Extracting prog: 5m53.924519491s
Minimizing prog: 13m18.943650376s
Simplifying prog options: 0s
Extracting C: 37.275226355s
Simplifying C: 13m23.395543726s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
detailed listing:
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0)
pread64$auto(r0, &(0x7f0000002680)='/dev/snapshot\x00', 0x73528428, 0x3) (fail_nth: 2)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 29, 27, 20, 18, 17, 30, 24, 30, 30, 2, 30, 10, 8, 28, 22, 30, 7, 20, 30, 24, 2, 18, 30]
detailed listing:
executing program 3:
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
r0 = socket(0xa, 0x1, 0x100)
getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) (async)
socket(0x1e, 0x1, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
select$auto(0x8, 0x0, 0x0, 0x0, 0x0)
write$auto(r1, 0x0, 0x100000a3d9) (async)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0xa, 0x80002, 0x73)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socket(0x2, 0x80805, 0x0) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
timer_create$auto(0x0, 0x0, 0x0) (async)
timer_create$auto(0x3, 0x0, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8)
syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async)
mmap$auto(0x6, 0x400008, 0x2, 0x9b76, r2, 0x6) (async)
mmap$auto(0x0, 0x400000020009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0) (async)
sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf25060000000c001100657468746f6f6c000800060002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d0) (async)
r3 = socket(0x10, 0x3, 0x6)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
executing program 3:
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2900, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f0000000040)='/sys/devices/platform/vkms/graphics/fb0/state\x00', &(0x7f0000000180)="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", 0x1)
read$auto(r0, 0x0, 0x20)
ioctl$auto_IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, 0x0)
ioctl$auto_IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, 0x0)
prctl$auto(0x21, 0xffff, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
socket(0x2, 0x1, 0x106)
mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x81, 0x25, 0x5, 0x80}, 0x0)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES32=r1, @ANYBLOB="69b5"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
socket(0x1d, 0x2, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r7=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, r6, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x20000040)
sendmsg$auto_NL80211_CMD_SET_BEACON(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00g', @ANYRES16=r6, @ANYBLOB="000325bd7000fddbdf250e0000004b014580dd00408008dc1d6bac53377a67f8d1387506abf67cae353e65b7d945cf6835098581509c627586ccc30d80fdc22bc4ccedf06fbe17227da94338ca54940afe629ceaabb1fee11d5d149774a139fe24c6c4a0d34f8b93f76fc3166d462520e2f249e67e6946287139012afe323cca102e4aabd05b5490087c91687ea872f4b6d4c7ab38298eb508226de8dfc3574bb6d830e8344e90c6f6ced55f47a34bf320e2a2af9c63cbf1d4710e93c637747673badc4a5b27d8a7edd831296d61b6e687c66a57523cf5f3b0a9f881c9860103bb19c624177a9554d707160e6a95000000008d6f5bd90488bc782e9201c3752c38e5f35ad8d9f6d2c8d2e9f158b6f4f550adc5f8cc9d2d59e65596142434154ce81a69e27a78a31f7c51ffc5988fa46aaa0823283b2400bb800400f3800400198008001e00", @ANYRES32=r2, @ANYBLOB="0400bc80040074800800a500ff000000000600b10000800000"], 0x168}, 0x1, 0x0, 0x0, 0x8015}, 0x4000000)
ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8})
ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0)
executing program 0:
getpriority$auto_PRIO_USER(0x2, 0x0)
set_mempolicy$auto(0x80, &(0x7f0000000000)=0xffffffffffffff81, 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x80091, 0x0)
ioctl$auto(r0, 0xfc, r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
sendfile$auto(r0, r0, &(0x7f0000000040)=0x6, 0x4)
r1 = fsopen$auto(0x0, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x800019)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)="8dc9fc604f721b4b9b6fb75391e7e39755cc3cb395bbeb92c3807417bf1ff9a25a49c991b8928467fa6892bd2134d2b370b5483301f7f22130c3ebecaa9465c0c6c5641ad82adc8f2b12ca943d4de3658dd514b1fb698e93894b0dd0b3d306c32943eadea51e79b452099c1418bfbec96103e85c850857da852c9c4412a8d0c6907db9ef3ca7895f954c47b90d47baca32a1a2be6dd5c144bd78062790ea1b7ec15c4bfd2e5ef3aea5d501aa35cfe9bff7eee7c2f4", 0xb5)
mmap$auto(0x0, 0x10, 0xde, 0x9b7f, 0x2, 0x7fff)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0)
mlockall$auto(0x7)
