Extracting prog: 29m18.025878269s
Minimizing prog: 7m6.919710363s
Simplifying prog options: 0s
Extracting C: 1m24.604501724s
Simplifying C: 11m34.68789507s


extracting reproducer from 31 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-fcntl$auto-ioperm$auto-mmap$auto-semctl$auto-set_mempolicy$auto-kexec_load$auto-openat$auto_ftrace_set_event_fops_trace_events-write$auto-read$auto_sc_seq_fops_netdebug
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
r0 = fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4)
read$auto_sc_seq_fops_netdebug(r0, &(0x7f0000000080)=""/44, 0x2c)

program did not crash
single: failed to extract reproducer
bisect: bisecting 31 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 20, 3, 10, 22, 15, 15, 10, 11, 30, 7, 8, 20, 9, 6, 15, 6, 30, 7, 30, 2, 1, 6, 8, 24, 14, 2, 11, 8, 2, 10]
detailed listing:
executing program 2:
r0 = socket(0x10, 0x2, 0x15)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x60000004}, 0x1c884)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0)
ioctl$auto(r1, 0x64cb, 0xffffffffffffd4b8)
mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5)
sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24006001}, 0x20048000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mlockall$auto(0x7)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
madvise$auto(0x0, 0x2003f0, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
socket(0x10, 0x2, 0x4)
unshare$auto(0x40000080)
mlockall$auto(0x2)
pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00::\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffff7fffff0005, 0x8)
r0 = socket(0x2, 0x3, 0x100)
bind$auto(r0, &(0x7f0000000080)=@in={0x2, 0x4e23, @multicast2}, 0x7b)
mmap$auto(0x7, 0x8, 0x7, 0x18, 0x42c8b44c, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x40, 0x2, 0x9, 0x111, 0x9, 0x7)
open(0x0, 0x22240, 0x16c)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003ec, 0x14)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
msync$auto(0x0, 0x2000000005, 0x6)
mq_open$auto(&(0x7f0000000200)='\x01', 0xde8, 0xb, &(0x7f0000000240)={0x3, 0x4, 0xffffffffffffffff, 0xb})
r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/smaps\x00', 0x400, 0x0)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f0000000700)=""/4096, 0x1000)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, 0x0, 0x20000000)
executing program 2:
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x11, 0x80003, 0x304)
setsockopt$auto(r0, 0x107, 0x5, 0x0, 0x24)
executing program 2:
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
socket(0x2, 0x1, 0x106)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch9\x00', 0x20001, 0x0)
poll$auto(&(0x7f0000000480)={r0, 0xffff, 0x29}, 0x6, 0x8)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
shutdown$auto(0x200000003, 0x2)
executing program 2:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) (async)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0)
timerfd_create$auto(0x9, 0x0) (async)
write$auto(0x3, 0x0, 0x100082) (async)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
mmap$auto(0x0, 0x2020005, 0x3711ab9e, 0xeb1, r2, 0x2) (async)
io_uring_setup$auto(0x6, 0x0) (async)
read$auto(0x3, 0x0, 0x80) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x2, 0x9)
sendmsg$auto_NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14"], 0x5f}, 0x1, 0x0, 0x0, 0x40040094}, 0x24008004) (async)
write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000280)="c2", 0x1)
executing program 32:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) (async)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0)
timerfd_create$auto(0x9, 0x0) (async)
write$auto(0x3, 0x0, 0x100082) (async)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
mmap$auto(0x0, 0x2020005, 0x3711ab9e, 0xeb1, r2, 0x2) (async)
io_uring_setup$auto(0x6, 0x0) (async)
read$auto(0x3, 0x0, 0x80) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x2, 0x9)
sendmsg$auto_NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14"], 0x5f}, 0x1, 0x0, 0x0, 0x40040094}, 0x24008004) (async)
write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000280)="c2", 0x1)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x11, 0x80003, 0x0)
setsockopt$auto(r0, 0x107, 0xd, 0x0, 0x8000)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='}\x00', 0x8)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/neigh/sit0/unres_qlen\x00', 0xa0000, 0x0)
mlockall$auto(0x7)
setresuid$auto(0x2, 0x7, 0x0)
arch_prctl$auto(0x5001, 0x5)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
executing program 3:
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/smaps_rollup\x00', 0x48000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680300000000000000000040", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf25030000000800040008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000300faffffff08000400b7000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
dup2$auto(0x5, 0x4)
write$auto(0x6, 0x0, 0x100000001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf)
executing program 3:
r0 = openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/usb/usbmon/16s\x00', 0x101, 0x0)
listen$auto(r0, 0xf7fe)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x53, 0x9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x10, 0x2, 0x14)
r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETFAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14010200", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x400c0)
r3 = socket(0x2, 0x6, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(r3, 0x10d, 0xa, 0x0, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r5 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000001640), 0x101440, 0x0)
ioctl$auto_BTRFS_IOC_DEVICES_READY(r5, 0x90009427, 0x0)
r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0)
ioctl$auto_CEC_S_MODE(r6, 0x40046109, &(0x7f0000002c40)=0xf0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r7 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0)
ioctl$auto_CEC_S_MODE(r7, 0x40046109, &(0x7f0000002c40)=0x10)
ioctl$auto_BTRFS_IOC_FORGET_DEV(r5, 0x50009405, &(0x7f0000000480)={@inferred, "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"})
ioctl$auto(r4, 0x4b66, 0xd2b6)
name_to_handle_at$auto(0xffffffffffffffff, &(0x7f0000000140)='/\x00\xa4\xc1\xd8\xbb\xd3\\\xb1x\xc2>\x9e`#oT$\xc1w\xbe\xdbo:[,(\xd7\xe5S', &(0x7f0000000000)={0xfffffffffffffdc4, 0x75c0237c, "6d962c000400003344980946"}, &(0x7f0000000280), 0x200)
r8 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fsetxattr$auto(r8, &(0x7f0000000040)='#\x00', &(0x7f0000000080), 0x11a1, 0x1)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/plpmtud_probe_interval\x00', 0x220602, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0)
executing program 1:
prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0)
prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x11, 0x80003, 0x304)
setsockopt$auto(r0, 0x107, 0x5, 0x0, 0x24)
executing program 4:
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xf, 0x1, 0x100000000, 0x8, 0x24, 0x940, 0x1ffde, 0x3, 0x2000000000000008, 0x2, 0x3, 0x25, 0x8000000002, 0x8, 0xb1, 0x9, 0x2, 0x7fff, 0x5, 0x5, 0x0, 0x9, 0x0, 0x200, 0x2, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x80000000000, 0x400000000000000, 0x0, 0x8000000000000000, 0x80000000000000, 0xffff, 0xfffffffffffffffd, 0x0, 0xfffffffffffffbfe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004000)
