Extracting prog: 1h13m20.540648207s
Minimizing prog: 1h12m49.196031638s
Simplifying prog options: 0s
Extracting C: 3m8.181781792s
Simplifying C: 1h15m4.231701521s


extracting reproducer from 24 programs
testing a last program of every proc
single: executing 4 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_raw_fops_raw_gadget-openat$auto_tty_fops_tty_io-mmap$auto-close_range$auto-socketpair$auto-close_range$auto-open-socket-listen$auto-ioctl$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-bpf$auto-openat$auto_userfaultfd_dev_fops_userfaultfd-ioctl$auto-openat$auto_console_fops_tty_io-unshare$auto-unshare$auto-bpf$auto-pread64$auto-mmap$auto-openat$auto_mon_fops_text_t_mon_text-mmap$auto-prctl$auto-openat$auto_usbdev_file_operations_usb-socket-openat$auto_mon_fops_text_t_mon_text-close_range$auto-ioctl$auto_USB_RAW_IOCTL_INIT
detailed listing:
executing program 0:
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000280), 0xa0000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0)
mmap$auto(0xb960, 0x2020009, 0x3, 0x17, r1, 0x8000)
close_range$auto(0x0, 0xfffff004, 0x2)
r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0x106)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x100094de, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0x10)
r5 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4)
r6 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x62280, 0x0)
ioctl$auto(r6, 0xe34, 0xffffffffffffffff)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0)
unshare$auto(0x20000)
unshare$auto(0x20000)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={r6, @new_map_fd=0x5, 0x400b, @old_prog_fd=r5}, 0xa3)
pread64$auto(0xffffffffffffffff, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
prctl$auto(0x33, 0xe, 0x0, 0x16c, 0x8)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa101, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce32a9af15390e93a8760df83859e16320e8d0b1161f13d12a586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700000000000000000000000000000000000000000900", "e600d778e82f9b8db7e27a036e39a8ac08de04036d65be7e3be77e6b64f6a2c7fb08c6f5ce381dfb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfc4f40b0b473c72efd18bf61d000012c5e46c68922aeb00", 0x3})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_VENDOR
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r1, 0x705, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0xc00e, 0x4000}, 0x80)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-openat$auto_kernfs_file_fops_kernfs_internal-madvise$auto-openat$auto_snd_ctl_f_ops_control-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto-write$auto-mmap$auto-socket-setsockopt$auto-mmap$auto-openat$auto_def_blk_fops_fs-socket$nl_generic-syz_genetlink_get_family_id$auto_nbd-sendmsg$auto_NBD_CMD_DISCONNECT-prctl$auto-madvise$auto-madvise$auto-mmap$auto-listmount$auto-remap_file_pages$auto-setsockopt$auto-mmap$auto-mlock$auto-madvise$auto-syslog$auto-poll$auto-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_zero_fops_mem-pread64$auto
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) (async)
madvise$auto(0x0, 0x2000040080000004, 0xe) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r1 = socket(0x2, 0x801, 0x6)
setsockopt$auto(r1, 0x1, 0x12, 0x0, 0xa4)
mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x594d) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dd8c700ffdbdf25020000040800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mlock$auto(0x5, 0xffff) (async)
madvise$auto(0xffffffffffffffff, 0x200007, 0x19) (async)
syslog$auto(0x3, 0x0, 0x5) (async)
poll$auto(0x0, 0x7f, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tun_fops_tun-socket-openat$auto_tun_fops_tun-socket$nl_generic-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto-write$auto-getpid-mremap$auto-process_vm_readv$auto-ioctl$auto-close_range$auto-memfd_create$auto-openat$auto_def_blk_fops_fs-socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-write$auto-prctl$auto-mmap$auto-msync$auto-io_uring_setup$auto-madvise$auto-openat$auto_ima_measurements_ops_ima_fs-pread64$auto-socket$nl_generic-read$auto_proc_pid_set_timerslack_ns_operations_base-mmap$auto-openat$auto_dvb_demux_fops_dmxdev
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r2 = getpid()
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
prctl$auto(0x1, 0x6, r2, 0xb117, 0x9)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x0, 0xe0, 0x6)
r4 = io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x401, 0x15)
r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0)
pread64$auto(r5, &(0x7f0000000000)='\x00\x80_\x93gX\x90\x8cA;O0\x03\xcab\xa6\x8bU/t\xc5', 0xd56c, 0xa84)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_proc_pid_set_timerslack_ns_operations_base(r4, &(0x7f0000000440)=""/242, 0xf2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 6m0s
testing program (duration=6m6s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 10, 30, 6, 30, 30, 13, 8, 27, 13, 10, 20, 10, 30, 30, 13, 8, 29, 21, 13, 10, 30, 3, 30]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x101, @any, 0x101}, 0x4c)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
socket(0x2, 0x1, 0x106)
getsockopt$auto(0x3, 0x6, 0x1f, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
pwrite64$auto(0xc8, 0x0, 0xfdf0, 0x39)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
waitid$auto_P_PID(0x1, 0x0, &(0x7f00000004c0)={@_si_pad}, 0xffff8000, &(0x7f0000000540)={{0xffffffffffffff7d, 0x7}, {0x3, 0x6}, 0x54, 0xb3, 0x3, 0x55, 0x605, 0x6, 0x0, 0xd, 0xa458, 0x0, 0x4ab5, 0x3, 0x4, 0x7})
socket(0x2c, 0x1, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007)
close_range$auto(0x2, 0xa, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
executing program 2:
arch_prctl$auto_ARCH_SET_GS(0x1001, 0x8)
socket(0x11, 0x80003, 0x300)
pwrite64$auto(0xc8, 0x0, 0x4b, 0x3)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r0, r1, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.stat\x00', 0x800, 0x0)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x80000008000)
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x7, 0x21)
unshare$auto(0x40000080)
socket(0x1d, 0x6, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
msgctl$auto_IPC_RMID(0x2, 0x0, &(0x7f0000000240)={{0x2, 0xffffffffffffffff, 0x0, 0x409, 0x200005, 0xfb8ed649, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x2, 0xfffffffffffffffd, 0x4d, 0x0, 0x3, 0x9, 0xfff9, 0x9, 0x7, @inferred, @raw=0x8})
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109203, 0x0)
ioctl$auto(r2, 0x540a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008)
mmap$auto(0x4, 0x7, 0xdf, 0x9b72, 0x2, 0x8004)
r3 = socket(0x80000000000000a, 0x803, 0x2000000)
socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x7, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
mmap$auto(0x7, 0x2020009, 0x3, 0x90, r0, 0x8000)
sysfs$auto(0x2, 0x2, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x1)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x4000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x200, 0xd849)
recvmmsg$auto(r2, 0x0, 0xfffd, 0xfff, 0x0)
sendfile$auto(r3, r2, 0x0, 0x81)
ioctl$auto_BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000002c0)={@raw=0x2, "7c635170d2aacbe35bd1ad4b89421d294dbe676a123e818d5d4fd40b00d65bde03336fe8d421fa52c0769be299790655f08824e17e71f4ca2cfa759495f499ac33038b3f25d78fe3616444a6cd0272494c81a65eb122a09029a143d11d8a19dc6c8570869e682300a076423fe5c0f37c82b5636a86982b8d787715fd2efe3a2f798fd13d7d980ca5c97ba67144a9b45f13c9e80c02221ef3e2c48cd5af90588d1f247e411979a3f9bb14617693fcabdd8c9ef690dbca08bd55ceaa28e4903e341d55ecadf177ac804f7efe38415cc1c7db129f920451848cf760be6eb1b6ed631ff4dad4e09110552185a5506f97415a217f9670dfa894685e2f305cdf94142fe2babffce0aad655979f85c142f49c4b23ce17ce584bbb67ef5fb6948454b2df5952b2f53a5cf6cbbeed9aa97d7cf5b22b7ae168123323c41a922e64f2cc3421e251329289b93bfebc7c9e673459afa6b0738c996295f518a5b6abeeb7620117d931b098826d13eb169e6b4ef4adac6627be3a4608f887bf6247d67ef7b09712cd98440a8cd93994ca6763a5d10abed65bcb190a5f1ff4f9cf1d2668b473512271df46819717a7d3b2061d4c6e267bd9d8f00ca370f0f5e9251c5314c8a13dcc27c1b83c7a979cf6ad172e4539f98a1e50279c9a76931731e0b15c272062479592b98ee22cdd00ce55d73020c7108bf78b20137ca8280a5844e158033ca570bcfdec523dd65db9b063c09508dacb83404c5e61ebc3ae90590f4778e5bda27c469028a7c9e5cd12711f8ddb7ed190b7cf5af4f6fc7aa17582358b83ae5f94a32aa98bc076f3ad6d7ca019abc12eb3ae4936ec83e94d192eb6b93e05b4acd38f2c0902e35f442e7851e952013530d58c4fd6409cc3d604fa713aebaa6c244f8baf9a97a70f68024b4835fe2a6ff8fe05879bf279c27b81a3668e40fcf8996bb6f2d9e60b3ee2ee02555e14c4f46b27bc9ea3173df7a337a8d175f5d73bd68703e75f4876aa0b93f09660675c38d5bb1dc0828b2c3fd5a524146ec3155c43742904ad216419328239e1ac8623a0d1d4c15b5f7bc591044ad1e393e2addfb01f9daa1c09622cf64c21c56da657eb00e782fd5bf37d2e08df1b0f7e0ee97a991900a195390b5262702ee0d80e80ba427e69585930bbac1b695909d2defc8d35bef4d7c335c9d68e8bf69707dbdcf346a0eec5aa3ffba01f8716ccacd0768a5542e29104f5e86394236fc6553eff47a8481eb2fa20d03caaff9568b1a0e68689e3b4e5a28835d720ccd0b85ed59428e81a02b7297b00b9428cc765da64631d3c2c1fe8d9ce84027bb7805fe32ca8315248116766657f6dd4d807a70b0a027b566c3e95cf54afc064b722bf70e043cbe883ee2ba5998f7fa3935353de36e653e86dceeb59c795b9180e39ef7cd268e767024a84d0c72cc439267c08fed3efd71422f7333aa5fc5da8ac1d83eab02f1b062bf9759b29add21dec3547e2c0bb208c3db4aabe1430f7c6a4d6c826ad532374233751c832d381e67aa10e913536a11c8a14fc11e812e78a1c38afe102fec39dc1b680f7d7b272fe98e33a7860de1899b65decb1fd7dd2fdd8387a8c42d85055d9832fef65e0ac11247d7e0ece24bde9248fafdaa2eab609bd70b5f68d1fb71641b30fda9885b078954f0644e283f3bc8b45ac42e9f1f367b008677e852691d1eb7655d45cb7d11caa6d399ee8e05404e1741a694ac5c49b4d29f1fa0d403351e3bc14d66c1885c45f295caa1a4c681b743288c24ca8f781eedb895208a6de52eef46addd289113bbb75c82f78ca01521ef5236bdb060fb23b7cdb1cc2c75afed0c19b4a779da094517e9378c2ec06a30a1358be11d4b9660e8295ae3ef990dbaafe3735eb53059deab9448c3c0996979d28e5722d4b06041f5c4e95b5d60776dee57377d77917325bffcb918ee2afe33b6bd2895a04a8be205e50e0d04bdf001cb3b8df2e2b85b119e7b78876bc7169567a1968fbb8431d4004558d8e89663b537ce9df964f051f63c74294f21a55760b197744a46f133b6e2d57e120d6ca93ab50efec3e8a107b7e7cb537f40f7cd4b47d7a4bbdc04bf58b71c3789e30899d23936f3b398670c331b6db91e193ca1705c85f9d0b443852951888323e4234821e2c5c03c206eb834853b5edb526e30b71d6ce3861d505c8bc1b58f4d8aa1d4a63855b89ea49dbe7b9e387e61f3e1ec73d6691effa370258b710ee73bc8dd4899135b9f24d90774cb96160cc9592e2fdaa9557fecba56b14d7da3616f4247199e222f8ad9ff1842d80275a21858cea2a6d112019743422c350dee97cc0aae9dbdcb106fc372d2195f46841119bf0d81db5c672cc0f26f12a88e20e64dc993095a1a7434b3c7c9ebebe4e968ac330a6f0504f8dd1f17dd9215812a94592b6b8162c8b114ef7166eac1fa9a6b7c0386f80f19702ec691088e9b3f809f71045655557e36ce02c6ad270720a7f929c5b19ad2dd26e1125f0902e33e6ac68b199aa0bca15a3f823bbbdcea29b5d6ab532fec0c8ca6e46f5b56e9b8cb0d23a1447f7ce81c7ab2aef33f1b036f5ba40d52caefebf7eeea54eafe52811aadd9526528f0184523cfd0880fc628114bb08bf24a949bb19f7069b4512652842b4697374e4d0f214722a88dde027899f09afe1f5778f8e068dd3b3aea4c0a95c441de8df8bbaeb085c98b715c97342e357ab68c64df3ee356f18d0f09330178a177f0b2ccc821becfc5e2015c3dce3cc6e4b6e7231cebd871a71964280be1a0ce44b60cba684d6c3c7644a08af342124a438274299f382ff156b52a0d58f0a708a76039f398b34a9773118eec1a1d06b817fb482afbbd0714c68986f871275c8970e1b03976d2916b204602b0ff3f5767a9f83060fb524415a476736f72cfcfa7c7d407fc6a911b7b6acd00630ed1741e8c64a901cab4cfc1268eb3b287d21f96e58705ec9d2922eb9282cbf7216dfed3cbe29f06a95cae3f0474241d3917b0946f94af4a7c775181db90d86c95bb9dd30698f567f55a7c04cd4008ea69c42e194e159fe3fda14ea8f781c8e965ea33142635c06a7c9217cf856cfba6d8083305613393d50df28a827bda9473d4d927857ac12ed2a761873eac8038b299ab619e3626fdf0c14f1b534b9631b7001e6752e69d84bf51496f7dd3c996cccff130ba164e2111d76a489fc4c987435caf74b822567dcbcee52a77687570a184983ded05d19e518516314bc88e4372e46600c535b3ec1f3e7bcb7e8a3823a4d68069fbb0d553b1d3c403590515ed6e316d5a2b23db6b000b74014a420bd58efe4e62139f90cafe6748fb9dd3fd2bdac9a87a08c0bb48a0cf7a50040df18bceda6fd8b56ee58d3fc35ab6ddb1303ff10752cd874fc2b49b56f92e45e126e7b22550b8b1845b18625011d52eb3c07f23edc92fc226a0e08fdff590390de2702b7a80881c668b6ec082b1c5d7a01d6cc1cee953f391638e3870cf91faec302bcac659046e1ca20f6bd1c8b8a9d73a5e4b2b23ac0c8c558e66f9b1a7f89e86807db195e2a9216486406e11df28f955162e00ee26ab70a2b30040cac13a2cc3c2ba54c540ecb8d52345ed8da4f05969c1ae7fc16f2293fd04ab3d5d87d8553cb65f548534458b426e546caab841c33ac326e6e8caad7e34fee2e9f3c56a1e3f13465ed875f19b5dcef3c3560b745bc0e7ff9c04f67a0ed7bbb6bb7e5dc2176ae5ad021621eafa70e4bf8360d5705a10b28b0e21c772ad9f56789207605b5434afb2b0c6fa955b47cf2f2c72749912e199f683a97f35262d5cd3271fe30bbd6782f6f60d6015593c9d8da8f2d122bbd9d9a1896954540f0592181d20e0ca5bc42a95d97f8db38840ae0abfd2416d9bb49cb176542c0af7021a04c65dcd75f9d014b81f594cfa222c398c18386a9f8a677ff657f4ba08eef1def2e275d16495f4fbee2643f397ef1477b102db4d4d14b13797937c4acbadd7a7cab774bc5170922c5b59e16fa54991edc5ea58b0d36e86f3c67dbbd81ad31ff1bfadcc189c0b5a07931827a2d0fbaf46d65d32838a2395826fe5c390985809198de8edcd73e9cc727c87d9f1fc5b9d2940dcecba16506addda0312eb57aee690133b5edf6fb88db5890b681d8857f1512a4ca56075614192d1200ae21e60c657ca933dbcb694e8609834f5bd1ec5e12bc41c12adb6f8e9424caf600620c091ed5cf80906df244798a401522ec3398c355562d40e920a9bb521f8a706cd864cdc0503de1822948376c2123f15b0561f646a16ab7c8146690402813f1b739b02ac1971a86168720a82ea76e00120944db261b4a84d717202b6cad78a3794fb7d4cf87094d6397d408c0de097da676dbd438983601e939bdedd478ef5edfbfad7f8e78782415f59ff04b55c5065098f69605fc18cf501e1118808814ed31373bebf97a11e7ca05df65fd73536b0596d7b5f070b8dee16ddbb7ae24df70c95f95048669e54b50f5306ba325f3758669a0d4afcbde390a29a7ba4ac71d6159bbd56e44b1e120f8ea47487f1b9960c7d7c3fca2b10aea208878cd80c9d2b6fbbf681a7d73269d4b511ee864462d15b00a1a55160bddd7960efd6c2a6c5d8d4cc628004d76cd32f62d6ba4e75e8f34c6215456bf87788673b142e7a0a6b91743bddb2e28b89f9a729f8c96ffa0fe15464b02890450c52db2d324bac1c53db4400262655df82957299459ca8903a653dbfd5a987fccac20261fe1a0202621ca2d16977b209d750e61873a096fc90dbe010183454111fe221dbb6c9e56caa166943fb6e6c42c5a2f18af6ed0fbe4c74d6c227fb7fb272ee5b8161858de3438ff25e210546067bc7ef5ea8fa06c4c3ad9c4627e72632cf5f38239646dd37fe37523b869bccf8c8d68f9c0ca20ebcc424b7113b042d417da1ac231426e46db55a2e648695bda318ee129bd50a096fe69f27cb592fc274b3ec80251fffb899574e38f9e741b88cbf9d3d21eea56fde1ee3512ccdb3ba417cdd4880a4698b6e80db01bd286d100f36243f0c1374b6aef018a04a1cf976feae37b090033b061f5a161215069d75885e03220f64daffbd6e729e8d9c6b8bb8a381378d350ace91474122c40ca1ae9bdad2e496e564dc143177ccf8e0dde1d8a553e23c7177a3182bbc4f8b22b44dc5b9815aa3d649b45c4cbb36fd81adc010eb1324639dbda7e7387409c23f74f3f0574927c8c1fd937e8b1de7501b749ec9769a5b7b3d864195cab1a9872e20cebdc510be82229afc39885340d1a4e6eb9e75cdd860bd84aa900b97482adfea9bde5fea41fa1973fe29a475a38bdfd5acc930f6f4f0475fec4766e325112ba19660d978fbd33bda2217d0bfb4d307323e7670503fd7ad8341e1a4247f0e73b20ec8537c5bed052c5b44f48d488decf29830add83cc688fb8153da6fd496cbc4d0a96882fcc28e998f78e0b516c3ba580e3365c77411e63771b586434ef10d9132e88bc2f40e377370a78483a3380978aa1614421df8b56f7f37b5a5b3aabbc3696bc25c8ddaf5e161b3097010ffa3b3094a1894ae9cef8256083780cb5d23e78d42b66dbc6a00364de24c7633ef6bc771beb259bb15e2c3f0059b2def50d7dd8e662a6ca2df2bc472e261bac1b1cb7231de9fe6ec655c0807a64ff1974c301129a1316758df4dcd32f704d25970264fad1eccbb7bb38fa76731b996d3d49125ec28911045adea5e14bff503394cf841d455c001ac822a0912104f22fb4b6ec42b074cfffc3c79bc4006065b45ba12a1037c69ffaf7003f99a109f12f1df2"})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0x102, 0x0)
sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x60000040}, 0x2)
close_range$auto(0x2, 0x8, 0x0)
executing program 1:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91\vI\x1eRN8\x99\x88\xca\xd9\xec\x1epJ\"ds\x1cJr\xde:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x89\v\xea\x1b\x95\xaf\xee\xe69\x8d(<\xc7+\x83\xfcQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd3\x81Y\xa3Fp\v\xdc\xe2\xc3\xc3\xdbS\xdc', 0xfdef, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0xaa86)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4)
executing program 3:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x29, 0x2, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x40382, 0x0)
ioctl$auto_SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0)
socket(0xa, 0x3, 0xff)
r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/domain_policy\x00', 0xc0201, 0x0)
write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f00000000c0)="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", 0x119)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0)
r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0\x00', 0x80200, 0x0)
ioctl$auto_OTPGETREGIONINFO(r3, 0x400c4d0f, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, r1, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/snd_usb_variax/unbind\x00', 0x654b82, 0x0)
r4 = socket(0x18, 0x80000, 0x0)
connect$auto(r4, 0x0, 0x1e)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop12\x00', 0x209c0, 0x0)
write$auto(0xca, &(0x7f00000002c0)='\x04=\x01\r\xfb\a\x00\x00\x00\x00\x00\x00\x00\xa2\x00\x00\xccb\xc9\x19AWL\x00\b2\xa7e\xbd\x97\x9c\x05z\xccs\xba\xa2,&\xe9\x11\xfe{ai\x8a\x86V \x8eb=OJC\xaf.D\x8f\x97\x03g*\x1c\x98~\x15\xc3\\\xcbed\xff\xb1\x92~\x89S\"\xdac\x99\xf7!\a\xfb\xf8Vf\x18\xc8\xbbu\xcd\xf6\x80\x92\xa9\xda(\xa2\x93p\n\xe5t\x1b$\x9f\xa3\x1a\x82\x06\x12\xa6\a\"\xba\x8a\x88t\xf2A\xb9g$H\xcc\xc7\x8eoi\xf5\x02\n\"\xdf9\xa5>\x91\xf2\xde\xa8\xd3\x9f\x9d\xba6\xc0\xcb!w\a\xdd\xbb\xf1kox\x04\xe8a\x93\xf3\x12eE]\f\a\xf7N\xb7\x85\a\xf1+\x05\xe7\xb5\xa9m-+(\xaf\xf9\xa4r\x0fX~\v\xa7\xf3\x9cD\t\x80\x8b\x9d6\x1f\xdc\xc4y\x1d\x9a\xff\x0e\xbb\x8c^\xb9\x06\xcd\xa1\xf9\xec\xc1\xc3\xd7\x0fr\x16Hf\xb5\x17\x10\xf9\x03H\x19\x1a\xa8\xd1\xad\xa2\xd3\xe7\xa7\x883Y\x7fS\x80|\x9e\x91O\xca@\xe45\x80\x95\xdf\xdbn\x01\xde\xfd\vH\xfc\xe6o\xf5\x1c\x034\xf5\xd8\xb1}JX{\xf0\x89\x1d\xb5P`j\x10I\xf2\x16PQ\x85\xa7\t\x98\x1c\xe2Y\xa1\x03\x9b\xdd4VQF\x8d\xc9\xa5\fm\xca\xfd\x92\n\\\xf8\xb5C\xce\xa9\xdc\xddg\x8e2x\xde\xdf\x14zd\x01s\xaa\xd7v\xfa\xe3\x99\v|2', 0x2d9)