write$auto_sg_fops_sg(r1, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0)
socketpair$auto(0x7, 0x1fffffe, 0x315, 0x0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
pselect6$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
executing program 2:
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/amidi2\x00', 0x82040, 0x0)
r0 = ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, &(0x7f0000000300)=0x3)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000580)=@query={@target_ifindex, 0x4, 0xffff08fb, 0x101, 0x6d, @prog_cnt=0x9, 0x0, 0x7, 0x4, 0x7, 0x9}, 0x5)
r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110)
getdents64$auto(r3, 0x0, 0x400)
ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5)
ioctl$auto(r2, 0x4008af12, r1)
r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL_PAGE_LIST={0x84, 0x1e, "b9367484f5d6842a1d8342828baa41bbf756d7bd4375412d2ff3e43c16e0a38c5d227acefaad7ed93e1e091666376d0d8623e7dc970138e754337412f53b74b6efa7dd5f519fe46ea1128af11b0e5cf59b213beae341c616a11959bf1fb803a5e35e9b830892f3ce8a3211475e4cd6e640d813bab76b5ad9ce1265b87dae48eb"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x21, 0x2, 0x2)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
fcntl$auto(r5, 0x400, 0x1)
setxattr$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='-\x00', &(0x7f0000000200), 0x10, 0x0)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x9da, 0x20009, 0xdf, 0xffb, 0x401, 0x8000)
statmount$auto(0x0, 0x0, 0x7ffffffff000, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0xfa)
waitid$auto(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0)
ioctl$auto_RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
ppoll$auto(0x0, 0x100, 0x0, 0x0, 0x8)
socket(0x10, 0x2, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810)
executing program 3:
unshare$auto(0x40000080)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x27, 0x0, 0x0, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0)
read$auto(r1, 0x0, 0x1f40)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy11/netdev:wlan1/rc_rateidx_mcs_mask_2ghz\x00', 0x486003, 0x0)
rt_sigprocmask$auto(0x8, 0xffffffffffffffff, 0x0, 0x8)
getpgid$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a)
executing program 0:
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
shmctl$auto(0x0, 0xd, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0)
mmap$auto(0x1, 0x202000b, 0x3, 0xeb1, r0, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
setreuid$auto(0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
sysfs$auto(0x2, 0x10, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
writev$auto(0x1, 0x0, 0x1)
readahead$auto(0xffffffffffffffff, 0x6, 0x2)
r3 = socket(0x23, 0x5, 0x0)
listen$auto(r3, 0x5ed)
unshare$auto(0x40000080)
r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95)
read$auto(r4, 0x0, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x6)
socket(0x2, 0x1, 0x0)
r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
socket(0x10, 0x2, 0x6)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x3, 0x8, 0x800000df, 0x9b72, 0x2, 0x40008000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0)
r0 = semctl$auto_GETPID(0x2, 0x1, 0xb, 0x2b)
prctl$auto(0x37, 0x1, r0, 0x5, 0x7)
shutdown$auto(0x200000003, 0x2)
timerfd_create$auto(0x9, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 2:
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0xa, 0x2, 0x88)
epoll_create$auto(0x3e)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
socket(0x2, 0x3, 0x6)
socket(0x2, 0x2, 0x88)
socket(0x2a, 0x2, 0x1)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2040, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x20, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xffffffffffffffff, 0x2)
wait4$auto(0x0, &(0x7f0000000080)=0x7fffffff, 0x4, &(0x7f0000001140)={{0x8, 0xffffffff}, {0x9, 0xfffffffffffffff9}, 0x1, 0x794, 0x1000000000000007, 0x6e, 0x1ff, 0x4, 0x5, 0x1, 0x401, 0x6, 0xfffffffffffffffb, 0x1, 0x3, 0x9})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
ioctl$auto(r2, 0x92106402, r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_gtp(0x0, r3)
sendmsg$auto_GTP_CMD_GETPDP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8014)
write$auto(0xffffffffffffffff, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0)
mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, r3, 0x1)
r5 = socket(0x1e, 0x4, 0x0)
ioperm$auto(0x9, 0x9, 0x75)
getsockname$auto(r5, &(0x7f0000000000)=@generic={0x2b, "bc9fefa9442c9e39021439230679"}, &(0x7f0000000180)=0xff)
