4/extents.c:4400
 ext4_map_create_blocks fs/ext4/inode.c:520 [inline]
 ext4_map_blocks+0x45b/0x1390 fs/ext4/inode.c:706
 mpage_map_one_extent fs/ext4/inode.c:2224 [inline]
 mpage_map_and_submit_extent fs/ext4/inode.c:2277 [inline]
 ext4_do_writepages+0x1a2c/0x3490 fs/ext4/inode.c:2739
 ext4_writepages+0x37a/0x7d0 fs/ext4/inode.c:2829
 do_writepages+0x1b2/0x820 mm/page-writeback.c:2656
 __writeback_single_inode+0x160/0xfb0 fs/fs-writeback.c:1680
 writeback_sb_inodes+0x601/0xf90 fs/fs-writeback.c:1976
 __writeback_inodes_wb+0xf8/0x2d0 fs/fs-writeback.c:2047
 wb_writeback+0x7f3/0xb70 fs/fs-writeback.c:2158
 wb_check_old_data_flush fs/fs-writeback.c:2262 [inline]
 wb_do_writeback fs/fs-writeback.c:2315 [inline]
 wb_workfn+0x8ca/0xbe0 fs/fs-writeback.c:2343
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task jbd2/sda1-8:5174 blocked for more than 144 seconds.
      Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jbd2/sda1-8     state:D stack:27112 pid:5174  tgid:5174  ppid:2      task_flags:0x240040 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x116f/0x5de0 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6860
 io_schedule+0xbf/0x130 kernel/sched/core.c:7742
 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247
 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49
 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64
 wait_on_bit_io include/linux/wait_bit.h:105 [inline]
 __wait_on_buffer+0x64/0x70 fs/buffer.c:123
 wait_on_buffer include/linux/buffer_head.h:413 [inline]
 jbd2_journal_commit_transaction+0x382e/0x6830 fs/jbd2/commit.c:808
 kjournald2+0x1f4/0x760 fs/jbd2/journal.c:201
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8e3c1440 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e3c1440 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8e3c1440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6764
6 locks held by kworker/u8:5/984:
 #0: ffff888143acf948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc90003bafd18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffff8880345260e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 fs/super.c:562
 #3: ffff888034310b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 mm/page-writeback.c:2656
 #4: ffff888034312950 (jbd2_handle){.+.+}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444
 #5: ffff88807ceee5d8 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390 fs/ext4/inode.c:705
2 locks held by getty/5594:
 #0: ffff88803220e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 drivers/tty/n_tty.c:2222
2 locks held by syz-executor110/5857:
5 locks held by syz-executor110/26397:
 #0: ffff8880b8439f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:605
 #1: ffff8880b8423c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 kernel/sched/psi.c:987
 #2: ffff8880b8423c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0x1a2/0x2d0 kernel/sched/psi.c:912
 #3: ffffffff9aded228 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 lib/debugobjects.c:818
 #4: ffff88807c7ad4f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: spin_lock include/linux/spinlock.h:351 [inline]
 #4: ffff88807c7ad4f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0xf0/0x2f0 mm/pgtable-generic.c:402

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:274 [inline]
 watchdog+0xf70/0x12c0 kernel/hung_task.c:437
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 26412 Comm: syz-executor110 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:121 [inline]
RIP: 0010:lock_acquire kernel/locking/lockdep.c:5842 [inline]
RIP: 0010:lock_acquire+0x111/0x350 kernel/locking/lockdep.c:5823
Code: 74 94 ff e9 45 ff ff ff 48 8b 74 24 68 48 89 df e8 e4 5a 87 00 8b 0d 82 0c ef 0e 85 c9 0f 84 b1 00 00 00 65 8b 05 67 c5 0e 12 <85> c0 0f 85 a2 00 00 00 65 48 8b 05 e7 87 0e 12 8b 90 ec 0a 00 00
RSP: 0018:ffffc9000dd47580 EFLAGS: 00000202