executing program 2:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0x2, 0x1, 0x0)
connect$auto(0x3, 0x0, 0x55)
socket(0xa, 0x1, 0x84)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x5, 0x1000000002020009, 0x4, 0xeb5, r0, 0x6)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
ioprio_set$auto(0x3, 0x0, 0x4b34)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2)
clone$auto(0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/binder1\x00', 0x10000, 0x0)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
memfd_create$auto(0x0, 0xe)
r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x181041, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000100), 0xffffffffffffffff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0xc2481, 0x0)
write$auto(r4, &(0x7f0000000040)='P\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0xfffffffffffffffd)
executing program 0:
write$auto(0xffffffffffffffff, &(0x7f0000000380)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x303001, 0x0)
fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f0000000280)='/dev/ubi_ctrl\x00', &(0x7f00000002c0)="35982730b9141f96c52845878a0cbb7098dc5e424b9352828af09139d72745b6ca9560789cc9a99cb9036acb9b949907267a9b3b97cdd640b70be5e00c9f6f07fcba1c8f06f93fd3bc4dc7f5bada1f8574878d84e7fa06", 0x3)
r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
ioctl$auto_UBI_IOCDET(r1, 0x40046f41, &(0x7f0000000040)=0x1)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x205000, 0x0)
r3 = fsmount$auto(r2, 0x2, 0x8)
capset$auto(&(0x7f0000000140)={0x80, <r4=>0x0}, &(0x7f0000000180)={0x1, 0x5, 0x3ef9})
sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000940)={0x1cc, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xfd}, @NL802154_ATTR_SEC_DEVKEY={0x1a8, 0x2f, 0x0, 0x1, [@nested={0x1a2, 0x4, 0x0, 0x1, [@generic="38e6a2e3912bbeeb1d8546aacc77436506448d6d12013dd1d166af104e2e3ed2e6ae465d1ae5e90ecf1ec0e4c5ed8703de78ac72653160cc4f6aabdadf8bdb5c927102ea307fd6dd51ef87cae632f1950f92ff4d30a7", @typed={0x4, 0x10b}, @typed={0x8, 0xfb, 0x0, 0x0, @pid=r4}, @typed={0x4, 0x7, 0x0, 0x0, @binary}, @generic="dc644298f1a22e824b939ea03e017e80ef2030f37931a73a09a43eef51bb2a232bc86dc4f0464f01eece6eb8d4c42ab70854f1489b2fa908f9cc79185f0161871cdca359127e", @generic="e68c5c26dcff7f0bfe83ff012821df6c9a275e035d5128e0c85aeab1dca2e28d48ec", @generic="29e1f0a026e1945397c02e7f55de24d1533c27094b1b7e54d7d86144dd201c553861a0ba26b3abaa7d338c6727ee328eeaaf3c37d6a7be186b0a1e9d6f0cbd68d8add4777f771b5d822d9ea56471c7269e8ef8fd06d84b9827a2fe7a3911d8c1eee14ed712adab9e4e642f0a40bff8d24b09a53478473c668651200fbc6e20835ac8a2bf1eac39bb7e0eea810cd6b375e096c62d2666e344c8d606e7a48e0d76f8fd017a6b518f9456dc9eed50fab2aa3b8c8baf20acd010e8bd08a999a228a18f10a166296cef0669e6a61725ea9a19"]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x24008006}, 0x4000000)
ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r2, 0x5386, &(0x7f00000000c0)="5a14e5c4913f3cd5b2e2518d21d3f771982adcb1dd5125dc4f6a70664143e51a1ab79aaee7fb64132439c766ea50292b7c")
ioctl$auto_SNDRV_PCM_IOCTL_RESUME2(r3, 0x4147, 0x0)
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, 0x0)
bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd, 0x7, 0x1, 0x7, 0x7f, @prog_cnt=0xffffffff, 0x0, 0xf, 0x8, 0x7, 0x400000000001}, 0xa)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)
r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x80000000], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
io_uring_register$auto(r1, 0x15, 0x0, 0x9)
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x40, 0xe3, 0x100000eb1, 0x40000000000a1, 0x408000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
pwrite64$auto(0x2, 0x0, 0x0, 0x5)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x100000000000000, 0x7fffffff, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/teql0/statistics/rx_dropped\x00', 0x80000, 0x0)
openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x482c0, 0x0)
r4 = socket(0x11, 0x2, 0x0)
mmap$auto(0x400000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
capset$auto(0x0, &(0x7f0000000000)={0xb, 0x3, 0x4})
sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000480)="7ed8d4ff28748e16eda4b2961b809f20746186b350ec06ffd5b2f751e596215c88da21dd64c45226d130250671d82e8e3194630ac84622839d7b04bf633bdd489ddd9a426ef8076e88d29c56d0cd2b176d185fb010df3c467619cf33a9feafac322ece8b3f325ad7f26bf58743f96ef019a181b09765019c9380b330242cbacebda41934554135225826730a8d33250e6289ef281ff5dcff77b76c16d902eb067bfcd21e87d2a1b3c38929", 0x5a7, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x7fff, &(0x7f0000000180), 0x5, 0xffd}, 0x5}, 0x2, 0x100)
read$auto(r2, 0x0, 0x400000000000009)
io_cancel$auto(0x64, &(0x7f0000000000)={0x6, 0x9, 0x7, 0x4, 0x1, r3, 0x5a43, 0x0, 0x5, 0x10, 0x7f, 0x4}, 0x0)
sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xb999402684e34ad6}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8})
write$auto(0x3, 0x0, 0xfdef)
r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000)
executing program 3:
write$auto(0xffffffffffffffff, &(0x7f0000000380)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x303001, 0x0)
fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f0000000280)='/dev/ubi_ctrl\x00', &(0x7f00000002c0)="35982730b9141f96c52845878a0cbb7098dc5e424b9352828af09139d72745b6ca9560789cc9a99cb9036acb9b949907267a9b3b97cdd640b70be5e00c9f6f07fcba1c8f06f93fd3bc4dc7f5bada1f8574878d84e7fa06", 0x3)
r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
ioctl$auto_UBI_IOCDET(r1, 0x40046f41, &(0x7f0000000040)=0x1)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x205000, 0x0)
r3 = fsmount$auto(r2, 0x2, 0x8)
capset$auto(&(0x7f0000000140)={0x80, <r4=>0x0}, &(0x7f0000000180)={0x1, 0x5, 0x3ef9})
sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)={0x1f8, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xfd}, @NL802154_ATTR_SEC_DEVKEY={0x1d4, 0x2f, 0x0, 0x1, [@nested={0x1cd, 0x4, 0x0, 0x1, [@generic="38e6a2e3912bbeeb1d8546aacc77436506448d6d12013dd1d166af104e2e3ed2e6ae465d1ae5e90ecf1ec0e4c5ed8703de78ac72653160cc4f6aabdadf8bdb5c927102ea307fd6dd51ef87cae632f1950f92ff4d30a77a9241", @typed={0x4, 0x10b}, @typed={0x8, 0xfb, 0x0, 0x0, @pid=r4}, @typed={0x29, 0x7, 0x0, 0x0, @binary="bde3b5b3653688c8076d36b81748fc0b75fd22ffa3f87a6a54472bec57d964ed3a5d9f5578"}, @generic="dc644298f1a22e824b939ea03e017e80ef2030f37931a73a09a43eef51bb2a232bc86dc4f0464f01eece6eb8d4c42ab70854f1489b2fa908f9cc79185f0161871cdca359127e", @generic="e68c5c26dcff7f0bfe83ff012821df6c9a275e035d5128e0c85aeab1dca2e28d48ec", @generic="29e1f0a026e1945397c02e7f55de24d1533c27094b1b7e54d7d86144dd201c553861a0ba26b3abaa7d338c6727ee328eeaaf3c37d6a7be186b0a1e9d6f0cbd68d8add4777f771b5d822d9ea56471c7269e8ef8fd06d84b9827a2fe7a3911d8c1eee14ed712adab9e4e642f0a40bff8d24b09a53478473c668651200fbc6e20835ac8a2bf1eac39bb7e0eea810cd6b375e096c62d2666e344c8d606e7a48e0d76f8fd017a6b518f9456dc9eed50fab2aa3b8c8baf20acd010e8bd08a999a228a18f10a166296cef0669e6a61725ea9a19"]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x24008006}, 0x4000000)
ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r2, 0x5386, &(0x7f00000000c0)="5a14e5c4913f3cd5b2e2518d21d3f771982adcb1dd5125dc4f6a70664143e51a1ab79aaee7fb64132439c766ea50292b7c")
ioctl$auto_SNDRV_PCM_IOCTL_RESUME2(r3, 0x4147, 0x0)
executing program 1:
arch_prctl$auto_ARCH_SET_GS(0x1001, 0x8)
socket(0x11, 0x80003, 0x300)
pwrite64$auto(0xc8, 0x0, 0x4b, 0x3)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r0, r1, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.stat\x00', 0x800, 0x0)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x2, 0x73)
r0 = pipe2$auto(0x0, 0x0)
r1 = io_uring_setup$auto(0x7e1b, 0x0)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x40)
socket(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x5, 0x100000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x80000541b, 0x38)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
getsockopt$auto_SO_BINDTODEVICE(r0, 0x3, 0x19, &(0x7f0000000040)='!\x00', &(0x7f0000000080)=0xe)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0)
sendfile$auto(r0, r1, 0x0, 0x3)
syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r2)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.1/usb11/11-0:1.0/ep_81/uevent\x00', 0x40000, 0x0)
sendfile$auto(r4, r4, 0x0, 0x3)
executing program 2:
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001180)="2ef4852c88cc2f83e10d0a")
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x106)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
move_pages$auto(0x0, 0x5, 0xfffffffffffffffe, &(0x7f0000003380)=0x4c0, 0x0, 0x2)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x8, 0x80002, 0x8)
r1 = socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
write$auto(0x3, 0x0, 0xfdef)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
read$auto(r1, 0x0, 0xffffffff)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2, 0x2000de, 0x3ad6, 0x7, 0x28000)
r3 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/comm\x00', 0x640340, 0x0)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000010c0)=@batch={0x5, 0x2, 0x9, 0xa, 0xfc53, r3, 0x10, 0x9}, 0xa)
connect$auto(0x3, 0x0, 0x54)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0xa000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/4096, 0x1000)
mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000)
executing program 3:
quotactl_fd$auto(0x0, 0x2, 0x0, 0xfffffffffffffffd)
mmap$auto(0x0, 0x2020009, 0x8003, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000)
r0 = landlock_create_ruleset$auto(&(0x7f00000000c0)={0x0, 0x10, 0x6}, 0x5, 0x2)
ioctl$auto_TUNGETVNETLE2(r0, 0x800454dd, &(0x7f0000000100)=0x1)
ioctl$auto_VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000180)='/dev/media17\x00', 0x48000, 0x0)
epoll_create$auto(0x3a)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
recvfrom$auto(r1, 0x0, 0x80000001, 0x13e, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x169443, 0x114)
fcntl$auto(r2, 0x40a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
socket(0xf, 0x3, 0x2)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72)
socket(0x2, 0x2, 0x0)
select$auto(0x6, 0x0, 0x0, &(0x7f00000001c0)={[0x5, 0x2, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x528f, 0x5, 0x7, 0x6d3f, 0xa, 0x5, 0x6]}, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0xfffffffffffffffb, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x4347, 0x6]}, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000)
clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006)
executing program 1:
write$auto(0xffffffffffffffff, &(0x7f0000000380)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x303001, 0x0)
fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f0000000280)='/dev/ubi_ctrl\x00', &(0x7f00000002c0)="35982730b9141f96c52845878a0cbb7098dc5e424b9352828af09139d72745b6ca9560789cc9a99cb9036acb9b949907267a9b3b97cdd640b70be5e00c9f6f07fcba1c8f06f93fd3bc4dc7f5bada1f8574878d84e7fa06", 0x3)
r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
ioctl$auto_UBI_IOCDET(r1, 0x40046f41, &(0x7f0000000040)=0x1)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x205000, 0x0)
r3 = fsmount$auto(r2, 0x2, 0x8)
capset$auto(&(0x7f0000000140)={0x80, <r4=>0x0}, &(0x7f0000000180)={0x1, 0x5, 0x3ef9})
sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000940)={0x1cc, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xfd}, @NL802154_ATTR_SEC_DEVKEY={0x1a8, 0x2f, 0x0, 0x1, [@nested={0x1a2, 0x4, 0x0, 0x1, [@generic="38e6a2e3912bbeeb1d8546aacc77436506448d6d12013dd1d166af104e2e3ed2e6ae465d1ae5e90ecf1ec0e4c5ed8703de78ac72653160cc4f6aabdadf8bdb5c927102ea307fd6dd51ef87cae632f1950f92ff4d30a7", @typed={0x4, 0x10b}, @typed={0x8, 0xfb, 0x0, 0x0, @pid=r4}, @typed={0x4, 0x7, 0x0, 0x0, @binary}, @generic="dc644298f1a22e824b939ea03e017e80ef2030f37931a73a09a43eef51bb2a232bc86dc4f0464f01eece6eb8d4c42ab70854f1489b2fa908f9cc79185f0161871cdca359127e", @generic="e68c5c26dcff7f0bfe83ff012821df6c9a275e035d5128e0c85aeab1dca2e28d48ec", @generic="29e1f0a026e1945397c02e7f55de24d1533c27094b1b7e54d7d86144dd201c553861a0ba26b3abaa7d338c6727ee328eeaaf3c37d6a7be186b0a1e9d6f0cbd68d8add4777f771b5d822d9ea56471c7269e8ef8fd06d84b9827a2fe7a3911d8c1eee14ed712adab9e4e642f0a40bff8d24b09a53478473c668651200fbc6e20835ac8a2bf1eac39bb7e0eea810cd6b375e096c62d2666e344c8d606e7a48e0d76f8fd017a6b518f9456dc9eed50fab2aa3b8c8baf20acd010e8bd08a999a228a18f10a166296cef0669e6a61725ea9a19"]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x24008006}, 0x4000000)
ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r2, 0x5386, &(0x7f00000000c0)="5a14e5c4913f3cd5b2e2518d21d3f771982adcb1dd5125dc4f6a70664143e51a1ab79aaee7fb64132439c766ea50292b7c")
ioctl$auto_SNDRV_PCM_IOCTL_RESUME2(r3, 0x4147, 0x0)
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
bpf$auto(0x10, 0x0, 0xa)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)
r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x80000000], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
io_uring_register$auto(r1, 0x15, 0x0, 0x9)
executing program 1:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r2 = getpid()
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
prctl$auto(0x1, 0x6, r2, 0xb117, 0x9)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x0, 0xe0, 0x6)
r4 = io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x401, 0x15)
r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0)
pread64$auto(r5, &(0x7f0000000000)='\x00\x80_\x93gX\x90\x8cA;O0\x03\xcab\xa6\x8bU/t\xc5', 0xd56c, 0xa84)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_proc_pid_set_timerslack_ns_operations_base(r4, &(0x7f0000000440)=""/242, 0xf2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
executing program 3:
mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
socket(0x23, 0x80805, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
io_uring_setup$auto(0x3, 0x0)
pipe$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0)
socket(0x2, 0x3, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0xa)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x2, 0x801, 0x106)
socket(0x15, 0x5, 0x0)
socket(0x10, 0x2, 0x0)
r2 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES64=r0], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80)
executing program 2:
write$auto(0xffffffffffffffff, &(0x7f0000000380)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x303001, 0x0)
fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f0000000280)='/dev/ubi_ctrl\x00', &(0x7f00000002c0)="35982730b9141f96c52845878a0cbb7098dc5e424b9352828af09139d72745b6ca9560789cc9a99cb9036acb9b949907267a9b3b97cdd640b70be5e00c9f6f07fcba1c8f06f93fd3bc4dc7f5bada1f8574878d84e7fa06", 0x3)
r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
ioctl$auto_UBI_IOCDET(r1, 0x40046f41, &(0x7f0000000040)=0x1)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x205000, 0x0)
r3 = fsmount$auto(r2, 0x2, 0x8)
capset$auto(&(0x7f0000000140)={0x80}, &(0x7f0000000180)={0x1, 0x5, 0x3ef9})
sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008006}, 0x4000000)
ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r2, 0x5386, &(0x7f00000000c0)="5a14e5c4913f3cd5b2e2518d21d3f771982adcb1dd5125dc4f6a70664143e51a1ab79aaee7fb64132439c766ea50292b7c")
ioctl$auto_SNDRV_PCM_IOCTL_RESUME2(r3, 0x4147, 0x0)
executing program 0:
arch_prctl$auto_ARCH_SET_GS(0x1001, 0x8)
socket(0x11, 0x80003, 0x300)
pwrite64$auto(0xc8, 0x0, 0x4b, 0x3)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r0, r1, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.stat\x00', 0x800, 0x0)
executing program 2:
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) (async)
madvise$auto(0x0, 0x2000040080000004, 0xe) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r1 = socket(0x2, 0x801, 0x6)
setsockopt$auto(r1, 0x1, 0x12, 0x0, 0xa4)
mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x594d) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dd8c700ffdbdf25020000040800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mlock$auto(0x5, 0xffff) (async)
madvise$auto(0xffffffffffffffff, 0x200007, 0x19) (async)
syslog$auto(0x3, 0x0, 0x5) (async)
poll$auto(0x0, 0x7f, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r1, 0x705, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0xc00e, 0x4000}, 0x80)
executing program 0:
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000280), 0xa0000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0)
mmap$auto(0xb960, 0x2020009, 0x3, 0x17, r1, 0x8000)
close_range$auto(0x0, 0xfffff004, 0x2)
r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0x106)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x100094de, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0x10)
r5 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4)
r6 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x62280, 0x0)
ioctl$auto(r6, 0xe34, 0xffffffffffffffff)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0)
unshare$auto(0x20000)
unshare$auto(0x20000)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={r6, @new_map_fd=0x5, 0x400b, @old_prog_fd=r5}, 0xa3)
pread64$auto(0xffffffffffffffff, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
prctl$auto(0x33, 0xe, 0x0, 0x16c, 0x8)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa101, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce32a9af15390e93a8760df83859e16320e8d0b1161f13d12a586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700000000000000000000000000000000000000000900", "e600d778e82f9b8db7e27a036e39a8ac08de04036d65be7e3be77e6b64f6a2c7fb08c6f5ce381dfb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfc4f40b0b473c72efd18bf61d000012c5e46c68922aeb00", 0x3})