mmap$auto(0x100, 0x7f, 0x4, 0x18, 0x60f, 0x5)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/extfrag/unusable_index\x00', 0x20000, 0x0)
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x40800, 0x0)
pidfd_open$auto(0x1, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001000), 0x42001, 0x0)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000000000), 0x0, 0x2)
openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/kvm/mmu_flooded\x00', 0x2, 0x0)
ppoll$auto(0x0, 0xc, 0x0, 0x0, 0x8)
openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
socket(0x5, 0x1, 0x1)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x280082, 0x0)
executing program 4:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x11, 0x80003, 0x0)
setsockopt$auto(r0, 0x107, 0xd, 0x0, 0x8000)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='}\x00', 0x8)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/neigh/sit0/unres_qlen\x00', 0xa0000, 0x0)
mlockall$auto(0x7)
setresuid$auto(0x2, 0x7, 0x0)
arch_prctl$auto(0x5001, 0x5)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
executing program 1:
mmap$auto(0x0, 0x20009, 0xda, 0xeb1, 0x405, 0x0)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010325bd7000ffdbdf250a0000000d0002006e4938303231353400000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya1\x00', 0xa001, 0x0)
memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
fstatfs$auto(0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0)
mmap$auto(0x0, 0x400005, 0x2000000df, 0x9b72, 0x2, 0x8000)
setreuid$auto(0x9, 0x1)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x621f, 0x10004)
getpriority$auto(0x2, 0x9)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r3)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={"fda25684", 0xffff, 0x6, 0x2, 0x9b4, 0x9, "ce25aafc24b9952f997e703f222ce1", '\x00', "00000600", "2ff43123", ["e5ac8bddb9b6417584d22a9f", "f8ffffffffffffff00000001", "b06f8ca10c66eebcbd6f17c8", "5fe10eedab2c4b353c392a92"]})
executing program 4:
keyctl$auto(0x20, 0x72510000000, 0x69c9, 0x2, 0x6)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x68100, 0x0)
read$auto_proc_page_owner_operations_page_owner(r1, &(0x7f0000000180)=""/49, 0x31)
sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x1c}}, 0x20000850)
executing program 1:
r0 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x401, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(0xc0, &(0x7f0000000000)={{0x0, 0x22, 0x0, 0xa, 0x0, 0x989, 0x1}, 0x3}, 0x9a6, 0xfffffffe)
io_uring_setup$auto(0x3ff, 0x0)
r1 = socket(0xa, 0x80000, 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0xa, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0xa, 0x2, 0x88)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1)
sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "39d979ad7b31d41c4b05fd01dbc9"}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_prog_fd=r2}, 0xa3)
r6 = getsockopt$auto(r0, 0x84, 0x71, 0x0, 0x0)
socket(0x25, 0x3, 0x6)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
pselect6$auto(0x1, &(0x7f0000000000)={[0x6, 0x80, 0xfffffffffffffff8, 0x3, 0x728, 0x100000000, 0x8, 0x5, 0x3, 0x6, 0x98bc, 0x7, 0xc, 0x3, 0x4, 0x100000000]}, 0x0, 0x0, &(0x7f0000000200)={0x10000, 0x7fffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r6)
sendmsg$auto_NL80211_CMD_STOP_NAN(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000880)
executing program 4:
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x181580, 0x0)
pread64$auto(r0, 0x0, 0x1ff, 0x5)
ioctl$auto(0x3, 0x2283, 0x38)
r1 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
pread64$auto(r1, 0x0, 0xf469, 0xbc3ab3f)
executing program 3:
set_mempolicy$auto(0x4006, 0x0, 0x7)
r0 = socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0xb, 0x5, 0xeb1, 0x3ff, 0x8000)
mmap$auto(0x0, 0x2, 0x4000000000df, 0x40eb2, r0, 0xf)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/vimc/parameters/allocator\x00', 0x4a0101, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)="f9584bb693e8bf5c", 0x8)
io_uring_setup$auto(0x6, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x80401, 0x20008, 0x0, 0x17, r1, 0x7aac)
mmap$auto(0x0, 0x20009, 0x4002000000e3, 0xeb1, 0x401, 0x7ffd)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
ioctl$auto(0x3, 0x40103e05, 0x38)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(&(0x7f0000000000)='.\x00', 0x2, 0x508)
timerfd_create$auto(0x0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x800, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
exit$auto(0xffff)
eventfd$auto(0x3)
socket(0x11, 0x2, 0x40004088)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4)
executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x1f)
executing program 4:
mmap$auto(0x0, 0x20009, 0xda, 0xeb1, 0x405, 0x0)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x11, 0x80003, 0x0)
setsockopt$auto(r0, 0x107, 0xd, 0x0, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/neigh/sit0/unres_qlen\x00', 0xa0000, 0x0)
mlockall$auto(0x7)
setresuid$auto(0x2, 0x7, 0x0)
arch_prctl$auto(0x5001, 0x5)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
executing program 4:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0xa142, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop15/power/runtime_active_time\x00', 0x141100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/90, 0x5a)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
write$auto_snd_pcm_oss_f_reg_pcm_oss(r1, &(0x7f0000000280)="c2", 0x1)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x40000002c55, 0x0)
recvmsg$auto(0x4, 0x0, 0x33c)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r3, 0x8, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000000)=0x2)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0)
flock$auto(r4, 0xb)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x101202, 0x0)
executing program 1:
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
unshare$auto(0x40000080)
read$auto(r0, &(0x7f0000000040)='/\xe2+', 0x6)
write$auto(r0, &(0x7f0000000000)='/\xe2+', 0x6)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001)
linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
vmsplice$auto(0x3, 0x0, 0x9, 0x7)
socket(0x25, 0x1, 0xa)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
executing program 0:
r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x68100, 0x0)
read$auto_proc_page_owner_operations_page_owner(r0, &(0x7f0000000180)=""/49, 0x31)
executing program 0:
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/smaps_rollup\x00', 0x48000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680300000000000000000040", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf25030000000800040008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000300faffffff08000400b7000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
dup2$auto(0x5, 0x4)
write$auto(0x6, 0x0, 0x100000001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf)
executing program 0:
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
r0 = fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4)
read$auto_sc_seq_fops_netdebug(r0, &(0x7f0000000080)=""/44, 0x2c)

