Extracting prog: 12m45.898362252s Minimizing prog: 1h5m51.143222581s Simplifying prog options: 5m41.773268184s Extracting C: 2m23.3624946s Simplifying C: 0s extracting reproducer from 24 programs testing a last program of every proc single: executing 4 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-syz_clone-prctl$auto-socketpair$auto-recvmmsg$auto-openat$auto_kernfs_file_fops_kernfs_internal-write$auto-sendmmsg$auto-signalfd$auto-sendmmsg$auto-socket-unshare$auto-setsockopt$auto-openat$auto_tracing_entries_fops_trace-openat$auto_kernfs_file_fops_kernfs_internal-open-execve$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) write$auto(r0, 0x0, 0x800f) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) signalfd$auto(0xffffffff, 0x0, 0x8) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-mmap$auto-close_range$auto-socket-socket-openat$auto_v4l2_fops_v4l2_dev-setsockopt$auto-socket-adjtimex$auto-openat$auto_snd_pcm_f_ops_pcm-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-sendmsg$auto_CTRL_CMD_GETFAMILY-openat$auto_def_blk_fops_fs-sendmsg$auto_CTRL_CMD_GETFAMILY-msgctl$auto_IPC_SET-socket-select$auto detailed listing: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x6) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video52\x00', 0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) socket(0x18, 0x2, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x3, 0xfffffffffffffffd, 0xd4, 0x80000000000000, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x400c0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, 0x0, 0x1) msgctl$auto_IPC_SET(0x38d3, 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmmsg$auto-fsopen$auto-unshare$auto-ioperm$auto-modify_ldt$auto-sendmsg$auto_ETHTOOL_MSG_DEBUG_GET-io_uring_setup$auto-ioctl$auto-socket$nl_generic-mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-writev$auto-mmap$auto-openat$auto_ctl_device_fops_user-sendmmsg$auto-mbind$auto-unshare$auto detailed listing: executing program 0: sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{&(0x7f0000000240)="d6ad2ad2474ed8ab0a731bc005", 0x9, 0x0, 0x40, 0x0, 0x7, 0x9f2}, 0x580}, 0x5, 0x5) fsopen$auto(0x0, 0x7) unshare$auto(0x40000080) ioperm$auto(0x3, 0x38c, 0x9) modify_ldt$auto(0xf7, 0x0, 0x8) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x6) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmmsg$auto(r2, 0x0, 0x6, 0x401) mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000300)=0xc9e, 0x400, 0x1) unshare$auto(0x40000080) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-ioctl$auto_TCSBRKP2-setsockopt$auto-setitimer$auto-socket-close_range$auto-openat$auto_mon_fops_binary_mon_bin-sendmsg$auto_WG_CMD_GET_DEVICE-bpf$auto-writev$auto-openat$auto_drm_edid_fops_drm_debugfs-getitimer$auto-socket-close_range$auto-socket$nl_generic-sendmsg$auto_NL80211_CMD_TRIGGER_SCAN-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-openat$auto_proc_sys_file_operations_proc_sysctl-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x2) setitimer$auto(0x6, &(0x7f0000000040)={{0x4, 0x5}, {0x0, 0x1000000000008}}, 0x0) socket(0x25, 0x1, 0x3) close_range$auto(0xffffffffffffffff, 0x8, 0x9) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon2\x00', 0x40080, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x200448c0) bpf$auto(0xfffff013, 0x0, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x40901, 0x0) getitimer$auto(0x2, &(0x7f0000000280)={{0x3000, 0x4}, {0x6, 0xae}}) socket(0x23, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r1, 0x0, 0xa3d9) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 18, 19, 19, 17, 18, 19, 19, 20, 20, 17, 19, 20, 19, 20, 20, 20, 19, 19, 17, 20, 19, 19, 17] detailed listing: executing program 1: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) write$auto(r0, 0x0, 0x800f) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) executing program 0: r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x24004054) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000140), 0x55) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x6) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0xfff}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0xfffffeff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c0}, 0x8000000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(r0, 0x901064ae, 0x4) sysfs$auto(0x2, 0x8000000000000000, 0xb) executing program 3: mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x2, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x6, 0x28, 0x1000000000065f, 0x80000000, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x2, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000002, 0x3, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x200000000001, 0x0, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x400000, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006, 0x0, 0x5]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) set_mempolicy$auto(0x1c00, &(0x7f0000000040)=0x1, 0x5) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) executing program 1: mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x7, 0x7, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x300, @remote}, 