program crashed: INFO: rcu detected stall in corrupted
bisect: bisecting 24 programs
bisect: split chunks (needed=false): <24>
bisect: split chunk #0 of len 24 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=6m4s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 13, 10, 20, 10, 30, 30, 13, 8, 29, 21, 13, 10, 30, 3, 30]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x40, 0xe3, 0x100000eb1, 0x40000000000a1, 0x408000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
pwrite64$auto(0x2, 0x0, 0x0, 0x5)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x100000000000000, 0x7fffffff, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/teql0/statistics/rx_dropped\x00', 0x80000, 0x0)
openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x482c0, 0x0)
r4 = socket(0x11, 0x2, 0x0)
mmap$auto(0x400000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
capset$auto(0x0, &(0x7f0000000000)={0xb, 0x3, 0x4})
sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000480)="7ed8d4ff28748e16eda4b2961b809f20746186b350ec06ffd5b2f751e596215c88da21dd64c45226d130250671d82e8e3194630ac84622839d7b04bf633bdd489ddd9a426ef8076e88d29c56d0cd2b176d185fb010df3c467619cf33a9feafac322ece8b3f325ad7f26bf58743f96ef019a181b09765019c9380b330242cbacebda41934554135225826730a8d33250e6289ef281ff5dcff77b76c16d902eb067bfcd21e87d2a1b3c38929", 0x5a7, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x7fff, &(0x7f0000000180), 0x5, 0xffd}, 0x5}, 0x2, 0x100)
read$auto(r2, 0x0, 0x400000000000009)
io_cancel$auto(0x64, &(0x7f0000000000)={0x6, 0x9, 0x7, 0x4, 0x1, r3, 0x5a43, 0x0, 0x5, 0x10, 0x7f, 0x4}, 0x0)
sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xb999402684e34ad6}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8})
write$auto(0x3, 0x0, 0xfdef)
r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000)
executing program 3:
write$auto(0xffffffffffffffff, &(0x7f0000000380)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x303001, 0x0)
fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f0000000280)='/dev/ubi_ctrl\x00', &(0x7f00000002c0)="35982730b9141f96c52845878a0cbb7098dc5e424b9352828af09139d72745b6ca9560789cc9a99cb9036acb9b949907267a9b3b97cdd640b70be5e00c9f6f07fcba1c8f06f93fd3bc4dc7f5bada1f8574878d84e7fa06", 0x3)
r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
ioctl$auto_UBI_IOCDET(r1, 0x40046f41, &(0x7f0000000040)=0x1)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x205000, 0x0)
r3 = fsmount$auto(r2, 0x2, 0x8)
capset$auto(&(0x7f0000000140)={0x80, <r4=>0x0}, &(0x7f0000000180)={0x1, 0x5, 0x3ef9})
sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)={0x1f8, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xfd}, @NL802154_ATTR_SEC_DEVKEY={0x1d4, 0x2f, 0x0, 0x1, [@nested={0x1cd, 0x4, 0x0, 0x1, [@generic="38e6a2e3912bbeeb1d8546aacc77436506448d6d12013dd1d166af104e2e3ed2e6ae465d1ae5e90ecf1ec0e4c5ed8703de78ac72653160cc4f6aabdadf8bdb5c927102ea307fd6dd51ef87cae632f1950f92ff4d30a77a9241", @typed={0x4, 0x10b}, @typed={0x8, 0xfb, 0x0, 0x0, @pid=r4}, @typed={0x29, 0x7, 0x0, 0x0, @binary="bde3b5b3653688c8076d36b81748fc0b75fd22ffa3f87a6a54472bec57d964ed3a5d9f5578"}, @generic="dc644298f1a22e824b939ea03e017e80ef2030f37931a73a09a43eef51bb2a232bc86dc4f0464f01eece6eb8d4c42ab70854f1489b2fa908f9cc79185f0161871cdca359127e", @generic="e68c5c26dcff7f0bfe83ff012821df6c9a275e035d5128e0c85aeab1dca2e28d48ec", @generic="29e1f0a026e1945397c02e7f55de24d1533c27094b1b7e54d7d86144dd201c553861a0ba26b3abaa7d338c6727ee328eeaaf3c37d6a7be186b0a1e9d6f0cbd68d8add4777f771b5d822d9ea56471c7269e8ef8fd06d84b9827a2fe7a3911d8c1eee14ed712adab9e4e642f0a40bff8d24b09a53478473c668651200fbc6e20835ac8a2bf1eac39bb7e0eea810cd6b375e096c62d2666e344c8d606e7a48e0d76f8fd017a6b518f9456dc9eed50fab2aa3b8c8baf20acd010e8bd08a999a228a18f10a166296cef0669e6a61725ea9a19"]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x24008006}, 0x4000000)
ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r2, 0x5386, &(0x7f00000000c0)="5a14e5c4913f3cd5b2e2518d21d3f771982adcb1dd5125dc4f6a70664143e51a1ab79aaee7fb64132439c766ea50292b7c")
ioctl$auto_SNDRV_PCM_IOCTL_RESUME2(r3, 0x4147, 0x0)
executing program 1:
arch_prctl$auto_ARCH_SET_GS(0x1001, 0x8)
socket(0x11, 0x80003, 0x300)
pwrite64$auto(0xc8, 0x0, 0x4b, 0x3)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r0, r1, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.stat\x00', 0x800, 0x0)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x2, 0x73)
r0 = pipe2$auto(0x0, 0x0)
r1 = io_uring_setup$auto(0x7e1b, 0x0)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x40)
socket(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x5, 0x100000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x80000541b, 0x38)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
getsockopt$auto_SO_BINDTODEVICE(r0, 0x3, 0x19, &(0x7f0000000040)='!\x00', &(0x7f0000000080)=0xe)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0)
sendfile$auto(r0, r1, 0x0, 0x3)
syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r2)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.1/usb11/11-0:1.0/ep_81/uevent\x00', 0x40000, 0x0)
sendfile$auto(r4, r4, 0x0, 0x3)
executing program 2:
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001180)="2ef4852c88cc2f83e10d0a")
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x106)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
move_pages$auto(0x0, 0x5, 0xfffffffffffffffe, &(0x7f0000003380)=0x4c0, 0x0, 0x2)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x8, 0x80002, 0x8)
r1 = socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
write$auto(0x3, 0x0, 0xfdef)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
read$auto(r1, 0x0, 0xffffffff)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2, 0x2000de, 0x3ad6, 0x7, 0x28000)
r3 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/comm\x00', 0x640340, 0x0)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000010c0)=@batch={0x5, 0x2, 0x9, 0xa, 0xfc53, r3, 0x10, 0x9}, 0xa)
connect$auto(0x3, 0x0, 0x54)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0xa000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/4096, 0x1000)
mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000)
executing program 3:
quotactl_fd$auto(0x0, 0x2, 0x0, 0xfffffffffffffffd)
mmap$auto(0x0, 0x2020009, 0x8003, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000)
r0 = landlock_create_ruleset$auto(&(0x7f00000000c0)={0x0, 0x10, 0x6}, 0x5, 0x2)
ioctl$auto_TUNGETVNETLE2(r0, 0x800454dd, &(0x7f0000000100)=0x1)
ioctl$auto_VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000180)='/dev/media17\x00', 0x48000, 0x0)
epoll_create$auto(0x3a)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
recvfrom$auto(r1, 0x0, 0x80000001, 0x13e, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x169443, 0x114)
fcntl$auto(r2, 0x40a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
socket(0xf, 0x3, 0x2)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72)
socket(0x2, 0x2, 0x0)
select$auto(0x6, 0x0, 0x0, &(0x7f00000001c0)={[0x5, 0x2, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x528f, 0x5, 0x7, 0x6d3f, 0xa, 0x5, 0x6]}, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0xfffffffffffffffb, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x4347, 0x6]}, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000)
clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006)
executing program 1:
write$auto(0xffffffffffffffff, &(0x7f0000000380)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x303001, 0x0)
fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f0000000280)='/dev/ubi_ctrl\x00', &(0x7f00000002c0)="35982730b9141f96c52845878a0cbb7098dc5e424b9352828af09139d72745b6ca9560789cc9a99cb9036acb9b949907267a9b3b97cdd640b70be5e00c9f6f07fcba1c8f06f93fd3bc4dc7f5bada1f8574878d84e7fa06", 0x3)
r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
ioctl$auto_UBI_IOCDET(r1, 0x40046f41, &(0x7f0000000040)=0x1)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x205000, 0x0)
r3 = fsmount$auto(r2, 0x2, 0x8)
capset$auto(&(0x7f0000000140)={0x80, <r4=>0x0}, &(0x7f0000000180)={0x1, 0x5, 0x3ef9})
sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000940)={0x1cc, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xfd}, @NL802154_ATTR_SEC_DEVKEY={0x1a8, 0x2f, 0x0, 0x1, [@nested={0x1a2, 0x4, 0x0, 0x1, [@generic="38e6a2e3912bbeeb1d8546aacc77436506448d6d12013dd1d166af104e2e3ed2e6ae465d1ae5e90ecf1ec0e4c5ed8703de78ac72653160cc4f6aabdadf8bdb5c927102ea307fd6dd51ef87cae632f1950f92ff4d30a7", @typed={0x4, 0x10b}, @typed={0x8, 0xfb, 0x0, 0x0, @pid=r4}, @typed={0x4, 0x7, 0x0, 0x0, @binary}, @generic="dc644298f1a22e824b939ea03e017e80ef2030f37931a73a09a43eef51bb2a232bc86dc4f0464f01eece6eb8d4c42ab70854f1489b2fa908f9cc79185f0161871cdca359127e", @generic="e68c5c26dcff7f0bfe83ff012821df6c9a275e035d5128e0c85aeab1dca2e28d48ec", @generic="29e1f0a026e1945397c02e7f55de24d1533c27094b1b7e54d7d86144dd201c553861a0ba26b3abaa7d338c6727ee328eeaaf3c37d6a7be186b0a1e9d6f0cbd68d8add4777f771b5d822d9ea56471c7269e8ef8fd06d84b9827a2fe7a3911d8c1eee14ed712adab9e4e642f0a40bff8d24b09a53478473c668651200fbc6e20835ac8a2bf1eac39bb7e0eea810cd6b375e096c62d2666e344c8d606e7a48e0d76f8fd017a6b518f9456dc9eed50fab2aa3b8c8baf20acd010e8bd08a999a228a18f10a166296cef0669e6a61725ea9a19"]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x24008006}, 0x4000000)
ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r2, 0x5386, &(0x7f00000000c0)="5a14e5c4913f3cd5b2e2518d21d3f771982adcb1dd5125dc4f6a70664143e51a1ab79aaee7fb64132439c766ea50292b7c")
ioctl$auto_SNDRV_PCM_IOCTL_RESUME2(r3, 0x4147, 0x0)
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
bpf$auto(0x10, 0x0, 0xa)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)
r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x80000000], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
io_uring_register$auto(r1, 0x15, 0x0, 0x9)
executing program 1:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r2 = getpid()
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
prctl$auto(0x1, 0x6, r2, 0xb117, 0x9)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x0, 0xe0, 0x6)
r4 = io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x401, 0x15)
r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0)
pread64$auto(r5, &(0x7f0000000000)='\x00\x80_\x93gX\x90\x8cA;O0\x03\xcab\xa6\x8bU/t\xc5', 0xd56c, 0xa84)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_proc_pid_set_timerslack_ns_operations_base(r4, &(0x7f0000000440)=""/242, 0xf2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
executing program 3:
mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
socket(0x23, 0x80805, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
io_uring_setup$auto(0x3, 0x0)
pipe$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0)
socket(0x2, 0x3, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0xa)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x2, 0x801, 0x106)
socket(0x15, 0x5, 0x0)
socket(0x10, 0x2, 0x0)
r2 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES64=r0], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80)
executing program 2:
write$auto(0xffffffffffffffff, &(0x7f0000000380)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x303001, 0x0)
fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f0000000280)='/dev/ubi_ctrl\x00', &(0x7f00000002c0)="35982730b9141f96c52845878a0cbb7098dc5e424b9352828af09139d72745b6ca9560789cc9a99cb9036acb9b949907267a9b3b97cdd640b70be5e00c9f6f07fcba1c8f06f93fd3bc4dc7f5bada1f8574878d84e7fa06", 0x3)
r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
ioctl$auto_UBI_IOCDET(r1, 0x40046f41, &(0x7f0000000040)=0x1)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x205000, 0x0)
r3 = fsmount$auto(r2, 0x2, 0x8)
capset$auto(&(0x7f0000000140)={0x80}, &(0x7f0000000180)={0x1, 0x5, 0x3ef9})
sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008006}, 0x4000000)
ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r2, 0x5386, &(0x7f00000000c0)="5a14e5c4913f3cd5b2e2518d21d3f771982adcb1dd5125dc4f6a70664143e51a1ab79aaee7fb64132439c766ea50292b7c")
ioctl$auto_SNDRV_PCM_IOCTL_RESUME2(r3, 0x4147, 0x0)
executing program 0:
arch_prctl$auto_ARCH_SET_GS(0x1001, 0x8)
socket(0x11, 0x80003, 0x300)
pwrite64$auto(0xc8, 0x0, 0x4b, 0x3)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r0, r1, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.stat\x00', 0x800, 0x0)
executing program 2:
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) (async)
madvise$auto(0x0, 0x2000040080000004, 0xe) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r1 = socket(0x2, 0x801, 0x6)
setsockopt$auto(r1, 0x1, 0x12, 0x0, 0xa4)
mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x594d) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dd8c700ffdbdf25020000040800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mlock$auto(0x5, 0xffff) (async)
madvise$auto(0xffffffffffffffff, 0x200007, 0x19) (async)
syslog$auto(0x3, 0x0, 0x5) (async)
poll$auto(0x0, 0x7f, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r1, 0x705, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0xc00e, 0x4000}, 0x80)
executing program 0:
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000280), 0xa0000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0)
mmap$auto(0xb960, 0x2020009, 0x3, 0x17, r1, 0x8000)
close_range$auto(0x0, 0xfffff004, 0x2)
r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0x106)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x100094de, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0x10)
r5 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4)
r6 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x62280, 0x0)
ioctl$auto(r6, 0xe34, 0xffffffffffffffff)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0)
unshare$auto(0x20000)
unshare$auto(0x20000)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={r6, @new_map_fd=0x5, 0x400b, @old_prog_fd=r5}, 0xa3)
pread64$auto(0xffffffffffffffff, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
prctl$auto(0x33, 0xe, 0x0, 0x16c, 0x8)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa101, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce32a9af15390e93a8760df83859e16320e8d0b1161f13d12a586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700000000000000000000000000000000000000000900", "e600d778e82f9b8db7e27a036e39a8ac08de04036d65be7e3be77e6b64f6a2c7fb08c6f5ce381dfb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfc4f40b0b473c72efd18bf61d000012c5e46c68922aeb00", 0x3})