program crashed: WARNING in tracepoint_probe_unregister
bisect: bisecting 31 programs
bisect: split chunks (needed=false): <30>
bisect: split chunk #0 of len 30 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 20, 9, 6, 15, 6, 30, 7, 30, 2, 1, 6, 8, 24, 14, 2, 11, 8, 2, 10]
detailed listing:
executing program 1:
prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0)
prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x11, 0x80003, 0x304)
setsockopt$auto(r0, 0x107, 0x5, 0x0, 0x24)
executing program 4:
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xf, 0x1, 0x100000000, 0x8, 0x24, 0x940, 0x1ffde, 0x3, 0x2000000000000008, 0x2, 0x3, 0x25, 0x8000000002, 0x8, 0xb1, 0x9, 0x2, 0x7fff, 0x5, 0x5, 0x0, 0x9, 0x0, 0x200, 0x2, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x80000000000, 0x400000000000000, 0x0, 0x8000000000000000, 0x80000000000000, 0xffff, 0xfffffffffffffffd, 0x0, 0xfffffffffffffbfe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004000)
mmap$auto(0x100, 0x7f, 0x4, 0x18, 0x60f, 0x5)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/extfrag/unusable_index\x00', 0x20000, 0x0)
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x40800, 0x0)
pidfd_open$auto(0x1, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001000), 0x42001, 0x0)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000000000), 0x0, 0x2)
openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/kvm/mmu_flooded\x00', 0x2, 0x0)
ppoll$auto(0x0, 0xc, 0x0, 0x0, 0x8)
openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
socket(0x5, 0x1, 0x1)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x280082, 0x0)
executing program 4:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x11, 0x80003, 0x0)
setsockopt$auto(r0, 0x107, 0xd, 0x0, 0x8000)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='}\x00', 0x8)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/neigh/sit0/unres_qlen\x00', 0xa0000, 0x0)
mlockall$auto(0x7)
setresuid$auto(0x2, 0x7, 0x0)
arch_prctl$auto(0x5001, 0x5)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
executing program 1:
mmap$auto(0x0, 0x20009, 0xda, 0xeb1, 0x405, 0x0)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000c5000700c1007cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04700395778e7935c99f6a38f6f3e56e7d8a18d15791b3b4f9378d743a8f0cbbe1c604a782030626ead26826f4790233f19c29fbaf1da77e1b84522d05ca0f4237b24aead87b47d41805fa9967d02ad2deba1895652b8d630c30213ed8f72c1066f1bb9fb1b242d08a55d32398d8d3c635008f2c61049c8abf600a98d1d2d0b0027aecaf27d20b6ff4129883e111e1c858000000dc00090069fccb38f57447a8af8c40a03b92af7adc0c48af4308483b99aa587ed8711b4a79a383c263698842365af6807d1be1800fd492770983a6df345fb472e9fa41b667af43bc36d7063b6b93ab7661925e8d71452acd95b788c31a32ae903b96b9ed9a5e3542c625105e8f21a5b41ff3d17f8704581f4b8b75ae741d0fba8cab2e187c93eeea89f6cf6ab7cc496e0bd9759cc0b408bbe0c6eae2aa29c2d97d48a55fc0ff937c90173d61cf652f97cb301e4d7e3bac0026732e22eadd3a6c5ffa4faed6855a86814c920a650a61936305d2713db1c92a23"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010325bd7000ffdbdf250a0000000d0002006e4938303231353400000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya1\x00', 0xa001, 0x0)
memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
fstatfs$auto(0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0)
mmap$auto(0x0, 0x400005, 0x2000000df, 0x9b72, 0x2, 0x8000)
setreuid$auto(0x9, 0x1)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x621f, 0x10004)
getpriority$auto(0x2, 0x9)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r3)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={"fda25684", 0xffff, 0x6, 0x2, 0x9b4, 0x9, "ce25aafc24b9952f997e703f222ce1", '\x00', "00000600", "2ff43123", ["e5ac8bddb9b6417584d22a9f", "f8ffffffffffffff00000001", "b06f8ca10c66eebcbd6f17c8", "5fe10eedab2c4b353c392a92"]})
executing program 4:
keyctl$auto(0x20, 0x72510000000, 0x69c9, 0x2, 0x6)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x68100, 0x0)
read$auto_proc_page_owner_operations_page_owner(r1, &(0x7f0000000180)=""/49, 0x31)
sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x1c}}, 0x20000850)
executing program 1:
r0 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x401, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(0xc0, &(0x7f0000000000)={{0x0, 0x22, 0x0, 0xa, 0x0, 0x989, 0x1}, 0x3}, 0x9a6, 0xfffffffe)
io_uring_setup$auto(0x3ff, 0x0)
r1 = socket(0xa, 0x80000, 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0xa, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0xa, 0x2, 0x88)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1)
sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "39d979ad7b31d41c4b05fd01dbc9"}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_prog_fd=r2}, 0xa3)
r6 = getsockopt$auto(r0, 0x84, 0x71, 0x0, 0x0)
socket(0x25, 0x3, 0x6)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