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x4, {0x100000000, 0x10000}, 0x7, 0x1, 0xfffffffffffffffa, 0x1007fff, 0x0, 0x8, 0xfff, 0xdfffffffffff628e, 0x6, 0x6, 0x808})
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
getpeername$auto(r1, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x40000)
write$auto(0x3, 0x0, 0xfffffdef)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$auto_BLKTRACESETUP32(r3, 0xc0401273, &(0x7f0000000180)={"c16f6303d5736a1b0feb8f6a0554277f3190781cfe525c42f1ebed0dc940e2fd", 0x3, 0xff, 0x3798, 0xd, 0x810})
waitid$auto_P_ALL(0x0, 0x8, &(0x7f0000000200)={@_si_pad}, 0x2, &(0x7f0000000280)={{0x3, 0x1}, {0x5, 0x100000000}, 0x2, 0x2, 0x8, 0x6, 0x8, 0x7, 0x80, 0x14, 0x0, 0x1, 0xf34, 0x6, 0x1000200000, 0x6})
fcntl$getown(r0, 0x9)
msgctl$auto_MSG_STAT_ANY(0x5, 0xd, &(0x7f0000000380)={{0x4468ebf0, 0xee01, 0x0, 0x7, 0x6, 0x7, 0x2}, &(0x7f0000000100)=0x5, &(0x7f0000000340)=0xa, 0xfffffffffffffff8, 0x0, 0x3, 0x81, 0x3, 0x4, 0xf25, 0x5, @inferred, @raw=0x5})
msgctl$auto_IPC_SET(0x6, 0x1, &(0x7f00000004c0)={{0x401, 0xee00, 0x0, 0x7, 0x6, 0x8, 0x7}, &(0x7f0000000440)=0x2, &(0x7f0000000480)=0x3, 0x4, 0x80000000, 0x1, 0x1, 0x2, 0x6, 0x8, 0xc0, @inferred=0xffffffffffffffff})
r4 = gettid()
process_vm_readv$auto(r4, 0x0, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x3, 0x0)
sendmsg$auto_TIPC_NL_LINK_SET(r3, 0x0, 0x4004840)
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0)
pread64$auto(r0, &(0x7f0000002680)='/dev/snapshot\x00', 0x73528428, 0x3) (fail_nth: 1)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
r0 = open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0xffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r1, 0x114, 0x2710, 0xfffffffffffffffc, 0x0)
mmap$auto(0x401, 0x20009, 0x25, 0x18, r0, 0x8000)
prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0x10011, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x7cf702, 0x0)
mmap$auto(0x0, 0x810004, 0x2, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x28c102, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0)
ioctl$auto_MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201, 0x0)
mmap$auto(0x0, 0xb991, 0x5, 0x19, 0xffffffffffffffff, 0x2)
clock_adjtime$auto(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
write$auto(0x3, 0x0, 0xfffffdef)
connect$auto(0xffffffffffffffff, 0x0, 0x55)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0)
r3 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004)
socket(0x10, 0x80000, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
executing program 1:
r0 = socket(0x10, 0x2, 0x4)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x3)
bpf$auto(0x6, &(0x7f00000001c0)=@test={r0, 0x10004, 0x0, 0x1000, 0x106, 0x0, 0x0, 0xfff, 0x10000, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000030c0), 0x7)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd6/queue/iosched/writes_starved\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000100)='%\x00', 0x38f)
write$auto(0x3, 0x0, 0x1)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}})
futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, 0x0, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
socket(0x10, 0x2, 0x6)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x240, 0x0)
pread64$auto(r0, 0x0, 0x200000000003, 0x2f4a3a23)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/bond0/ignore_routes_with_linkdown\x00', 0x40001, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
io_uring_setup$auto(0xa, 0x0)
mmap$auto(0x3, 0x8, 0x800000df, 0x9b72, 0x2, 0x40008000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0)
r2 = semctl$auto_GETPID(0x2, 0x1, 0xb, 0x2b)
prctl$auto(0x37, 0x1, r2, 0x5, 0x7)
madvise$auto(0x0, 0x2003f0, 0x15)
timerfd_create$auto(0x9, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 2:
mbind$auto(0xfffffffffffff000, 0x8, 0x80000000, 0x0, 0x806, 0x2)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x1, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", <r1=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r1, 0x3, 0x2, @netfilter={0x4, 0x1, 0x40, 0x7}}, 0x81)
madvise$auto(0x0, 0xb, 0x15)
open(&(0x7f0000000000)='./file0\x00', 0x7dfd, 0x85)
write$auto(0x3, 0x0, 0x100082)
bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f00000000c0)=@bpf_attr_7={@map_id=0xf, 0x8, 0x10000, r0}, 0x8f)
clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3)
mmap$auto(0x6, 0xfffffffffffffff0, 0x4, 0x14, r0, 0x76d)
r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0)
ppoll$auto(&(0x7f0000000040)={r2, 0x4, 0xa7}, 0x1c, &(0x7f0000000080)={0x2, 0x6}, 0x0, 0x8)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0)
