Extracting prog: 1h27m42.543018251s
Minimizing prog: 1h23m51.061141726s
Simplifying prog options: 0s
Extracting C: 3m9.385604257s
Simplifying C: 1h10m23.098527398s


extracting reproducer from 25 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_nl80211-mmap$auto-socket-openat$nci-openat$auto_snd_rawmidi_f_ops_rawmidi-openat$auto_tty_fops_tty_io-socket-socket-socketpair$auto-write$auto-mmap$auto-mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto_clear_warn_once_fops_-mmap$auto-sendmmsg$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-ioctl$auto-mmap$auto-close_range$auto-socket$nl_generic-close_range$auto-mmap$auto-close_range$auto-socket-openat$auto_force_wakeup_fops_hci_vhci-read$auto_force_wakeup_fops_hci_vhci-syz_genetlink_get_family_id$auto_nl80211
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
r1 = socket(0x15, 0x5, 0x0)
socket(0xa, 0x1, 0x84)
r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
write$auto(0x6, 0x0, 0x100000001)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0x1a29, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0)
read$auto_clear_warn_once_fops_(r2, &(0x7f0000000300)=""/169, 0xa9)
mmap$auto(0xfffffffd, 0x100, 0x7ffffffb, 0x13, r1, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
r3 = socket(0x29, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x25, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$auto(r3, 0x8b0f, 0x24)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffe)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
r4 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci1/force_wakeup\x00', 0x101200, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r4, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_dma_heap_fops_dma_heap-ioctl$auto_dma_heap_fops_dma_heap-syz_genetlink_get_family_id$auto_nl80211-syz_clone-openat$auto_rng_chrdev_ops_core-read$auto_rng_chrdev_ops_core-syz_genetlink_get_family_id$auto_mac80211_hwsim-prctl$auto-openat$auto_usbdev_file_operations_usb-openat$auto_snd_rawmidi_f_ops_rawmidi-setsockopt$auto_SO_WIFI_STATUS-mmap$auto-mmap$auto-socketpair$auto-socket-setsockopt$auto-openat$auto_sco_debugfs_fops_-openat$auto_snd_timer_f_ops_timer-ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64-prctl$auto-mmap$auto-openat$auto_def_blk_fops_fs-preadv2$auto-mmap$auto-openat$auto_tty_fops_tty_io-sendfile$auto-pread64$auto-sendmmsg$auto-socket-getsockopt$auto
detailed listing:
executing program 0:
r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x0) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) (async)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x20200, 0x0)
setsockopt$auto_SO_WIFI_STATUS(r2, 0x4, 0x29, &(0x7f0000000300)='\x05\a\x89\xaa([\xa8\x92\x0e=\xc0\xacJ\x9b\xd9u;\x87\x12eDg[\x11\xfed\x03\x9c\xa8oB\xa62\xec\xb7-cs\x03\xd9\xbc\x7f+\xdb\xc02\xf5;\xb1e\x05\xbd#\xf0\xbbf\xd4\xfe\x99\x7f\xc6j\xb3|\x87\x99\xca\x9b\xa4\x02J\xc6\xfb\x04\x95\x94\xa9\xd1\xa7\t\xe7\xb5\xd1\xf8`\xc1\xb8\x13\xfd;\xc3\xb5\xfeC\x01\xe5G(\xc2\xc7r\x90\xd3Op\x95\x925CZa\xcd*J*1ueJ\x9b\x97\x9e\x04\xa6\t\xa0X\x18\x8fl\xd7c\xf9!\xc3+dW\xf4>\xd8\xa4$\xc7\xa1y\xfc\x9b;r\xc7\xbf\xfdg\xc3\xee\x1a\xe3\xb1\xc3o\xb1\x84y\x93\x7f/ngp\xa1\x92\x88H\xfa\xa8\xb1r\xee\x00'/195, 0x40)
mmap$auto(0x100000000009, 0x20009, 0x4000000000df, 0xebd, 0x401, 0x0) (async)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
r4 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r4, 0x29, 0x43, &(0x7f0000000040)='\xa1\x00', 0x4) (async)
openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x101342, 0x0) (async)
r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, 0x0) (async, rerun: 32)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x9f, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) (rerun: 64)
preadv2$auto(r6, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f)
mmap$auto(0x8000000000000000, 0x4120008, 0x46, 0xeb1, 0x401, 0x8000) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async, rerun: 32)
pread64$auto(r3, &(0x7f0000000240)='/3Cocw\x00\x03\x00\x00\x00\x17\x00\x00\x00ipt3\x00\xc3\xa9[/\xd4>p\xaeL@N&-\x1d\xb7\x86\xdc\xa8_3.\xa1\\\xee\xc7\xb4*8\xd6\xc04KDh\xc9\xce\xbe\x16\xca\xaaO\'\xfb\v\b\vM\x00e\xd6\xb9z\xdc\x12\x8f\x9d\x88\xad\xaav1\v\x06\xe79\xb9C\f\x875j\x00\x14\xa7\x7f\x1d\xf0\xf5\xc4\xe4nLc%\x80\xa95\xc3\xc2\xf0}\x05A\xa7\\\x9fC1\x9ci\x13\xbeq\xc8\'\xb8\x8amW\xf9\xe5\xf1\x1a\xe1\x8eTS\x97\xfbx\xb9#\xd9\x03\xcbz\x11\xb2\x04\\\xc0w\xeaS\xad8I$\xa0\x8c\xc4[\x04\xa4\x9a\x8b\xf5og\xee', 0x34b, 0xffff) (rerun: 32)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2a, 0xa, 0x1) (async)
getsockopt$auto(0xffffffffffffffff, 0x38, 0x8000, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-bpf$auto-openat$auto_def_blk_fops_fs-sendmsg$auto_NL80211_CMD_GET_STATION-openat$auto_snd_rawmidi_f_ops_rawmidi-openat$auto_stats_fops_-pread64$auto-prctl$auto-write$auto-mmap$auto-msync$auto-fanotify_mark$auto-getdents$auto-sendfile$auto-socket$nl_generic-sendmsg$auto_IPVS_CMD_GET_DAEMON-writev$auto-openat$auto_hsr_node_table_fops_-socket-socket-mmap$auto-mmap$auto-bind$auto-unshare$auto-mmap$auto-pipe2$auto-ioctl$auto-mlock$auto-openat$auto_kernfs_file_fops_kernfs_internal-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd)
r0 = bpf$auto(0x0, &(0x7f00000001c0)=@batch={0x6, 0xffffffffffffffff, 0x6, 0x9, 0x8, <r1=>0xffffffffffffffff, 0x45, 0xffff}, 0x6f6)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendmsg$auto_NL80211_CMD_GET_STATION(r1, 0x0, 0x10000841)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
pread64$auto(r3, 0x0, 0x2, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r3, 0x300000000000)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x1000000009, r0, 0x0)
getdents$auto(0xffffffffffffffff, 0x0, 0x400018)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
writev$auto(0xffffffffffffffff, 0x0, 0x8)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
socket(0xf, 0x3, 0x2)
socket(0xf, 0x3, 0x2)
mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
mmap$auto(0x400000000, 0x6, 0xdf, 0x9b76, 0x2, 0x72)
bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x6d)
unshare$auto(0x40000080)
mmap$auto(0x1, 0x2020008, 0x3, 0xfc, 0xfffffffffffffffa, 0x8000)
r5 = pipe2$auto(0x0, 0x80)
ioctl$auto(r5, 0x5761, 0x4)
mlock$auto(0x100000001, 0x8)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0)
write$auto(r6, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-write$auto-openat$auto_console_fops_tty_io-openat$auto_show_traces_fops_trace-openat$auto_snd_rawmidi_f_ops_rawmidi-bpf$auto-socket-bpf$auto-socket$nl_generic-bpf$auto-prctl$auto-syz_genetlink_get_family_id$auto_nl80211-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_NL80211_CMD_SET_WIPHY-sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA-write$auto-openat$auto_kernfs_file_fops_kernfs_internal-sendmsg$auto_ETHTOOL_MSG_PAUSE_SET-write$auto-mmap$auto-unshare$auto-mmap$auto-setrlimit$auto-socket-mmap$auto-madvise$auto-syz_clone-socket-pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP
detailed listing:
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x826c0, 0x0) (async, rerun: 32)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r3=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r4=>0x5f, 0x0, 0x3}, 0x6f3)
r5 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=<r6=>0x4, 0x4, @old_prog_fd=r3}, 0xa3)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = bpf$auto(0x8000000, &(0x7f0000000000)=@bpf_attr_3={0x5, 0x5, 0x2, 0x7ff, 0x6e8f, 0x9, 0xcb0, 0x0, 0x8, "d4646038b8c15ed6cd89a653d775f8b9", 0x0, 0x6, r4, 0x10001, 0x8, 0x1, 0x0, 0x200, 0x0, 0x2, @attach_btf_obj_fd=r1, 0x9, 0x2, 0x6, 0x7, 0x3, 0xffffffffffffffff, r6}, 0x0) (rerun: 64)
r8 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r11=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x24, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async)
sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x114, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xe9, 0xba, "dafc77637db0e596382d552ca7a39d79fa55931c06c936d3fcce66fc8b4f3feabc236a69e003c0fcc18c7d343a0d0efb751a74038e9d7126bf62f3813bc66b5591aa3e50253673cff048d0025c941a41b2adb4a7ac3a0de1b38b3b26ac82b1bd7fac772bb132dcb97f7f2ced4a96fe301d97cf064aa96c2ae2f332b70013044dc9cd9856167cd0e5305aff6ff63a3422dd4225a09e0b433f0791f7e9d18d8fa00cc291f3744e1493ce0c6a5630d6864616bd621ea4006f292402503104ffb18fdda706fa93f66a163981c1f726f3785614e76a10f23f58f534efac565f4ae57f0ac980a166"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x8629}, @NL80211_ATTR_WIPHY_NAME={0x6, 0x2, '$\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) (async, rerun: 32)
r12 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) (async, rerun: 32)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r8, 0x0, 0x24000000)
write$auto(r12, 0x0, 0x98c7) (async)
mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x2, 0x8000) (async)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
setrlimit$auto(0x7, 0x0) (async, rerun: 32)
socket(0x23, 0x80805, 0x0) (rerun: 32)
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
r13 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x3b) (async)
pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x4, &(0x7f0000000240)={@siginfo_0_0={0xffffd034, 0x4, 0x0, @_timer={r13, 0x0, @sival_int=0x8001, 0xd5ba}}}, 0x3)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_nl80211-mmap$auto-socket-openat$nci-openat$auto_snd_rawmidi_f_ops_rawmidi-openat$auto_tty_fops_tty_io-socket-socket-socketpair$auto-write$auto-mmap$auto-mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto_clear_warn_once_fops_-mmap$auto-sendmmsg$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-ioctl$auto-mmap$auto-close_range$auto-socket$nl_generic-close_range$auto-mmap$auto-close_range$auto-socket-openat$auto_force_wakeup_fops_hci_vhci-read$auto_force_wakeup_fops_hci_vhci-syz_genetlink_get_family_id$auto_nl80211
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
r1 = socket(0x15, 0x5, 0x0)
socket(0xa, 0x1, 0x84)
r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
write$auto(0x6, 0x0, 0x100000001)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0x1a29, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0)
read$auto_clear_warn_once_fops_(r2, &(0x7f0000000300)=""/169, 0xa9)
mmap$auto(0xfffffffd, 0x100, 0x7ffffffb, 0x13, r1, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
r3 = socket(0x29, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x25, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$auto(r3, 0x8b0f, 0x24)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffe)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
r4 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci1/force_wakeup\x00', 0x101200, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r4, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3)

program did not crash
single: failed to extract reproducer
bisect: bisecting 25 programs with base timeout 6m0s
testing program (duration=6m6s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 24, 30, 30, 19, 30, 30, 20, 11, 30, 38, 38, 5, 14, 9, 6, 9, 9, 19, 21, 30, 30, 30, 30, 30]
detailed listing:
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
prctl$auto_PR_SET_MM(0x23, 0x7, 0xffffffffffffffff, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = memfd_create$auto(0x0, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
fcntl$auto_F_SETLKW(r0, 0x7, 0x6)
write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x47, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804})
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D1\x00', 0x0, 0x0)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad199752151699faea53575d94e9e2f930abeb4f1cd2fa58eef0e25b15baeca5f900c19f32e51de1ba99fb4f828712", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x6, 0x9ffd, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd})
mmap$auto(0x0, 0x5, 0x3, 0x14, r2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x1d)
pwrite64$auto(0xc8, 0x0, 0xfded, 0x6)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r3, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x11, 0x80003, 0x300)
socket(0x29, 0x5, 0x0)
open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000fddbdf250c0000000c00038008007c00ac1414bb14000180080003001bffdfff08000100", @ANYRES32=0x0, @ANYBLOB="2c0003800a006d0024265c30210000001c00e98008005800", @ANYRES32=r0, @ANYBLOB="08009600", @ANYRES32=0x0, @ANYBLOB='\b\x00m\x00', @ANYRES32=0x0, @ANYBLOB="cb0063eb7e664bcd3055eb1bddd2b7f7e30f3c2118a80313cd5d1d1093bea0058e48c80e0ab380006916"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x1084)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/mem\x00', 0x401, 0x0)
executing program 1:
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x72f29539, 0x1b, 0x401, 0x100000002)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
ioctl$auto_MON_IOCH_MFLUSH(r1, 0x9208, 0x0)
copy_file_range$auto(r1, 0x0, r1, 0x0, 0x2, 0x0)
bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)=@link_create={@map_fd=r1, @target_fd=r0, 0x400, 0x6bb, @netfilter={0x7f, 0x5, 0xcf, 0x9}}, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000)
executing program 2:
socket(0x2, 0x3, 0xa)
r0 = socket(0x22, 0x1, 0x2)
unshare$auto(0x1a)
setsockopt$auto(0x3, 0x1, 0xc8, 0xfffffffffffffffc, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getsockopt$auto(r0, 0x84, 0x7c, 0x0, 0x0)
prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x384, 0x1)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.7/usb23/interface_authorized_default\x00', 0x68e00, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/93, 0x5d)
poll$auto(0x0, 0x5, 0x400)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0)
mmap$auto(0x0, 0x2020009, 0x4, 0xf8, 0xffffffffffffffff, 0x517a)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0)
r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42840, 0x95)
read$auto(r2, 0x0, 0x1)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000000))
mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3fd)
open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101800, 0x7)
socket(0xf, 0x1, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 0:
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001a80), r0)
mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0))
connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8)
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r3)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyq1\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000440)=""/82, 0x52)
ioctl$auto_TIOCSWINSZ2(r5, 0x5414, &(0x7f00000001c0))
ioctl$auto(0xffffffffffffffff, 0x80a86f3d, 0x38)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab40, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ptybd/dev\x00', 0x2440, 0x0)
read$auto(r6, 0x0, 0x20)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0xca, &(0x7f0000000180)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2', 0x4)
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0)
r2 = setfsuid$auto(0xee00)
setreuid$auto(r2, 0x0)
r3 = waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x2001, 0x0)
shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r2, 0x0, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r3, @raw=0x5, 0x5, 0x0, 0x0, 0x0})
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x4}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r3}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x4}]}, 0x2c}}, 0x8000)
getdents64$auto(r0, 0x0, 0x400)
mmap$auto(0x0, 0x2020008, 0x1000000000000007, 0xeb1, 0x0, 0x1008000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2)
io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7)
executing program 2:
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(0xffffffffffffffff, 0xd, &(0x7f00000005c0)='bRidge_slav\x81\x99\xd1\x9b\x01\xd0\xdc\xe0\x0f\tQZ\xe4V3\xf0}\x01\xcbq\x89\xa7.\xd4\x94k\x843\xaf\xb9\xb5\xb9\fj\x0e\xb3\x1b.\xe9\x02\xba\x13\xde\'\xb6\xcfY\x8c\xefh\xffD`\xcd\x99W\x16*\xfb8\x16jnl\xcd3\xf7\xae\xa6\xa8B\xb78\x04f\xd97\xd75H\xd5r-\xe1ZO\t6\xad$\xfc\x04\x0f\xa4\x03\xcf\xc0z\xcd\xd20\xe3\x8fc\xcc\xf5\xad\r\r\xd7;~\x18/8f=\x03u\xa4A\xb9XE$\xc5\xbd0\x05\xca\x9a|\x96o@1Q\xf1\x82\xd9\x8f\xd0\xc6\x8b\x85W\b\xd1A\x01\xac+H\xae\xdd\xe59d[\xabV\xa2\xe3\xeb\x84L\xb8\x89\x99\xdc\x94$/X\xc8\x93\xf9\xec\xf3\'\xa4y>HzS>\xea]\t\xd2\r\xfc\xd2\xe8\xdf\xb9\\\x19\x19\xf9[\xd4\xab\x98\xcb\xd8\xe4\x84co7\n\"z\xb9;\x82\xe3}@\xe6h`@\xea\xd6\xa2\xe8EB\xb6\xbc\x81\x10\xf1qXX\xe4\x8a\x16[\xde\\\xa6\x87\\\x87\xfe)\xc8\xec\xc2\xe4\x06G\x18\xee\xe9\xf5l\xd8%\xd0#\bC\xea\xb0\xa8\xf7\x8b,\xdb\xa6\xfe<\x8a\xf67\x1d\xcc\x85\x13\x820\xb67\x9at\xb2\xf3\x03\xf0\xa6\x8e\xedN\x9cNJL<\xf7\xb9J$,G\x00\xdc\xd1a\xcc\x821\xfc\xc0\x96G\x85\x801\xdf7\xc6\xa3\x87H\xba\xc6#\x96\x10\xb0\xc9\xbe\"-L\x97\xe7\xcaX=[\x90\xd0\xf5^/\xd0\xe3\xdeb\xbacO/@\xfao\xbb\xfc\xe4\xf4A\xfc\x17\x80\xcc\xf8\x97\xefJ\xdd\xf5\t\x95\x95\x0eZR\x05\xc4r^\xbcm\x85w^\x16\x8b\xca\xb6\xdf\xb0\xb3\x16', 0x0, 0x4)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0)
r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42840, 0x95)
read$auto(r1, 0x0, 0x1)
writev$auto(0x3, &(0x7f0000000040)={0x0, 0x1}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000000))
mmap$auto(0x0, 0x2020009, 0x3, 0xebd, 0xfffffffffffffffa, 0x80000001)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3fd)
open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101800, 0x7)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x3, 0x2)
getsockopt$auto(r2, 0xfffffffd, 0x3, 0x0, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x1d1483, 0x0)
ioctl$auto_SNDCTL_TMR_CONTINUE(r3, 0x5404, &(0x7f0000000000))
madvise$auto(0xfffffffffffffffe, 0x240007, 0x17)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r5, 0x1, 0x170bd2b, 0x25dfdbfd}, 0x14}}, 0x4000)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyub\x00', 0x682, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/rxrpc/calls\x00', 0x2, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mpls/conf/caif0/input\x00', 0x82, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bond0/bonding/ad_actor_sys_prio\x00', 0x942, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty20\x00', 0x800, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
clone$auto(0x20003b44, 0x2, 0x0, 0x0, 0x2)
ioctl$auto(r2, 0x541c, r3)
write$auto(r1, 0x0, 0x4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x5)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)
newfstatat$auto(r0, 0x0, &(0x7f00000002c0)={0x0, 0x8000000000000001, 0x98dc, 0xd1cb, 0xee01, 0xee00, 0x0, 0x0, 0x4, 0x3, 0x7fff, 0x8, 0x10, 0x800, 0x8, 0x8}, 0x4)
executing program 1:
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r0 = socketpair$auto(0x1e, 0x4, 0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0)
mmap$auto(0x0, 0x10000, 0xde, 0x11, r1, 0x28000)
madvise$auto(0x0, 0x2000040080000008, 0x2)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r4, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4)