pselect6$auto(0x1, &(0x7f0000000000)={[0x6, 0x80, 0xfffffffffffffff8, 0x3, 0x728, 0x100000000, 0x8, 0x5, 0x3, 0x6, 0x98bc, 0x7, 0xc, 0x3, 0x4, 0x100000000]}, 0x0, 0x0, &(0x7f0000000200)={0x10000, 0x7fffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r6)
sendmsg$auto_NL80211_CMD_STOP_NAN(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000880)
executing program 4:
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x181580, 0x0)
pread64$auto(r0, 0x0, 0x1ff, 0x5)
ioctl$auto(0x3, 0x2283, 0x38)
r1 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
pread64$auto(r1, 0x0, 0xf469, 0xbc3ab3f)
executing program 3:
set_mempolicy$auto(0x4006, 0x0, 0x7)
r0 = socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0xb, 0x5, 0xeb1, 0x3ff, 0x8000)
mmap$auto(0x0, 0x2, 0x4000000000df, 0x40eb2, r0, 0xf)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/vimc/parameters/allocator\x00', 0x4a0101, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)="f9584bb693e8bf5c", 0x8)
io_uring_setup$auto(0x6, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x80401, 0x20008, 0x0, 0x17, r1, 0x7aac)
mmap$auto(0x0, 0x20009, 0x4002000000e3, 0xeb1, 0x401, 0x7ffd)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
ioctl$auto(0x3, 0x40103e05, 0x38)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(&(0x7f0000000000)='.\x00', 0x2, 0x508)
timerfd_create$auto(0x0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x800, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
exit$auto(0xffff)
eventfd$auto(0x3)
socket(0x11, 0x2, 0x40004088)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4)
executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x1f)
executing program 4:
mmap$auto(0x0, 0x20009, 0xda, 0xeb1, 0x405, 0x0)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000c5000700c1007cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04700395778e7935c99f6a38f6f3e56e7d8a18d15791b3b4f9378d743a8f0cbbe1c604a782030626ead26826f4790233f19c29fbaf1da77e1b84522d05ca0f4237b24aead87b47d41805fa9967d02ad2deba1895652b8d630c30213ed8f72c1066f1bb9fb1b242d08a55d32398d8d3c635008f2c61049c8abf600a98d1d2d0b0027aecaf27d20b6ff4129883e111e1c858000000dc00090069fccb38f57447a8af8c40a03b92af7adc0c48af4308483b99aa587ed8711b4a79a383c263698842365af6807d1be1800fd492770983a6df345fb472e9fa41b667af43bc36d7063b6b93ab7661925e8d71452acd95b788c31a32ae903b96b9ed9a5e3542c625105e8f21a5b41ff3d17f8704581f4b8b75ae741d0fba8cab2e187c93eeea89f6cf6ab7cc496e0bd9759cc0b408bbe0c6eae2aa29c2d97d48a55fc0ff937c90173d61cf652f97cb301e4d7e3bac0026732e22eadd3a6c5ffa4faed6855a86814c920a650a61936305d2713db1c92a23"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x11, 0x80003, 0x0)
setsockopt$auto(r0, 0x107, 0xd, 0x0, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/neigh/sit0/unres_qlen\x00', 0xa0000, 0x0)
mlockall$auto(0x7)
setresuid$auto(0x2, 0x7, 0x0)
arch_prctl$auto(0x5001, 0x5)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
executing program 4:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0xa142, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop15/power/runtime_active_time\x00', 0x141100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/90, 0x5a)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
write$auto_snd_pcm_oss_f_reg_pcm_oss(r1, &(0x7f0000000280)="c2", 0x1)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x40000002c55, 0x0)
recvmsg$auto(0x4, 0x0, 0x33c)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r3, 0x8, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000000)=0x2)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0)
flock$auto(r4, 0xb)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x101202, 0x0)
executing program 1:
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
unshare$auto(0x40000080)
read$auto(r0, &(0x7f0000000040)='/\xe2+', 0x6)
write$auto(r0, &(0x7f0000000000)='/\xe2+', 0x6)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001)
linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
vmsplice$auto(0x3, 0x0, 0x9, 0x7)
socket(0x25, 0x1, 0xa)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
executing program 0:
r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x68100, 0x0)
read$auto_proc_page_owner_operations_page_owner(r0, &(0x7f0000000180)=""/49, 0x31)
executing program 0:
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/smaps_rollup\x00', 0x48000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680300000000000000000040", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf25030000000800040008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000300faffffff08000400b7000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
dup2$auto(0x5, 0x4)
write$auto(0x6, 0x0, 0x100000001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf)
executing program 0:
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
r0 = fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4)
read$auto_sc_seq_fops_netdebug(r0, &(0x7f0000000080)=""/44, 0x2c)