write$auto(r3, 0x0, 0x300001000000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x40001, 0x0)
write$auto(r4, 0x0, 0xfffffdef)
executing program 0:
mmap$auto(0x0, 0x400003, 0xdf, 0x19, 0x2, 0x8)
read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x9003, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r0, 0xc2604110, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004881}, 0x40001810)
close_range$auto(r1, r0, 0xfffffffa)
socket(0xf, 0x80b, 0x9)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff})
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/44, 0x2c)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
get_robust_list$auto(0x0, 0x0, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
sendmmsg$auto(r1, &(0x7f0000000340)={{0x0, 0x3, 0x0, 0x1000, 0x0, 0x6c, 0x480000}, 0xd}, 0x5, 0x2)
mmap$auto(0x0, 0xee3, 0xdf, 0x9b72, 0x2, 0x8003)
r4 = io_uring_setup$auto(0x7, 0x0)
close_range$auto(0xffffffffffffffff, r2, 0xaa)
r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000002c0), 0x62a000, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0xc0684608, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0)
read$auto(0x3, 0x0, 0xfdef)
sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="16a6d1eee1bccd347a10061054f0a8b1db67d9c86c8a9dd40d768283924bd8292d51507340e8d7822d0e27f8c9f057e1401ac47ca80283e559450c5aa9a3400ec566c795103852033c198fc51e1f43454bd385c592829ee24b051206167b51f615771f925c995865ea3b298d50428ff32799712a617dc9ae82e17b04f38d437139b51128dc2cd9188925a82d127bf97cea58afe5b0c3191823c88017a31d4cb292e5d7c8a3d1609d6d01f0098d76ca80b10b45712591e746b423c5c12ac8a48fa34cd29def2281754f1975e826feaab76215879a1fa3238ff097db94ffd10ecbed3817b4b5edd9dd", @ANYRES16=r5, @ANYBLOB="000129bd7000ffdbdf252800000006000a000400000006000600040000001400010065727370616e3000000000000000000008002c00ff0f0000060008000400000024003200af077032e161ba46808464570b28f4deb8f056"], 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
sendmsg$auto_IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYBLOB="010028bd7000fcdbdf250100000006000e0096010000"], 0x1c}}, 0x1)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
mremap$auto(0x9, 0x4, 0x4, 0x7, 0x0)
executing program 1:
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x3ff, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
ioctl$auto_RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000200)=0x9)
io_uring_register$auto(0x2, 0xf, 0x0, 0x20)
executing program 3:
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/amidi2\x00', 0x82040, 0x0)
r0 = ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, &(0x7f0000000300)=0x3)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000580)=@query={@target_ifindex, 0x4, 0xffff08fb, 0x101, 0x6d, @prog_cnt=0x9, 0x0, 0x7, 0x4, 0x7, 0x9}, 0x5)
r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110)
getdents64$auto(r3, 0x0, 0x400)
ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5)
ioctl$auto(r2, 0x4008af12, r1)
r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL_PAGE_LIST={0x84, 0x1e, "b9367484f5d6842a1d8342828baa41bbf756d7bd4375412d2ff3e43c16e0a38c5d227acefaad7ed93e1e091666376d0d8623e7dc970138e754337412f53b74b6efa7dd5f519fe46ea1128af11b0e5cf59b213beae341c616a11959bf1fb803a5e35e9b830892f3ce8a3211475e4cd6e640d813bab76b5ad9ce1265b87dae48eb"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x21, 0x2, 0x2)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
setxattr$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='-\x00', &(0x7f0000000200), 0x10, 0x0)
executing program 1:
mmap$auto(0x0, 0x43, 0x5ecb, 0x8000fb1, 0xfffffffffffffffa, 0x4850)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x22, 0x2, 0x3)
setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01042dbd7000fbdbdf2504000000779477163e00d33a5179fd8b06f220"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800)
socket$nl_generic(0x10, 0x3, 0x10)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x23, 0x2, 0x0)
pipe$auto(&(0x7f0000000000))
pipe2$auto(0x0, 0x80)
mmap$auto(0x0, 0x4020007, 0xdb, 0xeb1, 0x401, 0x8004)
r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card1\x00', 0x22280, 0x0)
ioctl$auto(r0, 0x8000515, r4)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa})
ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0)
writev$auto(r3, &(0x7f0000000340)={&(0x7f0000000180)="d8f80ae1755e56c6414d6837ebd777a07f305acbee14eddcc9e2a179f2e1e078269624373c9ea51ad9e39dd7d756f9c233920ccb9a3f4722650777b7e2c457b38e", 0xda7e}, 0x9)
io_uring_setup$auto(0x6, 0x0)