bpf$auto(0x7fffffff, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex=r5, r2, 0xd, 0x360f51, r2, @relative_id=0x7}, 0x8001)
fchmodat2$auto(0xffffffffffffffff, 0x0, 0x9, 0x0)
executing program 2:
r0 = socket(0x10, 0x3, 0x6)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvtap0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xf1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x20000000)
r3 = socket(0xa, 0x1, 0x84)
syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000000), r3)
io_uring_setup$auto(0x401, 0x0)
getsockopt$auto(r3, 0x84, 0x14, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000009decbc8659d76171c179b2e94c9cfe1d79759520941644d336e5213561f5640ca221a6ce93e5128f", @ANYRES16=r4, @ANYBLOB="21032cbd7000fddbdf2539000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8800)
executing program 3:
mmap$auto(0x8000000000000000, 0x400004, 0xd9, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x28c83, 0x0)
mmap$auto(0xfffffffffffffffd, 0x2000a, 0x7, 0xffffffffff7ffc10, 0xffffffffffffffff, 0x8000)
socket(0xf, 0x4, 0xfffffffb)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
ioperm$auto(0x5, 0x1, 0x3)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
r3 = ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r4, 0x4, 0x7ff)
ptrace$auto(0x10, r4, 0x1, 0x94d1)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
bind$auto(0xffffffffffffffff, &(0x7f0000000200)=@phonet={0x23, 0xde, 0x4, 0x7f}, 0x13)
r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), r3)
sendmsg$auto_KSMBD_EVENT_STARTING_UP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008804)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{@inferred, 0x0, 0x7, 0x9, "86362c746689ae16423d49e2a5fac50222481f59df3b96ecafc32c611fb62b6a5bf25912cc9eef3b7eecb84e", @inferred=r4}, 0xfffffff8, 0x0, 0x8, @inferred, @enumerated={0x0, 0xe, "063c3f8c31bd55e86cf2db8ad963f8acde068a5d66b9161c0c0e45a531cfd4466ec74dca749cb5dbee3aa6411af4226fea81fed17eb5c3fa4a3fdfef2115a1cc", 0x7, 0x3}, "64308865bdb8fe205493f2f3569408bb7d10494bf8fc846ceedb75db3060a310a150948a4f3363f2b46b45d914b5f8bb0ef5f2140011508bb0bc88e4d72c9001"})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
executing program 2:
mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd) (async)
mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd)
bpf$auto(0x0, &(0x7f00000001c0)=@batch={0x6, 0xffffffffffffffff, 0x6, 0x9, 0x8, 0xffffffffffffffff, 0x45, 0xffff}, 0x6f6)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x8102, 0x0)
pread64$auto(r2, 0x0, 0x2, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r2, 0x300000000000)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
fanotify_mark$auto(0xffffffffffffffff, 0x5, 0x1000000009, r3, 0x0)
getdents$auto(r0, 0x0, 0x1)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
writev$auto(0xffffffffffffffff, 0x0, 0x8) (async)
writev$auto(0xffffffffffffffff, 0x0, 0x8)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) (async)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
socket(0xf, 0x3, 0x2) (async)
socket(0xf, 0x3, 0x2)
socket(0xf, 0x3, 0x2)
mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
mmap$auto(0x400000000, 0x6, 0xdf, 0x9b76, 0x2, 0x72)
bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x6a)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
r5 = pipe2$auto(0x0, 0x80)
ioctl$auto(r5, 0x5761, 0x4)
mlock$auto(0x100000001, 0x8) (async)
mlock$auto(0x100000001, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x2f0000, 0x0) (async)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x2f0000, 0x0)
write$auto(r6, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81)
executing program 1:
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
mprotect$auto(0x110c230000, 0xa588, 0x6)
r0 = prctl$auto(0x1, 0x40ba3, 0x0, 0x4000000001ff, 0x17)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8842, 0x0) (async)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8842, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x400008000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x400008000)
r1 = io_uring_setup$auto(0x4, 0x0)
close_range$auto(0x2, r1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) (async)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0)
sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828a57000fbdbdf257700000005002001c20000000800cb00010000000400d100"], 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x48000)
open(0x0, 0x22240, 0x55)
fanotify_init$auto(0x8, 0x1) (async)
fanotify_init$auto(0x8, 0x1)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000840)='/proc/kmsg\x00', 0x0, 0x0) (async)
r4 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000840)='/proc/kmsg\x00', 0x0, 0x0)
read$auto_fops_u32_(r4, &(0x7f0000000880)=""/17, 0x11)
ioctl$auto_SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000100)="b8241412a34e3396f7") (async)
ioctl$auto_SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000100)="b8241412a34e3396f7")
sendmsg$auto_OVS_METER_CMD_DEL(r4, 0x0, 0x4000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
shmctl$auto_IPC_INFO(0x8, 0x3, &(0x7f0000000140)={{0x6, 0xee00, 0x0, 0x6, 0xe, 0x5, 0x81}, 0x1, 0xd1, 0x5, 0x1, @inferred, @inferred, 0x40, 0x0, &(0x7f0000000080)="ce51cf56c4812643b8f6212770bcfaf669aa20dab48da22c72c80577e2", &(0x7f00000000c0)="5cee4eb2f8653156b4a491b2390308b8de0e0a20a004d4798873ad597f3ba6c39d5891048b5b47108d6cb477"})
executing program 0:
ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0xffffffffffffffff)
r0 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/thread-self/gid_map\x00', 0x802, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0)
write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000001c0)="ce890a", 0x3)
pread64$auto(r0, &(0x7f0000000180)='\x03W\x96K\x15\x00\x00\xe8Q\x037\x00\x00\x00\x00\x00\x00<\x00\x00\x10', 0x100000002, 0x2)
executing program 3:
mount$auto(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8005)
prctl$auto_PR_SET_VMA(0x53564d41, 0x20000, 0x4, 0x8000, 0x2)
prctl$auto_PR_SET_VMA(0x53564d41, 0x1, 0xbf, 0xd, 0x3)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
pivot_root$auto(&(0x7f00000000c0)='\x00+\xdf\xe6 \x0426J\xc4', &(0x7f00000001c0)='.\x00')
mount$auto(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8005) (async)
prctl$auto_PR_SET_VMA(0x53564d41, 0x20000, 0x4, 0x8000, 0x2) (async)
prctl$auto_PR_SET_VMA(0x53564d41, 0x1, 0xbf, 0xd, 0x3) (async)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) (async)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async)
pivot_root$auto(&(0x7f00000000c0)='\x00+\xdf\xe6 \x0426J\xc4', &(0x7f00000001c0)='.\x00') (async)
executing program 2:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
close_range$auto(0x2, 0x8, 0xfffffffc)
io_uring_setup$auto(0x4, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 0:
r0 = socket(0xa, 0x1, 0x100)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0xc)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x6)
r1 = socket(0x18, 0x5, 0x1)
connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
accept$auto(r0, 0x0, 0x0)
executing program 3:
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0)
r1 = setfsuid$auto(0xee00)
mprotect$auto(0x1, 0x0, 0xfffffffffffffff9) (async)
mprotect$auto(0x1, 0x0, 0xfffffffffffffff9)
setresuid$auto(0xffffffffffffffff, r1, 0xffffffffffffffff)
unshare$auto(0x10)
executing program 3:
io_uring_setup$auto(0x7, &(0x7f0000000080)={0x4, 0x4b8c, 0xfffffffe, 0x7fffffff, 0x3, 0x80000001, 0xffffffffffffffff, [0x5, 0x52c5, 0x9], {0x7, 0x1000, 0x6, 0x2, 0x80000000, 0xff, 0x8c, 0x5000000, 0x2}, {0xc3d, 0xffff, 0x4, 0x7, 0x2, 0x8, 0x7, 0x6a, 0x2}})
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
getdents64$auto(r1, 0x0, 0x400)
ioctl$auto(r0, 0x2284, 0xffffffffffffffff)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2a, 0x2, 0xb)
close_range$auto(0x0, 0xffffeffe, 0x2)
r1 = pipe$auto(0x0)
pipe$auto(0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"})
ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0xf8000000, 0x3, 0x0, 0xe, 0x6, "938ea2d173ab8e40fe2a9879b43f6898a29bf86e6f7633000000c1be6e8e7ccf39c1f0f49e7e168eeb6c1e333da4c61f57ff1de9d205133fc67c2e1d"})
r3 = fcntl$auto(r0, 0x5, 0x6)
r4 = socket(0x2, 0x5, 0x0)
r5 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x24044800)
r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
ioctl$auto(r6, 0x2285, 0x1cfc4b42)
r7 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r7, 0x29, 0x43, 0x0, 0x3)
setsockopt$auto(r4, 0x0, 0x10, 0x0, 0x17)
close_range$auto(0x2, 0x8, 0x0)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch4\x00', 0x40000, 0x0)
ioctl$auto(r2, 0xc0045627, r2)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/loginuid\x00', 0x101000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/5/smp_affinity\x00', 0x129542, 0x0)
read$auto(0x3, 0x0, 0xf34)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040840}, 0x8000)
writev$auto(0x3, &(0x7f00000001c0)={0x0, 0x3}, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000)
getsockopt$auto(0x100000006, 0x11, 0x68, 0xfffffffffffffffc, 0x0)
executing program 1:
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
r1 = socket(0x15, 0x5, 0x0)
socket(0xa, 0x1, 0x84)
r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
write$auto(0x6, 0x0, 0x100000001)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0x1a29, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0)