program crashed: WARNING in tracepoint_probe_unregister
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 6, 8, 24, 14, 2, 11, 8, 2, 10]
detailed listing:
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4)
executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x1f)
executing program 4:
mmap$auto(0x0, 0x20009, 0xda, 0xeb1, 0x405, 0x0)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x11, 0x80003, 0x0)
setsockopt$auto(r0, 0x107, 0xd, 0x0, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/neigh/sit0/unres_qlen\x00', 0xa0000, 0x0)
mlockall$auto(0x7)
setresuid$auto(0x2, 0x7, 0x0)
arch_prctl$auto(0x5001, 0x5)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
executing program 4:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0xa142, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop15/power/runtime_active_time\x00', 0x141100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/90, 0x5a)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
write$auto_snd_pcm_oss_f_reg_pcm_oss(r1, &(0x7f0000000280)="c2", 0x1)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x40000002c55, 0x0)
recvmsg$auto(0x4, 0x0, 0x33c)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r3, 0x8, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000000)=0x2)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0)
flock$auto(r4, 0xb)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x101202, 0x0)
executing program 1:
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
unshare$auto(0x40000080)
read$auto(r0, &(0x7f0000000040)='/\xe2+', 0x6)
write$auto(r0, &(0x7f0000000000)='/\xe2+', 0x6)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001)
linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
vmsplice$auto(0x3, 0x0, 0x9, 0x7)
socket(0x25, 0x1, 0xa)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
executing program 0:
r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x68100, 0x0)
read$auto_proc_page_owner_operations_page_owner(r0, &(0x7f0000000180)=""/49, 0x31)
executing program 0:
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/smaps_rollup\x00', 0x48000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680300000000000000000040", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf25030000000800040008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000300faffffff08000400b7000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
dup2$auto(0x5, 0x4)
write$auto(0x6, 0x0, 0x100000001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf)
executing program 0:
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
r0 = fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4)
read$auto_sc_seq_fops_netdebug(r0, &(0x7f0000000080)=""/44, 0x2c)