0x53) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x218d01, 0x0) ioctl$auto(0x3, 0x4b4d, 0x38) socket(0xa, 0x3, 0x80) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x15, 0x5, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={0x0}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) setsockopt$auto_SO_RCVBUFFORCE(r0, 0x1ff, 0x21, &(0x7f00000000c0)='/dev/tty12\x00', 0x1e3e) unshare$auto(0x40000080) executing program 3: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x4, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x6, 0x0) memfd_create$auto(0x0, 0xe) r1 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, 0x0, 0x80) syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x48000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x24040000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) getpeername$auto(0x3, 0x0, 0x0) executing program 3: syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r0, 0x0, 0x81) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setgroups$auto(0x9, &(0x7f0000000040)=0x1) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x2) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) mmap$auto(0x0, 0x400005, 0xe3, 0x9b72, r0, 0x7) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) munmap$auto(0x8000, 0xffffffff) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) executing program 2: socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x6) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video52\x00', 0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) socket(0x18, 0x2, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x3, 0xfffffffffffffffd, 0xd4, 0x80000000000000, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x400c0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, 0x0, 0x1) msgctl$auto_IPC_SET(0x38d3, 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x8081, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c04, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x7) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) sysfs$auto(0x2, 0x2, 0x9) close_range$auto(0x2, 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000140)={0x7fffffff, 0xd, 0x2, 0x6, 0x5, 0x7, r1, [], {0x2, 0x80000000, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x7, 0x8000000000802}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000001}}) io_uring_enter$auto(r2, 0x9, 0x820e, 0x9, 0x0, 0x18) executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x800, 0x8) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1942, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x1, 0x3f, 0x0, 0xb) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) executing program 2: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x4, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, 0x0, 0x80) syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x48000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x24040000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) getpeername$auto(0x3, 0x0, 0x0) executing program 0: mmap$auto(0x0, 0x80000400008, 0xdf, 0x13, 0x2, 0x48ff) socket(0x29, 0x5, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) r1 = socket(0xa, 0x801, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x6d, 0x0, 0x0) connect$auto(0x3, 0x0, 0x55) pidfd_getfd$auto(r0, r0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r3, 0x9, 0x0, &(0x7f0000000040)='#^^\x00', 0x3) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) executing program 2: syz_clone(0x4000011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) read$auto(r3, &(0x7f0000000040)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0) r4 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x200, 0x0) read$auto(r4, &(0x7f0000000000)=')\x00', 0x200) r5 = inotify_init1$auto(0x3000000000000) read$auto_tracing_readme_fops_trace(r5, 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) getrandom$auto(&(0x7f0000000000)='/dev/ppp\x00', 0x9, 0x3) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) executing program 0: unshare$auto(0x40000080) setregid$auto(0x5, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x62081, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x81, 0x0, 0x338) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xdff1, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x8, 0x5, 0xfffffffffffffffd, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0x9) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x8080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/dmi/id/modalias\x00', 0x40280, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) executing program 1: ioperm$auto(0x3, 0xe, 0x2000000000000149) madvise$auto(0x0, 0xffffffffffff0008, 0x19) r0 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x228280, 0x0) mmap$auto(0x4, 0x6, 0xdc, 0xeb1, r0, 0x8000) io_getevents$auto(0x80000000, 0x9, 0x0, 0x0, 0x0) setfsgid$auto(0xee01) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x101000, 0x0) ioctl$auto(0x3, 0x80044df9, 0x38) madvise$auto(0x110c234000, 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_IPC_STAT(0x1, 0x2, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x2, 0x2, 0xe, 