r5 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183042, 0x0)
socketpair$auto(0x1, 0x5, 0xea3, 0x0)
close_range$auto(r5, r4, 0x0)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye4\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
socket(0x10, 0x2, 0x6)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x3, 0x8, 0x800000df, 0x9b72, 0x2, 0x40008000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0)
r0 = semctl$auto_GETPID(0x2, 0x1, 0xb, 0x2b)
prctl$auto(0x37, 0x1, r0, 0x5, 0x7)
shutdown$auto(0x200000003, 0x2)
timerfd_create$auto(0x9, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0)
pread64$auto(r0, &(0x7f0000002680)='/dev/snapshot\x00', 0x73528428, 0x3) (fail_nth: 2)
executing program 1:
r0 = socket(0x17, 0x3, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r1)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8001}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x48}, 0x1, 0x100000000000000, 0x0, 0x2000c000}, 0x0)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), r0)
getsockopt$auto(r0, 0x8, 0xd24a, 0x0, &(0x7f0000000080)=0x4db9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
landlock_restrict_self$auto(r5, 0x1)
r6 = gettid()
getpid()
timer_create$auto(0x0, &(0x7f0000000040)={@sival_ptr=0x0, @raw=0x4, 0x6, @_tid=r6}, 0x0)
r7 = socket(0x9, 0x2, 0x0)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r7)
executing program 2:
r0 = socket(0x2, 0x80002, 0x73)
getpeername$auto(r0, 0x0, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000800)='./file0\x00', 0x2240, 0x154)
bpf$auto(0x13, &(0x7f0000000780)=@link_update={0xa, @new_map_fd, 0x4007, @old_map_fd}, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6})
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0)
select$auto(0x7fffffff, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xc048ae65, 0x10000000000402)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
detailed listing:
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0)
pread64$auto(r0, &(0x7f0000002680)='/dev/snapshot\x00', 0x73528428, 0x3) (fail_nth: 2)

program crashed: WARNING: bad unlock balance in traverse
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events
detailed listing:
executing program 0:
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pread64$auto
detailed listing:
executing program 0:
pread64$auto(0xffffffffffffffff, &(0x7f0000002680)='/dev/snapshot\x00', 0x73528428, 0x3) (fail_nth: 2)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
detailed listing:
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0)
pread64$auto(r0, &(0x7f0000002680)='/dev/snapshot\x00', 0x73528428, 0x3)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
detailed listing:
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40800, 0x0)
pread64$auto(r0, &(0x7f0000002680)='/dev/snapshot\x00', 0x73528428, 0x3) (fail_nth: 2)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
detailed listing:
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0)
pread64$auto(r0, 0x0, 0x73528428, 0x3) (fail_nth: 2)

program crashed: WARNING: bad unlock balance in traverse
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
detailed listing:
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0)
pread64$auto(r0, 0x0, 0x73528428, 0x3)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
program crashed: WARNING: bad unlock balance in traverse
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
program crashed: WARNING: bad unlock balance in traverse
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
program crashed: WARNING: bad unlock balance in traverse
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
program crashed: WARNING: bad unlock balance in traverse
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
program crashed: WARNING: bad unlock balance in traverse
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
program crashed: WARNING: bad unlock balance in traverse
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-pread64$auto
program crashed: WARNING: bad unlock balance in traverse
reproducing took 33m13.538966338s
repro crashed as (corrupted=false):
RSP: 002b:00007fffa6f94b78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
RAX: ffffffffffffffda RBX: 00007fffa6f94b90 RCX: 00007f548015e799
RDX: 0000000073528428 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007fffa6f94917 R09: 0000000000000140
R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fffa6f94da8 R14: 00007fffa6f94bb0 R15: 00007fffa6f94ba0
 </TASK>
=====================================
WARNING: bad unlock balance detected!