program crashed: INFO: task hung in corrupted
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 29, 21, 13, 10, 30, 3, 30]
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
bpf$auto(0x10, 0x0, 0xa)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)
r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x80000000], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
io_uring_register$auto(r1, 0x15, 0x0, 0x9)
executing program 1:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r2 = getpid()
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
prctl$auto(0x1, 0x6, r2, 0xb117, 0x9)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x0, 0xe0, 0x6)
r4 = io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x401, 0x15)
r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0)
pread64$auto(r5, &(0x7f0000000000)='\x00\x80_\x93gX\x90\x8cA;O0\x03\xcab\xa6\x8bU/t\xc5', 0xd56c, 0xa84)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_proc_pid_set_timerslack_ns_operations_base(r4, &(0x7f0000000440)=""/242, 0xf2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
executing program 3:
mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
socket(0x23, 0x80805, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
io_uring_setup$auto(0x3, 0x0)
pipe$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0)
socket(0x2, 0x3, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0xa)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x2, 0x801, 0x106)
socket(0x15, 0x5, 0x0)
socket(0x10, 0x2, 0x0)
r2 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES64=r0], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80)
executing program 2:
write$auto(0xffffffffffffffff, &(0x7f0000000380)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x303001, 0x0)
fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f0000000280)='/dev/ubi_ctrl\x00', &(0x7f00000002c0)="35982730b9141f96c52845878a0cbb7098dc5e424b9352828af09139d72745b6ca9560789cc9a99cb9036acb9b949907267a9b3b97cdd640b70be5e00c9f6f07fcba1c8f06f93fd3bc4dc7f5bada1f8574878d84e7fa06", 0x3)
r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
ioctl$auto_UBI_IOCDET(r1, 0x40046f41, &(0x7f0000000040)=0x1)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x205000, 0x0)
r3 = fsmount$auto(r2, 0x2, 0x8)
capset$auto(&(0x7f0000000140)={0x80}, &(0x7f0000000180)={0x1, 0x5, 0x3ef9})
sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008006}, 0x4000000)
ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r2, 0x5386, &(0x7f00000000c0)="5a14e5c4913f3cd5b2e2518d21d3f771982adcb1dd5125dc4f6a70664143e51a1ab79aaee7fb64132439c766ea50292b7c")
ioctl$auto_SNDRV_PCM_IOCTL_RESUME2(r3, 0x4147, 0x0)
executing program 0:
arch_prctl$auto_ARCH_SET_GS(0x1001, 0x8)
socket(0x11, 0x80003, 0x300)
pwrite64$auto(0xc8, 0x0, 0x4b, 0x3)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r0, r1, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.stat\x00', 0x800, 0x0)
executing program 2:
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) (async)
madvise$auto(0x0, 0x2000040080000004, 0xe) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r1 = socket(0x2, 0x801, 0x6)
setsockopt$auto(r1, 0x1, 0x12, 0x0, 0xa4)
mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x594d) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dd8c700ffdbdf25020000040800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mlock$auto(0x5, 0xffff) (async)
madvise$auto(0xffffffffffffffff, 0x200007, 0x19) (async)
syslog$auto(0x3, 0x0, 0x5) (async)
poll$auto(0x0, 0x7f, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r1, 0x705, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0xc00e, 0x4000}, 0x80)
executing program 0:
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000280), 0xa0000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0)
mmap$auto(0xb960, 0x2020009, 0x3, 0x17, r1, 0x8000)
close_range$auto(0x0, 0xfffff004, 0x2)
r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0x106)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x100094de, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0x10)
r5 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4)
r6 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x62280, 0x0)
ioctl$auto(r6, 0xe34, 0xffffffffffffffff)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0)
unshare$auto(0x20000)
unshare$auto(0x20000)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={r6, @new_map_fd=0x5, 0x400b, @old_prog_fd=r5}, 0xa3)
pread64$auto(0xffffffffffffffff, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
prctl$auto(0x33, 0xe, 0x0, 0x16c, 0x8)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa101, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce32a9af15390e93a8760df83859e16320e8d0b1161f13d12a586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700000000000000000000000000000000000000000900", "e600d778e82f9b8db7e27a036e39a8ac08de04036d65be7e3be77e6b64f6a2c7fb08c6f5ce381dfb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfc4f40b0b473c72efd18bf61d000012c5e46c68922aeb00", 0x3})