read$auto_clear_warn_once_fops_(r2, &(0x7f0000000300)=""/169, 0xa9)
mmap$auto(0xfffffffd, 0x100, 0x7ffffffb, 0x13, r1, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
r3 = socket(0x29, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x25, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$auto(r3, 0x8b0f, 0x24)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffe)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
r4 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci1/force_wakeup\x00', 0x101200, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r4, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3)
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x826c0, 0x0) (async, rerun: 32)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r3=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r4=>0x5f, 0x0, 0x3}, 0x6f3)
r5 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=<r6=>0x4, 0x4, @old_prog_fd=r3}, 0xa3)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = bpf$auto(0x8000000, &(0x7f0000000000)=@bpf_attr_3={0x5, 0x5, 0x2, 0x7ff, 0x6e8f, 0x9, 0xcb0, 0x0, 0x8, "d4646038b8c15ed6cd89a653d775f8b9", 0x0, 0x6, r4, 0x10001, 0x8, 0x1, 0x0, 0x200, 0x0, 0x2, @attach_btf_obj_fd=r1, 0x9, 0x2, 0x6, 0x7, 0x3, 0xffffffffffffffff, r6}, 0x0) (rerun: 64)
r8 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r11=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x24, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async)
sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x114, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xe9, 0xba, "dafc77637db0e596382d552ca7a39d79fa55931c06c936d3fcce66fc8b4f3feabc236a69e003c0fcc18c7d343a0d0efb751a74038e9d7126bf62f3813bc66b5591aa3e50253673cff048d0025c941a41b2adb4a7ac3a0de1b38b3b26ac82b1bd7fac772bb132dcb97f7f2ced4a96fe301d97cf064aa96c2ae2f332b70013044dc9cd9856167cd0e5305aff6ff63a3422dd4225a09e0b433f0791f7e9d18d8fa00cc291f3744e1493ce0c6a5630d6864616bd621ea4006f292402503104ffb18fdda706fa93f66a163981c1f726f3785614e76a10f23f58f534efac565f4ae57f0ac980a166"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x8629}, @NL80211_ATTR_WIPHY_NAME={0x6, 0x2, '$\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) (async, rerun: 32)
r12 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) (async, rerun: 32)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r8, 0x0, 0x24000000)
write$auto(r12, 0x0, 0x98c7) (async)
mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x2, 0x8000) (async)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
setrlimit$auto(0x7, 0x0) (async, rerun: 32)
socket(0x23, 0x80805, 0x0) (rerun: 32)
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
r13 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x3b) (async)
pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x4, &(0x7f0000000240)={@siginfo_0_0={0xffffd034, 0x4, 0x0, @_timer={r13, 0x0, @sival_int=0x8001, 0xd5ba}}}, 0x3)
executing program 2:
mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd)
r0 = bpf$auto(0x0, &(0x7f00000001c0)=@batch={0x6, 0xffffffffffffffff, 0x6, 0x9, 0x8, <r1=>0xffffffffffffffff, 0x45, 0xffff}, 0x6f6)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendmsg$auto_NL80211_CMD_GET_STATION(r1, 0x0, 0x10000841)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
pread64$auto(r3, 0x0, 0x2, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r3, 0x300000000000)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x1000000009, r0, 0x0)
getdents$auto(0xffffffffffffffff, 0x0, 0x400018)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
writev$auto(0xffffffffffffffff, 0x0, 0x8)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
socket(0xf, 0x3, 0x2)
socket(0xf, 0x3, 0x2)
mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
mmap$auto(0x400000000, 0x6, 0xdf, 0x9b76, 0x2, 0x72)
bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x6d)
unshare$auto(0x40000080)
mmap$auto(0x1, 0x2020008, 0x3, 0xfc, 0xfffffffffffffffa, 0x8000)
r5 = pipe2$auto(0x0, 0x80)
ioctl$auto(r5, 0x5761, 0x4)
mlock$auto(0x100000001, 0x8)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0)
write$auto(r6, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81)
executing program 0:
r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x0) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) (async)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x20200, 0x0)
setsockopt$auto_SO_WIFI_STATUS(r2, 0x4, 0x29, &(0x7f0000000300)='\x05\a\x89\xaa([\xa8\x92\x0e=\xc0\xacJ\x9b\xd9u;\x87\x12eDg[\x11\xfed\x03\x9c\xa8oB\xa62\xec\xb7-cs\x03\xd9\xbc\x7f+\xdb\xc02\xf5;\xb1e\x05\xbd#\xf0\xbbf\xd4\xfe\x99\x7f\xc6j\xb3|\x87\x99\xca\x9b\xa4\x02J\xc6\xfb\x04\x95\x94\xa9\xd1\xa7\t\xe7\xb5\xd1\xf8`\xc1\xb8\x13\xfd;\xc3\xb5\xfeC\x01\xe5G(\xc2\xc7r\x90\xd3Op\x95\x925CZa\xcd*J*1ueJ\x9b\x97\x9e\x04\xa6\t\xa0X\x18\x8fl\xd7c\xf9!\xc3+dW\xf4>\xd8\xa4$\xc7\xa1y\xfc\x9b;r\xc7\xbf\xfdg\xc3\xee\x1a\xe3\xb1\xc3o\xb1\x84y\x93\x7f/ngp\xa1\x92\x88H\xfa\xa8\xb1r\xee\x00'/195, 0x40)
mmap$auto(0x100000000009, 0x20009, 0x4000000000df, 0xebd, 0x401, 0x0) (async)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
r4 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r4, 0x29, 0x43, &(0x7f0000000040)='\xa1\x00', 0x4) (async)
openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x101342, 0x0) (async)
r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, 0x0) (async, rerun: 32)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x9f, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) (rerun: 64)
preadv2$auto(r6, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f)
mmap$auto(0x8000000000000000, 0x4120008, 0x46, 0xeb1, 0x401, 0x8000) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async, rerun: 32)
pread64$auto(r3, &(0x7f0000000240)='/3Cocw\x00\x03\x00\x00\x00\x17\x00\x00\x00ipt3\x00\xc3\xa9[/\xd4>p\xaeL@N&-\x1d\xb7\x86\xdc\xa8_3.\xa1\\\xee\xc7\xb4*8\xd6\xc04KDh\xc9\xce\xbe\x16\xca\xaaO\'\xfb\v\b\vM\x00e\xd6\xb9z\xdc\x12\x8f\x9d\x88\xad\xaav1\v\x06\xe79\xb9C\f\x875j\x00\x14\xa7\x7f\x1d\xf0\xf5\xc4\xe4nLc%\x80\xa95\xc3\xc2\xf0}\x05A\xa7\\\x9fC1\x9ci\x13\xbeq\xc8\'\xb8\x8amW\xf9\xe5\xf1\x1a\xe1\x8eTS\x97\xfbx\xb9#\xd9\x03\xcbz\x11\xb2\x04\\\xc0w\xeaS\xad8I$\xa0\x8c\xc4[\x04\xa4\x9a\x8b\xf5og\xee', 0x34b, 0xffff) (rerun: 32)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2a, 0xa, 0x1) (async)
getsockopt$auto(0xffffffffffffffff, 0x38, 0x8000, 0x0, 0x0)
executing program 32:
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
r1 = socket(0x15, 0x5, 0x0)
socket(0xa, 0x1, 0x84)
r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
write$auto(0x6, 0x0, 0x100000001)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0x1a29, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0)
read$auto_clear_warn_once_fops_(r2, &(0x7f0000000300)=""/169, 0xa9)
mmap$auto(0xfffffffd, 0x100, 0x7ffffffb, 0x13, r1, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
r3 = socket(0x29, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x25, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$auto(r3, 0x8b0f, 0x24)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffe)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
r4 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci1/force_wakeup\x00', 0x101200, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r4, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3)

program crashed: INFO: task hung in corrupted
bisect: bisecting 25 programs
bisect: split chunks (needed=false): <25>
bisect: split chunk #0 of len 25 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=6m4s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 38, 38, 5, 14, 9, 6, 9, 9, 19, 21, 30, 30, 30, 30, 30]
detailed listing:
executing program 3:
mmap$auto(0x8000000000000000, 0x400004, 0xd9, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x28c83, 0x0)
mmap$auto(0xfffffffffffffffd, 0x2000a, 0x7, 0xffffffffff7ffc10, 0xffffffffffffffff, 0x8000)
socket(0xf, 0x4, 0xfffffffb)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
ioperm$auto(0x5, 0x1, 0x3)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
r3 = ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r4, 0x4, 0x7ff)
ptrace$auto(0x10, r4, 0x1, 0x94d1)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
bind$auto(0xffffffffffffffff, &(0x7f0000000200)=@phonet={0x23, 0xde, 0x4, 0x7f}, 0x13)
r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), r3)
sendmsg$auto_KSMBD_EVENT_STARTING_UP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008804)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{@inferred, 0x0, 0x7, 0x9, "86362c746689ae16423d49e2a5fac50222481f59df3b96ecafc32c611fb62b6a5bf25912cc9eef3b7eecb84e", @inferred=r4}, 0xfffffff8, 0x0, 0x8, @inferred, @enumerated={0x0, 0xe, "063c3f8c31bd55e86cf2db8ad963f8acde068a5d66b9161c0c0e45a531cfd4466ec74dca749cb5dbee3aa6411af4226fea81fed17eb5c3fa4a3fdfef2115a1cc", 0x7, 0x3}, "64308865bdb8fe205493f2f3569408bb7d10494bf8fc846ceedb75db3060a310a150948a4f3363f2b46b45d914b5f8bb0ef5f2140011508bb0bc88e4d72c9001"})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
executing program 2:
mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd) (async)
mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd)
bpf$auto(0x0, &(0x7f00000001c0)=@batch={0x6, 0xffffffffffffffff, 0x6, 0x9, 0x8, 0xffffffffffffffff, 0x45, 0xffff}, 0x6f6)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x8102, 0x0)