6.15.0-syzkaller-13743-g8630c59e9936 #0 Not tainted
-------------------------------------
syz-executor738/5832 is trying to release lock (event_mutex) at:
[<ffffffff823f5690>] traverse.part.0.constprop.0+0x2c0/0x640 fs/seq_file.c:131
but there are no more locks to release!

other info that might help us debug this:
1 lock held by syz-executor738/5832:
 #0: ffff88807dc3c790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 fs/seq_file.c:182

stack backtrace:
CPU: 0 UID: 0 PID: 5832 Comm: syz-executor738 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_unlock_imbalance_bug kernel/locking/lockdep.c:5301 [inline]
 print_unlock_imbalance_bug+0x11b/0x130 kernel/locking/lockdep.c:5275
 __lock_release kernel/locking/lockdep.c:5540 [inline]
 lock_release+0x242/0x2f0 kernel/locking/lockdep.c:5892
 __mutex_unlock_slowpath+0xa2/0x6a0 kernel/locking/mutex.c:909
 traverse.part.0.constprop.0+0x2c0/0x640 fs/seq_file.c:131
 traverse fs/seq_file.c:98 [inline]
 seq_read_iter+0x932/0x12c0 fs/seq_file.c:195
 seq_read+0x39e/0x4e0 fs/seq_file.c:162
 vfs_read+0x1e1/0xc60 fs/read_write.c:570
 ksys_pread64 fs/read_write.c:763 [inline]
 __do_sys_pread64 fs/read_write.c:771 [inline]
 __se_sys_pread64 fs/read_write.c:768 [inline]
 __x64_sys_pread64+0x1eb/0x250 fs/read_write.c:768
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x490 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f548015e799
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffa6f94b78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
RAX: ffffffffffffffda RBX: 00007fffa6f94b90 RCX: 00007f548015e799
RDX: 0000000073528428 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007fffa6f94917 R09: 0000000000000140
R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fffa6f94da8 R14: 00007fffa6f94bb0 R15: 00007fffa6f94ba0
 </TASK>

final repro crashed as (corrupted=false):
RSP: 002b:00007fffa6f94b78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
RAX: ffffffffffffffda RBX: 00007fffa6f94b90 RCX: 00007f548015e799
RDX: 0000000073528428 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007fffa6f94917 R09: 0000000000000140
R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fffa6f94da8 R14: 00007fffa6f94bb0 R15: 00007fffa6f94ba0
 </TASK>
=====================================
WARNING: bad unlock balance detected!
6.15.0-syzkaller-13743-g8630c59e9936 #0 Not tainted
-------------------------------------
syz-executor738/5832 is trying to release lock (event_mutex) at:
[<ffffffff823f5690>] traverse.part.0.constprop.0+0x2c0/0x640 fs/seq_file.c:131
but there are no more locks to release!

other info that might help us debug this:
1 lock held by syz-executor738/5832:
 #0: ffff88807dc3c790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 fs/seq_file.c:182

stack backtrace:
CPU: 0 UID: 0 PID: 5832 Comm: syz-executor738 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_unlock_imbalance_bug kernel/locking/lockdep.c:5301 [inline]
 print_unlock_imbalance_bug+0x11b/0x130 kernel/locking/lockdep.c:5275
 __lock_release kernel/locking/lockdep.c:5540 [inline]
 lock_release+0x242/0x2f0 kernel/locking/lockdep.c:5892
 __mutex_unlock_slowpath+0xa2/0x6a0 kernel/locking/mutex.c:909
 traverse.part.0.constprop.0+0x2c0/0x640 fs/seq_file.c:131
 traverse fs/seq_file.c:98 [inline]
 seq_read_iter+0x932/0x12c0 fs/seq_file.c:195
 seq_read+0x39e/0x4e0 fs/seq_file.c:162
 vfs_read+0x1e1/0xc60 fs/read_write.c:570
 ksys_pread64 fs/read_write.c:763 [inline]
 __do_sys_pread64 fs/read_write.c:771 [inline]
 __se_sys_pread64 fs/read_write.c:768 [inline]
 __x64_sys_pread64+0x1eb/0x250 fs/read_write.c:768
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x490 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f548015e799
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffa6f94b78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
RAX: ffffffffffffffda RBX: 00007fffa6f94b90 RCX: 00007f548015e799
RDX: 0000000073528428 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007fffa6f94917 R09: 0000000000000140
R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fffa6f94da8 R14: 00007fffa6f94bb0 R15: 00007fffa6f94ba0
 </TASK>