program crashed: INFO: task hung in corrupted
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
bisect: split chunks (needed=true): <8>
bisect: split chunk #0 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 30, 3, 30]
detailed listing:
executing program 0:
arch_prctl$auto_ARCH_SET_GS(0x1001, 0x8)
socket(0x11, 0x80003, 0x300)
pwrite64$auto(0xc8, 0x0, 0x4b, 0x3)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r0, r1, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.stat\x00', 0x800, 0x0)
executing program 2:
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) (async)
madvise$auto(0x0, 0x2000040080000004, 0xe) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r1 = socket(0x2, 0x801, 0x6)
setsockopt$auto(r1, 0x1, 0x12, 0x0, 0xa4)
mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x594d) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dd8c700ffdbdf25020000040800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mlock$auto(0x5, 0xffff) (async)
madvise$auto(0xffffffffffffffff, 0x200007, 0x19) (async)
syslog$auto(0x3, 0x0, 0x5) (async)
poll$auto(0x0, 0x7f, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r1, 0x705, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0xc00e, 0x4000}, 0x80)
executing program 0:
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000280), 0xa0000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0)
mmap$auto(0xb960, 0x2020009, 0x3, 0x17, r1, 0x8000)
close_range$auto(0x0, 0xfffff004, 0x2)
r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0x106)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x100094de, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0x10)
r5 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4)
r6 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x62280, 0x0)
ioctl$auto(r6, 0xe34, 0xffffffffffffffff)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0)
unshare$auto(0x20000)
unshare$auto(0x20000)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={r6, @new_map_fd=0x5, 0x400b, @old_prog_fd=r5}, 0xa3)
pread64$auto(0xffffffffffffffff, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
prctl$auto(0x33, 0xe, 0x0, 0x16c, 0x8)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa101, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce32a9af15390e93a8760df83859e16320e8d0b1161f13d12a586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700000000000000000000000000000000000000000900", "e600d778e82f9b8db7e27a036e39a8ac08de04036d65be7e3be77e6b64f6a2c7fb08c6f5ce381dfb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfc4f40b0b473c72efd18bf61d000012c5e46c68922aeb00", 0x3})