pread64$auto(r2, 0x0, 0x2, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r2, 0x300000000000)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
fanotify_mark$auto(0xffffffffffffffff, 0x5, 0x1000000009, r3, 0x0)
getdents$auto(r0, 0x0, 0x1)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
writev$auto(0xffffffffffffffff, 0x0, 0x8) (async)
writev$auto(0xffffffffffffffff, 0x0, 0x8)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) (async)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
socket(0xf, 0x3, 0x2) (async)
socket(0xf, 0x3, 0x2)
socket(0xf, 0x3, 0x2)
mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
mmap$auto(0x400000000, 0x6, 0xdf, 0x9b76, 0x2, 0x72)
bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x6a)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
r5 = pipe2$auto(0x0, 0x80)
ioctl$auto(r5, 0x5761, 0x4)
mlock$auto(0x100000001, 0x8) (async)
mlock$auto(0x100000001, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x2f0000, 0x0) (async)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x2f0000, 0x0)
write$auto(r6, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81)
executing program 1:
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
mprotect$auto(0x110c230000, 0xa588, 0x6)
r0 = prctl$auto(0x1, 0x40ba3, 0x0, 0x4000000001ff, 0x17)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8842, 0x0) (async)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8842, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x400008000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x400008000)
r1 = io_uring_setup$auto(0x4, 0x0)
close_range$auto(0x2, r1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) (async)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0)
sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828a57000fbdbdf257700000005002001c20000000800cb00010000000400d100"], 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x48000)
open(0x0, 0x22240, 0x55)
fanotify_init$auto(0x8, 0x1) (async)
fanotify_init$auto(0x8, 0x1)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000840)='/proc/kmsg\x00', 0x0, 0x0) (async)
r4 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000840)='/proc/kmsg\x00', 0x0, 0x0)
read$auto_fops_u32_(r4, &(0x7f0000000880)=""/17, 0x11)
ioctl$auto_SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000100)="b8241412a34e3396f7") (async)
ioctl$auto_SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000100)="b8241412a34e3396f7")
sendmsg$auto_OVS_METER_CMD_DEL(r4, 0x0, 0x4000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
shmctl$auto_IPC_INFO(0x8, 0x3, &(0x7f0000000140)={{0x6, 0xee00, 0x0, 0x6, 0xe, 0x5, 0x81}, 0x1, 0xd1, 0x5, 0x1, @inferred, @inferred, 0x40, 0x0, &(0x7f0000000080)="ce51cf56c4812643b8f6212770bcfaf669aa20dab48da22c72c80577e2", &(0x7f00000000c0)="5cee4eb2f8653156b4a491b2390308b8de0e0a20a004d4798873ad597f3ba6c39d5891048b5b47108d6cb477"})
executing program 0:
ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0xffffffffffffffff)
r0 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/thread-self/gid_map\x00', 0x802, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0)
write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000001c0)="ce890a", 0x3)
pread64$auto(r0, &(0x7f0000000180)='\x03W\x96K\x15\x00\x00\xe8Q\x037\x00\x00\x00\x00\x00\x00<\x00\x00\x10', 0x100000002, 0x2)
executing program 3:
mount$auto(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8005)
prctl$auto_PR_SET_VMA(0x53564d41, 0x20000, 0x4, 0x8000, 0x2)
prctl$auto_PR_SET_VMA(0x53564d41, 0x1, 0xbf, 0xd, 0x3)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
pivot_root$auto(&(0x7f00000000c0)='\x00+\xdf\xe6 \x0426J\xc4', &(0x7f00000001c0)='.\x00')
mount$auto(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8005) (async)
prctl$auto_PR_SET_VMA(0x53564d41, 0x20000, 0x4, 0x8000, 0x2) (async)
prctl$auto_PR_SET_VMA(0x53564d41, 0x1, 0xbf, 0xd, 0x3) (async)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) (async)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async)
pivot_root$auto(&(0x7f00000000c0)='\x00+\xdf\xe6 \x0426J\xc4', &(0x7f00000001c0)='.\x00') (async)
executing program 2:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
close_range$auto(0x2, 0x8, 0xfffffffc)
io_uring_setup$auto(0x4, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 0:
r0 = socket(0xa, 0x1, 0x100)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0xc)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x6)
r1 = socket(0x18, 0x5, 0x1)
connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
accept$auto(r0, 0x0, 0x0)
executing program 3:
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0)
r1 = setfsuid$auto(0xee00)
mprotect$auto(0x1, 0x0, 0xfffffffffffffff9) (async)
mprotect$auto(0x1, 0x0, 0xfffffffffffffff9)
setresuid$auto(0xffffffffffffffff, r1, 0xffffffffffffffff)
unshare$auto(0x10)
executing program 3:
io_uring_setup$auto(0x7, &(0x7f0000000080)={0x4, 0x4b8c, 0xfffffffe, 0x7fffffff, 0x3, 0x80000001, 0xffffffffffffffff, [0x5, 0x52c5, 0x9], {0x7, 0x1000, 0x6, 0x2, 0x80000000, 0xff, 0x8c, 0x5000000, 0x2}, {0xc3d, 0xffff, 0x4, 0x7, 0x2, 0x8, 0x7, 0x6a, 0x2}})
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
getdents64$auto(r1, 0x0, 0x400)
ioctl$auto(r0, 0x2284, 0xffffffffffffffff)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2a, 0x2, 0xb)
close_range$auto(0x0, 0xffffeffe, 0x2)
r1 = pipe$auto(0x0)
pipe$auto(0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"})
ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0xf8000000, 0x3, 0x0, 0xe, 0x6, "938ea2d173ab8e40fe2a9879b43f6898a29bf86e6f7633000000c1be6e8e7ccf39c1f0f49e7e168eeb6c1e333da4c61f57ff1de9d205133fc67c2e1d"})
r3 = fcntl$auto(r0, 0x5, 0x6)
r4 = socket(0x2, 0x5, 0x0)
r5 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x24044800)
r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
ioctl$auto(r6, 0x2285, 0x1cfc4b42)
r7 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r7, 0x29, 0x43, 0x0, 0x3)
setsockopt$auto(r4, 0x0, 0x10, 0x0, 0x17)
close_range$auto(0x2, 0x8, 0x0)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch4\x00', 0x40000, 0x0)
ioctl$auto(r2, 0xc0045627, r2)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/loginuid\x00', 0x101000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/5/smp_affinity\x00', 0x129542, 0x0)
read$auto(0x3, 0x0, 0xf34)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040840}, 0x8000)
writev$auto(0x3, &(0x7f00000001c0)={0x0, 0x3}, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000)
getsockopt$auto(0x100000006, 0x11, 0x68, 0xfffffffffffffffc, 0x0)
executing program 1:
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
r1 = socket(0x15, 0x5, 0x0)
socket(0xa, 0x1, 0x84)
r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
write$auto(0x6, 0x0, 0x100000001)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0x1a29, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0)
read$auto_clear_warn_once_fops_(r2, &(0x7f0000000300)=""/169, 0xa9)
mmap$auto(0xfffffffd, 0x100, 0x7ffffffb, 0x13, r1, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
r3 = socket(0x29, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x25, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$auto(r3, 0x8b0f, 0x24)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffe)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
r4 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci1/force_wakeup\x00', 0x101200, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r4, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3)
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x826c0, 0x0) (async, rerun: 32)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r3=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r4=>0x5f, 0x0, 0x3}, 0x6f3)
r5 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=<r6=>0x4, 0x4, @old_prog_fd=r3}, 0xa3)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = bpf$auto(0x8000000, &(0x7f0000000000)=@bpf_attr_3={0x5, 0x5, 0x2, 0x7ff, 0x6e8f, 0x9, 0xcb0, 0x0, 0x8, "d4646038b8c15ed6cd89a653d775f8b9", 0x0, 0x6, r4, 0x10001, 0x8, 0x1, 0x0, 0x200, 0x0, 0x2, @attach_btf_obj_fd=r1, 0x9, 0x2, 0x6, 0x7, 0x3, 0xffffffffffffffff, r6}, 0x0) (rerun: 64)
r8 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r11=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x24, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async)
sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x114, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xe9, 0xba, "dafc77637db0e596382d552ca7a39d79fa55931c06c936d3fcce66fc8b4f3feabc236a69e003c0fcc18c7d343a0d0efb751a74038e9d7126bf62f3813bc66b5591aa3e50253673cff048d0025c941a41b2adb4a7ac3a0de1b38b3b26ac82b1bd7fac772bb132dcb97f7f2ced4a96fe301d97cf064aa96c2ae2f332b70013044dc9cd9856167cd0e5305aff6ff63a3422dd4225a09e0b433f0791f7e9d18d8fa00cc291f3744e1493ce0c6a5630d6864616bd621ea4006f292402503104ffb18fdda706fa93f66a163981c1f726f3785614e76a10f23f58f534efac565f4ae57f0ac980a166"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x8629}, @NL80211_ATTR_WIPHY_NAME={0x6, 0x2, '$\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) (async, rerun: 32)
r12 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) (async, rerun: 32)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r8, 0x0, 0x24000000)
write$auto(r12, 0x0, 0x98c7) (async)
mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x2, 0x8000) (async)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
setrlimit$auto(0x7, 0x0) (async, rerun: 32)
socket(0x23, 0x80805, 0x0) (rerun: 32)