program crashed: WARNING in tracepoint_probe_unregister
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-fcntl$auto-ioperm$auto-mmap$auto-semctl$auto-set_mempolicy$auto-kexec_load$auto-openat$auto_ftrace_set_event_fops_trace_events-write$auto-read$auto_sc_seq_fops_netdebug
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
r0 = fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4)
read$auto_sc_seq_fops_netdebug(r0, &(0x7f0000000080)=""/44, 0x2c)

program did not crash
bisect: split chunks (needed=true): <10>
bisect: split chunk #0 of len 10 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 2, 11, 8, 2, 10]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
unshare$auto(0x40000080)
read$auto(r0, &(0x7f0000000040)='/\xe2+', 0x6)
write$auto(r0, &(0x7f0000000000)='/\xe2+', 0x6)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001)
linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
vmsplice$auto(0x3, 0x0, 0x9, 0x7)
socket(0x25, 0x1, 0xa)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
executing program 0:
r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x68100, 0x0)
read$auto_proc_page_owner_operations_page_owner(r0, &(0x7f0000000180)=""/49, 0x31)
executing program 0:
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/smaps_rollup\x00', 0x48000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680300000000000000000040", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf25030000000800040008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000300faffffff08000400b7000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
dup2$auto(0x5, 0x4)
write$auto(0x6, 0x0, 0x100000001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf)
executing program 0:
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
r0 = fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4)
read$auto_sc_seq_fops_netdebug(r0, &(0x7f0000000080)=""/44, 0x2c)