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 29, 21, 13]
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
bpf$auto(0x10, 0x0, 0xa)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)
r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x80000000], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
io_uring_register$auto(r1, 0x15, 0x0, 0x9)
executing program 1:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r2 = getpid()
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
prctl$auto(0x1, 0x6, r2, 0xb117, 0x9)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x0, 0xe0, 0x6)
r4 = io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x401, 0x15)
r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0)
pread64$auto(r5, &(0x7f0000000000)='\x00\x80_\x93gX\x90\x8cA;O0\x03\xcab\xa6\x8bU/t\xc5', 0xd56c, 0xa84)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_proc_pid_set_timerslack_ns_operations_base(r4, &(0x7f0000000440)=""/242, 0xf2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
executing program 3:
mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
socket(0x23, 0x80805, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
io_uring_setup$auto(0x3, 0x0)
pipe$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0)
socket(0x2, 0x3, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0xa)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x2, 0x801, 0x106)
socket(0x15, 0x5, 0x0)
socket(0x10, 0x2, 0x0)
r2 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES64=r0], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80)
executing program 2:
write$auto(0xffffffffffffffff, &(0x7f0000000380)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x303001, 0x0)
fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f0000000280)='/dev/ubi_ctrl\x00', &(0x7f00000002c0)="35982730b9141f96c52845878a0cbb7098dc5e424b9352828af09139d72745b6ca9560789cc9a99cb9036acb9b949907267a9b3b97cdd640b70be5e00c9f6f07fcba1c8f06f93fd3bc4dc7f5bada1f8574878d84e7fa06", 0x3)
r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
ioctl$auto_UBI_IOCDET(r1, 0x40046f41, &(0x7f0000000040)=0x1)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x205000, 0x0)
r3 = fsmount$auto(r2, 0x2, 0x8)
capset$auto(&(0x7f0000000140)={0x80}, &(0x7f0000000180)={0x1, 0x5, 0x3ef9})
sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008006}, 0x4000000)
ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r2, 0x5386, &(0x7f00000000c0)="5a14e5c4913f3cd5b2e2518d21d3f771982adcb1dd5125dc4f6a70664143e51a1ab79aaee7fb64132439c766ea50292b7c")
ioctl$auto_SNDRV_PCM_IOCTL_RESUME2(r3, 0x4147, 0x0)