RAX: 0000000000000000 RBX: ffffffff8e3c1440 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff816999f1 RDI: fffffbfff1c78288
RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 00000000000114a4 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881249bd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f09242260f0 CR3: 000000006c8e0000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 rcu_read_lock include/linux/rcupdate.h:841 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1155 [inline]
 unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479
 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2398 [inline]
 slab_free mm/slub.c:4656 [inline]
 kmem_cache_free+0x2d4/0x4d0 mm/slub.c:4758
 anon_vma_chain_free mm/rmap.c:147 [inline]
 unlink_anon_vmas+0x458/0x820 mm/rmap.c:447
 free_pgtables+0x2d4/0x810 mm/memory.c:391
 exit_mmap+0x3fb/0xb90 mm/mmap.c:1295
 __mmput+0x12a/0x410 kernel/fork.c:1379
 mmput+0x62/0x70 kernel/fork.c:1401
 exit_mm kernel/exit.c:589 [inline]
 do_exit+0x9d1/0x2c30 kernel/exit.c:940
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1102
 __do_sys_exit_group kernel/exit.c:1113 [inline]
 __se_sys_exit_group kernel/exit.c:1111 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1111
 x64_sys_call+0x1530/0x1730 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x230 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f09241aabc9
Code: Unable to access opcode bytes at 0x7f09241aab9f.
RSP: 002b:00007ffcb4dbe258 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f09241aabc9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f0924225290 R08: ffffffffffffffb8 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000246 R12: 00007f0924225290
R13: 0000000000000000 R14: 00007f0924225ce0 R15: 00007f092417be20
 </TASK>
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.682 msecs

final repro crashed as (corrupted=false):
INFO: task kworker/u8:5:984 blocked for more than 143 seconds.
      Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:5    state:D stack:24904 pid:984   tgid:984   ppid:2      task_flags:0x4248060 flags:0x00004000
Workqueue: writeback wb_workfn (flush-8:0)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x116f/0x5de0 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6860
 io_schedule+0xbf/0x130 kernel/sched/core.c:7742
 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247
 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49
 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64
 wait_on_bit_io include/linux/wait_bit.h:105 [inline]
 do_get_write_access+0x93d/0x12a0 fs/jbd2/transaction.c:1092
 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241
 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241
 ext4_reserve_inode_write+0x1be/0x320 fs/ext4/inode.c:5892
 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6066
 __ext4_ext_dirty+0x1ae/0x230 fs/ext4/extents.c:207
 ext4_ext_insert_extent+0x19bb/0x4610 fs/ext4/extents.c:2190
 ext4_ext_map_blocks+0x205b/0x5d60 fs/ext4/extents.c:4400
 ext4_map_create_blocks fs/ext4/inode.c:520 [inline]
 ext4_map_blocks+0x45b/0x1390 fs/ext4/inode.c:706
 mpage_map_one_extent fs/ext4/inode.c:2224 [inline]
 mpage_map_and_submit_extent fs/ext4/inode.c:2277 [inline]
 ext4_do_writepages+0x1a2c/0x3490 fs/ext4/inode.c:2739
 ext4_writepages+0x37a/0x7d0 fs/ext4/inode.c:2829
 do_writepages+0x1b2/0x820 mm/page-writeback.c:2656
 __writeback_single_inode+0x160/0xfb0 fs/fs-writeback.c:1680
 writeback_sb_inodes+0x601/0xf90 fs/fs-writeback.c:1976
 __writeback_inodes_wb+0xf8/0x2d0 fs/fs-writeback.c:2047
 wb_writeback+0x7f3/0xb70 fs/fs-writeback.c:2158
 wb_check_old_data_flush fs/fs-writeback.c:2262 [inline]
 wb_do_writeback fs/fs-writeback.c:2315 [inline]
 wb_workfn+0x8ca/0xbe0 fs/fs-writeback.c:2343
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task jbd2/sda1-8:5174 blocked for more than 144 seconds.
      Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jbd2/sda1-8     state:D stack:27112 pid:5174  tgid:5174  ppid:2      task_flags:0x240040 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x116f/0x5de0 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6860
 io_schedule+0xbf/0x130 kernel/sched/core.c:7742
 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247
 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49
 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64
 wait_on_bit_io include/linux/wait_bit.h:105 [inline]
 __wait_on_buffer+0x64/0x70 fs/buffer.c:123
 wait_on_buffer include/linux/buffer_head.h:413 [inline]
 jbd2_journal_commit_transaction+0x382e/0x6830 fs/jbd2/commit.c:808
 kjournald2+0x1f4/0x760 fs/jbd2/journal.c:201
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8e3c1440 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e3c1440 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8e3c1440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6764
6 locks held by kworker/u8:5/984:
 #0: ffff888143acf948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc90003bafd18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffff8880345260e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 fs/super.c:562
 #3: ffff888034310b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 mm/page-writeback.c:2656
 #4: ffff888034312950 (jbd2_handle){.+.+}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444
 #5: ffff88807ceee5d8 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390 fs/ext4/inode.c:705
2 locks held by getty/5594:
 #0: ffff88803220e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 drivers/tty/n_tty.c:2222
2 locks held by syz-executor110/5857:
5 locks held by syz-executor110/26397:
 #0: ffff8880b8439f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:605
 #1: ffff8880b8423c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 kernel/sched/psi.c:987
 #2: ffff8880b8423c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0x1a2/0x2d0 kernel/sched/psi.c:912
 #3: ffffffff9aded228 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 lib/debugobjects.c:818
 #4: ffff88807c7ad4f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: spin_lock include/linux/spinlock.h:351 [inline]
 #4: ffff88807c7ad4f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0xf0/0x2f0 mm/pgtable-generic.c:402

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:274 [inline]
 watchdog+0xf70/0x12c0 kernel/hung_task.c:437
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 26412 Comm: syz-executor110 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:121 [inline]
RIP: 0010:lock_acquire kernel/locking/lockdep.c:5842 [inline]
RIP: 0010:lock_acquire+0x111/0x350 kernel/locking/lockdep.c:5823
Code: 74 94 ff e9 45 ff ff ff 48 8b 74 24 68 48 89 df e8 e4 5a 87 00 8b 0d 82 0c ef 0e 85 c9 0f 84 b1 00 00 00 65 8b 05 67 c5 0e 12 <85> c0 0f 85 a2 00 00 00 65 48 8b 05 e7 87 0e 12 8b 90 ec 0a 00 00
RSP: 0018:ffffc9000dd47580 EFLAGS: 00000202
RAX: 0000000000000000 RBX: ffffffff8e3c1440 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff816999f1 RDI: fffffbfff1c78288
RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 00000000000114a4 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881249bd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f09242260f0 CR3: 000000006c8e0000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 rcu_read_lock include/linux/rcupdate.h:841 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1155 [inline]
 unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479
 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2398 [inline]
 slab_free mm/slub.c:4656 [inline]
 kmem_cache_free+0x2d4/0x4d0 mm/slub.c:4758
 anon_vma_chain_free mm/rmap.c:147 [inline]
 unlink_anon_vmas+0x458/0x820 mm/rmap.c:447
 free_pgtables+0x2d4/0x810 mm/memory.c:391
 exit_mmap+0x3fb/0xb90 mm/mmap.c:1295
 __mmput+0x12a/0x410 kernel/fork.c:1379
 mmput+0x62/0x70 kernel/fork.c:1401
 exit_mm kernel/exit.c:589 [inline]
 do_exit+0x9d1/0x2c30 kernel/exit.c:940
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1102
 __do_sys_exit_group kernel/exit.c:1113 [inline]
 __se_sys_exit_group kernel/exit.c:1111 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1111
 x64_sys_call+0x1530/0x1730 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x230 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f09241aabc9
Code: Unable to access opcode bytes at 0x7f09241aab9f.
RSP: 002b:00007ffcb4dbe258 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f09241aabc9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f0924225290 R08: ffffffffffffffb8 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000246 R12: 00007f0924225290
R13: 0000000000000000 R14: 00007f0924225ce0 R15: 00007f092417be20
 </TASK>
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.682 msecs