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
r13 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x3b) (async)
pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x4, &(0x7f0000000240)={@siginfo_0_0={0xffffd034, 0x4, 0x0, @_timer={r13, 0x0, @sival_int=0x8001, 0xd5ba}}}, 0x3)
executing program 2:
mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd)
r0 = bpf$auto(0x0, &(0x7f00000001c0)=@batch={0x6, 0xffffffffffffffff, 0x6, 0x9, 0x8, <r1=>0xffffffffffffffff, 0x45, 0xffff}, 0x6f6)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendmsg$auto_NL80211_CMD_GET_STATION(r1, 0x0, 0x10000841)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
pread64$auto(r3, 0x0, 0x2, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r3, 0x300000000000)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x1000000009, r0, 0x0)
getdents$auto(0xffffffffffffffff, 0x0, 0x400018)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
writev$auto(0xffffffffffffffff, 0x0, 0x8)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
socket(0xf, 0x3, 0x2)
socket(0xf, 0x3, 0x2)
mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
mmap$auto(0x400000000, 0x6, 0xdf, 0x9b76, 0x2, 0x72)
bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x6d)
unshare$auto(0x40000080)
mmap$auto(0x1, 0x2020008, 0x3, 0xfc, 0xfffffffffffffffa, 0x8000)
r5 = pipe2$auto(0x0, 0x80)
ioctl$auto(r5, 0x5761, 0x4)
mlock$auto(0x100000001, 0x8)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0)
write$auto(r6, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81)
executing program 0:
r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x0) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) (async)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x20200, 0x0)
setsockopt$auto_SO_WIFI_STATUS(r2, 0x4, 0x29, &(0x7f0000000300)='\x05\a\x89\xaa([\xa8\x92\x0e=\xc0\xacJ\x9b\xd9u;\x87\x12eDg[\x11\xfed\x03\x9c\xa8oB\xa62\xec\xb7-cs\x03\xd9\xbc\x7f+\xdb\xc02\xf5;\xb1e\x05\xbd#\xf0\xbbf\xd4\xfe\x99\x7f\xc6j\xb3|\x87\x99\xca\x9b\xa4\x02J\xc6\xfb\x04\x95\x94\xa9\xd1\xa7\t\xe7\xb5\xd1\xf8`\xc1\xb8\x13\xfd;\xc3\xb5\xfeC\x01\xe5G(\xc2\xc7r\x90\xd3Op\x95\x925CZa\xcd*J*1ueJ\x9b\x97\x9e\x04\xa6\t\xa0X\x18\x8fl\xd7c\xf9!\xc3+dW\xf4>\xd8\xa4$\xc7\xa1y\xfc\x9b;r\xc7\xbf\xfdg\xc3\xee\x1a\xe3\xb1\xc3o\xb1\x84y\x93\x7f/ngp\xa1\x92\x88H\xfa\xa8\xb1r\xee\x00'/195, 0x40)
mmap$auto(0x100000000009, 0x20009, 0x4000000000df, 0xebd, 0x401, 0x0) (async)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
r4 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r4, 0x29, 0x43, &(0x7f0000000040)='\xa1\x00', 0x4) (async)
openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x101342, 0x0) (async)
r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, 0x0) (async, rerun: 32)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x9f, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) (rerun: 64)
preadv2$auto(r6, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f)
mmap$auto(0x8000000000000000, 0x4120008, 0x46, 0xeb1, 0x401, 0x8000) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async, rerun: 32)
pread64$auto(r3, &(0x7f0000000240)='/3Cocw\x00\x03\x00\x00\x00\x17\x00\x00\x00ipt3\x00\xc3\xa9[/\xd4>p\xaeL@N&-\x1d\xb7\x86\xdc\xa8_3.\xa1\\\xee\xc7\xb4*8\xd6\xc04KDh\xc9\xce\xbe\x16\xca\xaaO\'\xfb\v\b\vM\x00e\xd6\xb9z\xdc\x12\x8f\x9d\x88\xad\xaav1\v\x06\xe79\xb9C\f\x875j\x00\x14\xa7\x7f\x1d\xf0\xf5\xc4\xe4nLc%\x80\xa95\xc3\xc2\xf0}\x05A\xa7\\\x9fC1\x9ci\x13\xbeq\xc8\'\xb8\x8amW\xf9\xe5\xf1\x1a\xe1\x8eTS\x97\xfbx\xb9#\xd9\x03\xcbz\x11\xb2\x04\\\xc0w\xeaS\xad8I$\xa0\x8c\xc4[\x04\xa4\x9a\x8b\xf5og\xee', 0x34b, 0xffff) (rerun: 32)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2a, 0xa, 0x1) (async)
getsockopt$auto(0xffffffffffffffff, 0x38, 0x8000, 0x0, 0x0)
executing program 32:
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
r1 = socket(0x15, 0x5, 0x0)
socket(0xa, 0x1, 0x84)
r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
write$auto(0x6, 0x0, 0x100000001)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0x1a29, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0)
read$auto_clear_warn_once_fops_(r2, &(0x7f0000000300)=""/169, 0xa9)
mmap$auto(0xfffffffd, 0x100, 0x7ffffffb, 0x13, r1, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
r3 = socket(0x29, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x25, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$auto(r3, 0x8b0f, 0x24)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffe)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
r4 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci1/force_wakeup\x00', 0x101200, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r4, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3)

program crashed: INFO: task hung in tty_release_struct
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 21, 30, 30, 30, 30, 30]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2a, 0x2, 0xb)
close_range$auto(0x0, 0xffffeffe, 0x2)
r1 = pipe$auto(0x0)
pipe$auto(0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"})
ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0xf8000000, 0x3, 0x0, 0xe, 0x6, "938ea2d173ab8e40fe2a9879b43f6898a29bf86e6f7633000000c1be6e8e7ccf39c1f0f49e7e168eeb6c1e333da4c61f57ff1de9d205133fc67c2e1d"})
r3 = fcntl$auto(r0, 0x5, 0x6)
r4 = socket(0x2, 0x5, 0x0)
r5 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x24044800)
r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
ioctl$auto(r6, 0x2285, 0x1cfc4b42)
r7 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r7, 0x29, 0x43, 0x0, 0x3)
setsockopt$auto(r4, 0x0, 0x10, 0x0, 0x17)
close_range$auto(0x2, 0x8, 0x0)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch4\x00', 0x40000, 0x0)
ioctl$auto(r2, 0xc0045627, r2)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/loginuid\x00', 0x101000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/5/smp_affinity\x00', 0x129542, 0x0)
read$auto(0x3, 0x0, 0xf34)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040840}, 0x8000)
writev$auto(0x3, &(0x7f00000001c0)={0x0, 0x3}, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000)
getsockopt$auto(0x100000006, 0x11, 0x68, 0xfffffffffffffffc, 0x0)
executing program 1:
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
r1 = socket(0x15, 0x5, 0x0)
socket(0xa, 0x1, 0x84)
r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
write$auto(0x6, 0x0, 0x100000001)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0x1a29, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0)
read$auto_clear_warn_once_fops_(r2, &(0x7f0000000300)=""/169, 0xa9)
mmap$auto(0xfffffffd, 0x100, 0x7ffffffb, 0x13, r1, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
r3 = socket(0x29, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x25, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$auto(r3, 0x8b0f, 0x24)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffe)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
r4 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci1/force_wakeup\x00', 0x101200, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r4, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3)
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x826c0, 0x0) (async, rerun: 32)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r3=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r4=>0x5f, 0x0, 0x3}, 0x6f3)
r5 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=<r6=>0x4, 0x4, @old_prog_fd=r3}, 0xa3)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = bpf$auto(0x8000000, &(0x7f0000000000)=@bpf_attr_3={0x5, 0x5, 0x2, 0x7ff, 0x6e8f, 0x9, 0xcb0, 0x0, 0x8, "d4646038b8c15ed6cd89a653d775f8b9", 0x0, 0x6, r4, 0x10001, 0x8, 0x1, 0x0, 0x200, 0x0, 0x2, @attach_btf_obj_fd=r1, 0x9, 0x2, 0x6, 0x7, 0x3, 0xffffffffffffffff, r6}, 0x0) (rerun: 64)
r8 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r11=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x24, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async)
sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x114, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xe9, 0xba, "dafc77637db0e596382d552ca7a39d79fa55931c06c936d3fcce66fc8b4f3feabc236a69e003c0fcc18c7d343a0d0efb751a74038e9d7126bf62f3813bc66b5591aa3e50253673cff048d0025c941a41b2adb4a7ac3a0de1b38b3b26ac82b1bd7fac772bb132dcb97f7f2ced4a96fe301d97cf064aa96c2ae2f332b70013044dc9cd9856167cd0e5305aff6ff63a3422dd4225a09e0b433f0791f7e9d18d8fa00cc291f3744e1493ce0c6a5630d6864616bd621ea4006f292402503104ffb18fdda706fa93f66a163981c1f726f3785614e76a10f23f58f534efac565f4ae57f0ac980a166"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x8629}, @NL80211_ATTR_WIPHY_NAME={0x6, 0x2, '$\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) (async, rerun: 32)
r12 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) (async, rerun: 32)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r8, 0x0, 0x24000000)
write$auto(r12, 0x0, 0x98c7) (async)
mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x2, 0x8000) (async)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
setrlimit$auto(0x7, 0x0) (async, rerun: 32)
socket(0x23, 0x80805, 0x0) (rerun: 32)
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
r13 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x3b) (async)
pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x4, &(0x7f0000000240)={@siginfo_0_0={0xffffd034, 0x4, 0x0, @_timer={r13, 0x0, @sival_int=0x8001, 0xd5ba}}}, 0x3)
executing program 2:
mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd)
r0 = bpf$auto(0x0, &(0x7f00000001c0)=@batch={0x6, 0xffffffffffffffff, 0x6, 0x9, 0x8, <r1=>0xffffffffffffffff, 0x45, 0xffff}, 0x6f6)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendmsg$auto_NL80211_CMD_GET_STATION(r1, 0x0, 0x10000841)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
pread64$auto(r3, 0x0, 0x2, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r3, 0x300000000000)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x1000000009, r0, 0x0)
getdents$auto(0xffffffffffffffff, 0x0, 0x400018)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
writev$auto(0xffffffffffffffff, 0x0, 0x8)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
socket(0xf, 0x3, 0x2)
socket(0xf, 0x3, 0x2)
mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
mmap$auto(0x400000000, 0x6, 0xdf, 0x9b76, 0x2, 0x72)
bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x6d)
unshare$auto(0x40000080)
mmap$auto(0x1, 0x2020008, 0x3, 0xfc, 0xfffffffffffffffa, 0x8000)
r5 = pipe2$auto(0x0, 0x80)
ioctl$auto(r5, 0x5761, 0x4)
mlock$auto(0x100000001, 0x8)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0)
write$auto(r6, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81)
executing program 0:
r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x0) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) (async)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x20200, 0x0)
setsockopt$auto_SO_WIFI_STATUS(r2, 0x4, 0x29, &(0x7f0000000300)='\x05\a\x89\xaa([\xa8\x92\x0e=\xc0\xacJ\x9b\xd9u;\x87\x12eDg[\x11\xfed\x03\x9c\xa8oB\xa62\xec\xb7-cs\x03\xd9\xbc\x7f+\xdb\xc02\xf5;\xb1e\x05\xbd#\xf0\xbbf\xd4\xfe\x99\x7f\xc6j\xb3|\x87\x99\xca\x9b\xa4\x02J\xc6\xfb\x04\x95\x94\xa9\xd1\xa7\t\xe7\xb5\xd1\xf8`\xc1\xb8\x13\xfd;\xc3\xb5\xfeC\x01\xe5G(\xc2\xc7r\x90\xd3Op\x95\x925CZa\xcd*J*1ueJ\x9b\x97\x9e\x04\xa6\t\xa0X\x18\x8fl\xd7c\xf9!\xc3+dW\xf4>\xd8\xa4$\xc7\xa1y\xfc\x9b;r\xc7\xbf\xfdg\xc3\xee\x1a\xe3\xb1\xc3o\xb1\x84y\x93\x7f/ngp\xa1\x92\x88H\xfa\xa8\xb1r\xee\x00'/195, 0x40)
mmap$auto(0x100000000009, 0x20009, 0x4000000000df, 0xebd, 0x401, 0x0) (async)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
r4 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r4, 0x29, 0x43, &(0x7f0000000040)='\xa1\x00', 0x4) (async)
openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x101342, 0x0) (async)
r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, 0x0) (async, rerun: 32)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x9f, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) (rerun: 64)
preadv2$auto(r6, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f)
mmap$auto(0x8000000000000000, 0x4120008, 0x46, 0xeb1, 0x401, 0x8000) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async, rerun: 32)
pread64$auto(r3, &(0x7f0000000240)='/3Cocw\x00\x03\x00\x00\x00\x17\x00\x00\x00ipt3\x00\xc3\xa9[/\xd4>p\xaeL@N&-\x1d\xb7\x86\xdc\xa8_3.\xa1\\\xee\xc7\xb4*8\xd6\xc04KDh\xc9\xce\xbe\x16\xca\xaaO\'\xfb\v\b\vM\x00e\xd6\xb9z\xdc\x12\x8f\x9d\x88\xad\xaav1\v\x06\xe79\xb9C\f\x875j\x00\x14\xa7\x7f\x1d\xf0\xf5\xc4\xe4nLc%\x80\xa95\xc3\xc2\xf0}\x05A\xa7\\\x9fC1\x9ci\x13\xbeq\xc8\'\xb8\x8amW\xf9\xe5\xf1\x1a\xe1\x8eTS\x97\xfbx\xb9#\xd9\x03\xcbz\x11\xb2\x04\\\xc0w\xeaS\xad8I$\xa0\x8c\xc4[\x04\xa4\x9a\x8b\xf5og\xee', 0x34b, 0xffff) (rerun: 32)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2a, 0xa, 0x1) (async)
getsockopt$auto(0xffffffffffffffff, 0x38, 0x8000, 0x0, 0x0)
executing program 32:
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
r1 = socket(0x15, 0x5, 0x0)
socket(0xa, 0x1, 0x84)
r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
write$auto(0x6, 0x0, 0x100000001)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0x1a29, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0)
read$auto_clear_warn_once_fops_(r2, &(0x7f0000000300)=""/169, 0xa9)
mmap$auto(0xfffffffd, 0x100, 0x7ffffffb, 0x13, r1, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
r3 = socket(0x29, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x25, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$auto(r3, 0x8b0f, 0x24)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffe)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
r4 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci1/force_wakeup\x00', 0x101200, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r4, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3)

program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 38, 38, 5, 14, 9, 6, 9, 9]
detailed listing:
executing program 3:
mmap$auto(0x8000000000000000, 0x400004, 0xd9, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x28c83, 0x0)
mmap$auto(0xfffffffffffffffd, 0x2000a, 0x7, 0xffffffffff7ffc10, 0xffffffffffffffff, 0x8000)
socket(0xf, 0x4, 0xfffffffb)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
ioperm$auto(0x5, 0x1, 0x3)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
r3 = ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r4, 0x4, 0x7ff)
ptrace$auto(0x10, r4, 0x1, 0x94d1)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
bind$auto(0xffffffffffffffff, &(0x7f0000000200)=@phonet={0x23, 0xde, 0x4, 0x7f}, 0x13)
r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), r3)
sendmsg$auto_KSMBD_EVENT_STARTING_UP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008804)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{@inferred, 0x0, 0x7, 0x9, "86362c746689ae16423d49e2a5fac50222481f59df3b96ecafc32c611fb62b6a5bf25912cc9eef3b7eecb84e", @inferred=r4}, 0xfffffff8, 0x0, 0x8, @inferred, @enumerated={0x0, 0xe, "063c3f8c31bd55e86cf2db8ad963f8acde068a5d66b9161c0c0e45a531cfd4466ec74dca749cb5dbee3aa6411af4226fea81fed17eb5c3fa4a3fdfef2115a1cc", 0x7, 0x3}, "64308865bdb8fe205493f2f3569408bb7d10494bf8fc846ceedb75db3060a310a150948a4f3363f2b46b45d914b5f8bb0ef5f2140011508bb0bc88e4d72c9001"})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
executing program 2:
mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd) (async)
mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd)
bpf$auto(0x0, &(0x7f00000001c0)=@batch={0x6, 0xffffffffffffffff, 0x6, 0x9, 0x8, 0xffffffffffffffff, 0x45, 0xffff}, 0x6f6)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x8102, 0x0)
pread64$auto(r2, 0x0, 0x2, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r2, 0x300000000000)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
fanotify_mark$auto(0xffffffffffffffff, 0x5, 0x1000000009, r3, 0x0)
getdents$auto(r0, 0x0, 0x1)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
writev$auto(0xffffffffffffffff, 0x0, 0x8) (async)
writev$auto(0xffffffffffffffff, 0x0, 0x8)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) (async)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
socket(0xf, 0x3, 0x2) (async)
socket(0xf, 0x3, 0x2)
socket(0xf, 0x3, 0x2)
mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
mmap$auto(0x400000000, 0x6, 0xdf, 0x9b76, 0x2, 0x72)
bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x6a)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
r5 = pipe2$auto(0x0, 0x80)
ioctl$auto(r5, 0x5761, 0x4)
mlock$auto(0x100000001, 0x8) (async)
mlock$auto(0x100000001, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x2f0000, 0x0) (async)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x2f0000, 0x0)
write$auto(r6, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81)
executing program 1:
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
mprotect$auto(0x110c230000, 0xa588, 0x6)
r0 = prctl$auto(0x1, 0x40ba3, 0x0, 0x4000000001ff, 0x17)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8842, 0x0) (async)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8842, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x400008000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x400008000)
r1 = io_uring_setup$auto(0x4, 0x0)
close_range$auto(0x2, r1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) (async)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0)
sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828a57000fbdbdf257700000005002001c20000000800cb00010000000400d100"], 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x48000)
open(0x0, 0x22240, 0x55)
fanotify_init$auto(0x8, 0x1) (async)
fanotify_init$auto(0x8, 0x1)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000840)='/proc/kmsg\x00', 0x0, 0x0) (async)
r4 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000840)='/proc/kmsg\x00', 0x0, 0x0)
read$auto_fops_u32_(r4, &(0x7f0000000880)=""/17, 0x11)
ioctl$auto_SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000100)="b8241412a34e3396f7") (async)
ioctl$auto_SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000100)="b8241412a34e3396f7")
sendmsg$auto_OVS_METER_CMD_DEL(r4, 0x0, 0x4000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
shmctl$auto_IPC_INFO(0x8, 0x3, &(0x7f0000000140)={{0x6, 0xee00, 0x0, 0x6, 0xe, 0x5, 0x81}, 0x1, 0xd1, 0x5, 0x1, @inferred, @inferred, 0x40, 0x0, &(0x7f0000000080)="ce51cf56c4812643b8f6212770bcfaf669aa20dab48da22c72c80577e2", &(0x7f00000000c0)="5cee4eb2f8653156b4a491b2390308b8de0e0a20a004d4798873ad597f3ba6c39d5891048b5b47108d6cb477"})
executing program 0:
ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0xffffffffffffffff)
r0 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/thread-self/gid_map\x00', 0x802, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0)
write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000001c0)="ce890a", 0x3)