program crashed: INFO: rcu detected stall in msync
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <4>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 13]
detailed listing:
executing program 3:
mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
socket(0x23, 0x80805, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
io_uring_setup$auto(0x3, 0x0)
pipe$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0)
socket(0x2, 0x3, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0xa)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x2, 0x801, 0x106)
socket(0x15, 0x5, 0x0)
socket(0x10, 0x2, 0x0)
r2 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES64=r0], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80)
executing program 2:
write$auto(0xffffffffffffffff, &(0x7f0000000380)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x303001, 0x0)
fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f0000000280)='/dev/ubi_ctrl\x00', &(0x7f00000002c0)="35982730b9141f96c52845878a0cbb7098dc5e424b9352828af09139d72745b6ca9560789cc9a99cb9036acb9b949907267a9b3b97cdd640b70be5e00c9f6f07fcba1c8f06f93fd3bc4dc7f5bada1f8574878d84e7fa06", 0x3)
r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
ioctl$auto_UBI_IOCDET(r1, 0x40046f41, &(0x7f0000000040)=0x1)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x205000, 0x0)
r3 = fsmount$auto(r2, 0x2, 0x8)
capset$auto(&(0x7f0000000140)={0x80}, &(0x7f0000000180)={0x1, 0x5, 0x3ef9})
sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008006}, 0x4000000)
ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r2, 0x5386, &(0x7f00000000c0)="5a14e5c4913f3cd5b2e2518d21d3f771982adcb1dd5125dc4f6a70664143e51a1ab79aaee7fb64132439c766ea50292b7c")
ioctl$auto_SNDRV_PCM_IOCTL_RESUME2(r3, 0x4147, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 29]
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
bpf$auto(0x10, 0x0, 0xa)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)
r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x80000000], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
io_uring_register$auto(r1, 0x15, 0x0, 0x9)
executing program 1:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r2 = getpid()
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
prctl$auto(0x1, 0x6, r2, 0xb117, 0x9)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x0, 0xe0, 0x6)
r4 = io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x401, 0x15)
r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0)
pread64$auto(r5, &(0x7f0000000000)='\x00\x80_\x93gX\x90\x8cA;O0\x03\xcab\xa6\x8bU/t\xc5', 0xd56c, 0xa84)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_proc_pid_set_timerslack_ns_operations_base(r4, &(0x7f0000000440)=""/242, 0xf2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)