0x8}, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x9, 0x5, 0x7, 0xffffffff00000000, 0x7439e83b, 0x1, 0x1ff, 0x2, 0x8001, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) shmctl$auto_IPC_INFO(0x6, 0x3, &(0x7f0000001300)={{0x4, 0xee01, 0xee01, 0x9, 0x5, 0xe8bf, 0x6}, 0x0, 0xa, 0x1ff, 0x6, @inferred=r1, @inferred=r1, 0x1, 0x0, &(0x7f0000000140)="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", 0x0}) semctl$auto_SETVAL(0x0, 0x6, 0x10, 0x8000000000000001) msgctl$auto(0x8, 0x9, 0x0) open(0x0, 0x480000, 0x3b57b32128471cf5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x2) ioprio_set$auto(0x1, 0x0, 0x0) executing program 2: r0 = socket(0x2, 0x2, 0x88) connect$auto(0x3, 0x0, 0x54) mmap$auto(0xffff, 0x20009, 0x4000000000df, 0x19, r0, 0x10000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='r', @ANYBLOB="1e00df"], 0x1ac}}, 0x0) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r1, 0x7, 0x6}, 0x4, 0x100000) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r1) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r3, 0x301, 0x70bd2e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) socket(0x10, 0x2, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) bpf$auto(0x10, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x20f34) write$auto(0x3, 0x0, 0xffd8) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) executing program 3: openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)=""/114, 0x72) r0 = socket(0x9, 0x1, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x5, 0x8000000000000004, 0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) msync$auto(0x0, 0x2000000005, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = syz_clone(0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x134, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0xae, 0x0, 0x0, @u32=0xffffffff}]}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'veth0_to_hsr\x00'}, @NL802154_ATTR_SEC_LEVEL={0xd8, 0x2d, 0x0, 0x1, [@nested={0x91, 0xe7, 0x0, 0x1, [@generic="f994f9b391316f24fa09192d3264478cdf0681ef8b848605fa3d7ae821f9f922072f6c873c36fc72f5944680c3ee5f88a4739ad41f30df6df64524d0b81b5892d0a06e8a7818f2cd7f470a7d3749545cedbacb84eac07a5cec6b56b73e28ba4600fbb16180a67f89eff562dc172dfc95dab69ca6f7e96416a8357f4a89024d1eb5b71ada5c", @nested={0x4, 0x114}, @nested={0x4, 0xac}]}, @nested={0x3d, 0x12a, 0x0, 0x1, [@nested={0x4, 0xae}, @generic="2ae72cd7329eba8fbb6c658a945a230f9cd393bb4af723de609699aed3db5cce32d71b41d3a195394f6056bb71", @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40800) ioctl$auto(r3, 0x5646, r3) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000080)=""/27, 0x1b) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x302, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae71, r0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x612000, 0x0) executing program 1: write$auto(0x3, 0x0, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0xcae, 0xfffffffd, 0x100000000, 0x0, 0x6, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop11/events_poll_msecs\x00', 0x22002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f00000010c0)='./file0\x00', 0x4b42, 0xe1d2b27bdc14aaa1) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(r0, &(0x7f00000001c0)='/dev/audio1\x00JR\xe7\xae\xd27M 0b 90 90 e9 fa 00 00 00 e8 01 d8 62 ff 4d 85 e4 74 c4 e8 f7 d7 RSP: 0018:ffffc90000bd7a60 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff817a2269 RDX: ffff8881422c3c00 RSI: ffffffff817a2276 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802db983c0 R13: 0000000000000004 R14: ffffffff8b8fa7a0 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c008d48000 CR3: 0000000028194000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: nfsd_net_exit+0x27/0x50 fs/nfsd/nfsctl.c:2259 ops_exit_list+0xb0/0x180 net/core/net_namespace.c:172 cleanup_net+0x5c6/0xb30 net/core/net_namespace.c:652 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400 kthread+0x3af/0x750 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 final repro crashed as (corrupted=false): name 'nfsd' WARNING: CPU: 0 PID: 52 at fs/proc/generic.c:721 remove_proc_entry+0x1d1/0x540 fs/proc/generic.c:721 Modules linked in: CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: netns cleanup_net RIP: 0010:remove_proc_entry+0x1d1/0x540 fs/proc/generic.c:721 Code: ff e8 33 d8 62 ff 48 c7 c7 80 94 41 8e e8 37 e3 00 09 e8 22 d8 62 ff 90 48 8b 74 24 18 48 c7 c7 c0 f9 81 8b e8 90 06 23 ff 90 <0f> 0b 90 90 e9 fa 00 00 00 e8 01 d8 62 ff 4d 85 e4 74 c4 e8 f7 d7 RSP: 0018:ffffc90000bd7a60 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff817a2269 RDX: ffff8881422c3c00 RSI: ffffffff817a2276 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802db983c0 R13: 0000000000000004 R14: ffffffff8b8fa7a0 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c008d48000 CR3: 0000000028194000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: nfsd_net_exit+0x27/0x50 fs/nfsd/nfsctl.c:2259 ops_exit_list+0xb0/0x180 net/core/net_namespace.c:172 cleanup_net+0x5c6/0xb30 net/core/net_namespace.c:652 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400 kthread+0x3af/0x750 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244