pread64$auto(r0, &(0x7f0000000180)='\x03W\x96K\x15\x00\x00\xe8Q\x037\x00\x00\x00\x00\x00\x00<\x00\x00\x10', 0x100000002, 0x2)
executing program 3:
mount$auto(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8005)
prctl$auto_PR_SET_VMA(0x53564d41, 0x20000, 0x4, 0x8000, 0x2)
prctl$auto_PR_SET_VMA(0x53564d41, 0x1, 0xbf, 0xd, 0x3)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
pivot_root$auto(&(0x7f00000000c0)='\x00+\xdf\xe6 \x0426J\xc4', &(0x7f00000001c0)='.\x00')
mount$auto(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8005) (async)
prctl$auto_PR_SET_VMA(0x53564d41, 0x20000, 0x4, 0x8000, 0x2) (async)
prctl$auto_PR_SET_VMA(0x53564d41, 0x1, 0xbf, 0xd, 0x3) (async)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) (async)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async)
pivot_root$auto(&(0x7f00000000c0)='\x00+\xdf\xe6 \x0426J\xc4', &(0x7f00000001c0)='.\x00') (async)
executing program 2:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
close_range$auto(0x2, 0x8, 0xfffffffc)
io_uring_setup$auto(0x4, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 0:
r0 = socket(0xa, 0x1, 0x100)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0xc)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x6)
r1 = socket(0x18, 0x5, 0x1)
connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
accept$auto(r0, 0x0, 0x0)
executing program 3:
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0)
r1 = setfsuid$auto(0xee00)
mprotect$auto(0x1, 0x0, 0xfffffffffffffff9) (async)
mprotect$auto(0x1, 0x0, 0xfffffffffffffff9)
setresuid$auto(0xffffffffffffffff, r1, 0xffffffffffffffff)
unshare$auto(0x10)
executing program 3:
io_uring_setup$auto(0x7, &(0x7f0000000080)={0x4, 0x4b8c, 0xfffffffe, 0x7fffffff, 0x3, 0x80000001, 0xffffffffffffffff, [0x5, 0x52c5, 0x9], {0x7, 0x1000, 0x6, 0x2, 0x80000000, 0xff, 0x8c, 0x5000000, 0x2}, {0xc3d, 0xffff, 0x4, 0x7, 0x2, 0x8, 0x7, 0x6a, 0x2}})
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
getdents64$auto(r1, 0x0, 0x400)
ioctl$auto(r0, 0x2284, 0xffffffffffffffff)

program crashed: INFO: task hung in corrupted
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <9>
bisect: split chunk #0 of len 9 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 6, 9, 9]
detailed listing:
executing program 2:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
close_range$auto(0x2, 0x8, 0xfffffffc)
io_uring_setup$auto(0x4, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 0:
r0 = socket(0xa, 0x1, 0x100)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0xc)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x6)
r1 = socket(0x18, 0x5, 0x1)
connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
accept$auto(r0, 0x0, 0x0)
executing program 3:
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0)
r1 = setfsuid$auto(0xee00)
mprotect$auto(0x1, 0x0, 0xfffffffffffffff9) (async)
mprotect$auto(0x1, 0x0, 0xfffffffffffffff9)
setresuid$auto(0xffffffffffffffff, r1, 0xffffffffffffffff)
unshare$auto(0x10)
executing program 3:
io_uring_setup$auto(0x7, &(0x7f0000000080)={0x4, 0x4b8c, 0xfffffffe, 0x7fffffff, 0x3, 0x80000001, 0xffffffffffffffff, [0x5, 0x52c5, 0x9], {0x7, 0x1000, 0x6, 0x2, 0x80000000, 0xff, 0x8c, 0x5000000, 0x2}, {0xc3d, 0xffff, 0x4, 0x7, 0x2, 0x8, 0x7, 0x6a, 0x2}})
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
getdents64$auto(r1, 0x0, 0x400)
ioctl$auto(r0, 0x2284, 0xffffffffffffffff)

program crashed: INFO: task hung in corrupted
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <4>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9]
detailed listing:
executing program 3:
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0)
r1 = setfsuid$auto(0xee00)
mprotect$auto(0x1, 0x0, 0xfffffffffffffff9) (async)
mprotect$auto(0x1, 0x0, 0xfffffffffffffff9)
setresuid$auto(0xffffffffffffffff, r1, 0xffffffffffffffff)
unshare$auto(0x10)
executing program 3:
io_uring_setup$auto(0x7, &(0x7f0000000080)={0x4, 0x4b8c, 0xfffffffe, 0x7fffffff, 0x3, 0x80000001, 0xffffffffffffffff, [0x5, 0x52c5, 0x9], {0x7, 0x1000, 0x6, 0x2, 0x80000000, 0xff, 0x8c, 0x5000000, 0x2}, {0xc3d, 0xffff, 0x4, 0x7, 0x2, 0x8, 0x7, 0x6a, 0x2}})
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
getdents64$auto(r1, 0x0, 0x400)
ioctl$auto(r0, 0x2284, 0xffffffffffffffff)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 6]
detailed listing:
executing program 2:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
close_range$auto(0x2, 0x8, 0xfffffffc)
io_uring_setup$auto(0x4, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 0:
r0 = socket(0xa, 0x1, 0x100)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0xc)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x6)
r1 = socket(0x18, 0x5, 0x1)
connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
accept$auto(r0, 0x0, 0x0)

program crashed: INFO: task hung in corrupted
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$auto_FIDEDUPERANGE-pwrite64$auto-socket-connect$auto-accept$auto
detailed listing:
executing program 0:
r0 = socket(0xa, 0x1, 0x100)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0xc)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x6)
r1 = socket(0x18, 0x5, 0x1)
connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
accept$auto(r0, 0x0, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-mmap$auto-sendmsg$auto_OVS_FLOW_CMD_SET-close_range$auto-io_uring_setup$auto-openat$auto_generic-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 2:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
close_range$auto(0x2, 0x8, 0xfffffffc)
io_uring_setup$auto(0x4, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 1 programs left: 

executing program 2:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
close_range$auto(0x2, 0x8, 0xfffffffc)
io_uring_setup$auto(0x4, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})


bisect: trying to concatenate
bisect: concatenate 1 entries
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-mmap$auto-sendmsg$auto_OVS_FLOW_CMD_SET-close_range$auto-io_uring_setup$auto-openat$auto_generic-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
close_range$auto(0x2, 0x8, 0xfffffffc)
io_uring_setup$auto(0x4, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
bisect: concatenation succeeded
found reproducer with 9 syscalls
minimizing guilty program
testing program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-mmap$auto-sendmsg$auto_OVS_FLOW_CMD_SET-close_range$auto-io_uring_setup$auto-openat$auto_generic-lstat$auto-socket$nl_generic
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
close_range$auto(0x2, 0x8, 0xfffffffc)
io_uring_setup$auto(0x4, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)

program did not crash
testing program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-mmap$auto-sendmsg$auto_OVS_FLOW_CMD_SET-close_range$auto-io_uring_setup$auto-openat$auto_generic-lstat$auto-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
close_range$auto(0x2, 0x8, 0xfffffffc)
io_uring_setup$auto(0x4, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-mmap$auto-sendmsg$auto_OVS_FLOW_CMD_SET-close_range$auto-io_uring_setup$auto-openat$auto_generic-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
close_range$auto(0x2, 0x8, 0xfffffffc)
io_uring_setup$auto(0x4, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-mmap$auto-sendmsg$auto_OVS_FLOW_CMD_SET-close_range$auto-io_uring_setup$auto-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
close_range$auto(0x2, 0x8, 0xfffffffc)
io_uring_setup$auto(0x4, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
testing program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-mmap$auto-sendmsg$auto_OVS_FLOW_CMD_SET-close_range$auto-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
close_range$auto(0x2, 0x8, 0xfffffffc)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
testing program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-mmap$auto-sendmsg$auto_OVS_FLOW_CMD_SET-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000011)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
testing program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-mmap$auto-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
testing program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
testing program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m33.119466132s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
simplifying C reproducer
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
testing program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
validation run: crashed=true
testing program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
validation run: crashed=true
testing program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: INFO: task hung in corrupted
validation run: crashed=true
reproducing took 4h17m33.323297373s
repro crashed as (corrupted=true):
INFO: task syz-executor:5955 blocked for more than 143 seconds.
      Not tainted syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:23400 pid:5955  tgid:5955  ppid:1      task_flags:0x40054c flags:0x00080003
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867

report is corrupted, running repro again
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: INFO: task hung in corrupted
report is corrupted, running repro again
testing compiled C program (duration=6m33.119466132s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
program crashed: no output from test machine
final repro crashed as (corrupted=false):