program crashed: INFO: rcu detected stall in blkdev_release
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tun_fops_tun-socket-openat$auto_tun_fops_tun-socket$nl_generic-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto-write$auto-getpid-mremap$auto-process_vm_readv$auto-ioctl$auto-close_range$auto-memfd_create$auto-openat$auto_def_blk_fops_fs-socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-write$auto-prctl$auto-mmap$auto-msync$auto-io_uring_setup$auto-madvise$auto-openat$auto_ima_measurements_ops_ima_fs-pread64$auto-socket$nl_generic-read$auto_proc_pid_set_timerslack_ns_operations_base-mmap$auto-openat$auto_dvb_demux_fops_dmxdev
detailed listing:
executing program 1:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r2 = getpid()
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
prctl$auto(0x1, 0x6, r2, 0xb117, 0x9)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x0, 0xe0, 0x6)
r4 = io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x401, 0x15)
r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0)
pread64$auto(r5, &(0x7f0000000000)='\x00\x80_\x93gX\x90\x8cA;O0\x03\xcab\xa6\x8bU/t\xc5', 0xd56c, 0xa84)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_proc_pid_set_timerslack_ns_operations_base(r4, &(0x7f0000000440)=""/242, 0xf2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-fgetxattr$auto-io_uring_setup$auto-io_uring_register$auto
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
bpf$auto(0x10, 0x0, 0xa)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)
r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x80000000], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
io_uring_register$auto(r1, 0x15, 0x0, 0x9)

program crashed: INFO: task hung in corrupted
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 1 programs left: 

executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
bpf$auto(0x10, 0x0, 0xa)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)
r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x80000000], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
io_uring_register$auto(r1, 0x15, 0x0, 0x9)


bisect: trying to concatenate
bisect: concatenate 1 entries
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-fgetxattr$auto-io_uring_setup$auto-io_uring_register$auto
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
bpf$auto(0x10, 0x0, 0xa)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)
r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x80000000], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
io_uring_register$auto(r1, 0x15, 0x0, 0x9)

program crashed: INFO: task hung in corrupted
bisect: concatenation succeeded
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=7m2.946251252s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-fgetxattr$auto-io_uring_setup$auto
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
bpf$auto(0x10, 0x0, 0xa)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)
io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x80000000], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})

program crashed: INFO: task hung in corrupted
testing program (duration=7m2.946251252s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-fgetxattr$auto
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
bpf$auto(0x10, 0x0, 0xa)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)

program crashed: INFO: task hung in corrupted
testing program (duration=7m2.946251252s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
bpf$auto(0x10, 0x0, 0xa)

program crashed: INFO: task hung in corrupted
testing program (duration=7m2.946251252s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
testing program (duration=7m2.946251252s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)

program did not crash
testing program (duration=7m2.946251252s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=7m2.946251252s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=7m2.946251252s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=7m2.946251252s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=7m2.946251252s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=7m2.946251252s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=7m2.946251252s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=7m2.946251252s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
simplifying C reproducer
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in addrconf_dad_work
a never seen crash title: INFO: task hung in addrconf_dad_work, ignore
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
validation run: crashed=true
testing program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
validation run: crashed=true
testing program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
validation run: crashed=true
reproducing took 3h58m12.447575086s
repro crashed as (corrupted=true):
INFO: task kworker/u8:9:6053 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:9    state:D stack:26056 pid:6053  tgid:6053  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: events_unbound linkwatch_event
Call Trace:
 <TASK>

report is corrupted, running repro again
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
report is corrupted, running repro again
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
report is corrupted, running repro again
testing compiled C program (duration=7m2.946251252s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
final repro crashed as (corrupted=true):
INFO: task kworker/1:1:44 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1     state:D stack:26536 pid:44    tgid:44    ppid:2      task_flags:0x4208060 flags:0x00080000