program crashed: WARNING in tracepoint_probe_unregister
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <5>
bisect: split chunk #0 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 2, 10]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
r0 = fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4)
read$auto_sc_seq_fops_netdebug(r0, &(0x7f0000000080)=""/44, 0x2c)

program crashed: WARNING in tracepoint_probe_unregister
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 10]
detailed listing:
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
r0 = fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4)
read$auto_sc_seq_fops_netdebug(r0, &(0x7f0000000080)=""/44, 0x2c)

program crashed: WARNING in tracepoint_probe_unregister
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 2 programs left: 

executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
r0 = fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4)
read$auto_sc_seq_fops_netdebug(r0, &(0x7f0000000080)=""/44, 0x2c)


bisect: trying to concatenate
bisect: concatenate 2 entries
minimizing program #0 before concatenation
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 10]
detailed listing:
executing program 0:
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
r0 = fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4)
read$auto_sc_seq_fops_netdebug(r0, &(0x7f0000000080)=""/44, 0x2c)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 10]
detailed listing:
executing program 0:
write$auto(0xffffffffffffffff, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
r0 = fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4)
read$auto_sc_seq_fops_netdebug(r0, &(0x7f0000000080)=""/44, 0x2c)

program did not crash
minimized 2 calls -> 2 calls
minimizing program #1 before concatenation
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 9]
detailed listing:
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8]
detailed listing:
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7]
detailed listing:
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)
kexec_load$auto(0x2, 0x7, 0x0, 0x4)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6]
detailed listing:
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5]
detailed listing:
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x20001)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4]
detailed listing:
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3]
detailed listing:
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
fcntl$auto(0x2, 0x11, 0x0)
ioperm$auto(0x7, 0x6, 0x2)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2]
detailed listing:
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)
fcntl$auto(0x2, 0x11, 0x0)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1]
detailed listing:
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:
mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x259)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 0]
detailed listing:
executing program 3:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)
executing program 0:

program crashed: WARNING in tracepoint_probe_unregister
minimized 10 calls -> 0 calls
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)

program crashed: WARNING in tracepoint_probe_unregister
bisect: concatenation succeeded
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events
detailed listing:
executing program 0:
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): write$auto
detailed listing:
executing program 0:
write$auto(0xffffffffffffffff, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0)
write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) (fail_nth: 2)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, 0x0, 0x4) (fail_nth: 2)

program did not crash
extracting C reproducer
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-write$auto
program crashed: WARNING in tracepoint_probe_unregister
simplifying C reproducer
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-write$auto
program crashed: WARNING in tracepoint_probe_unregister
testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-write$auto
program did not crash
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-write$auto
program crashed: WARNING in tracepoint_probe_unregister
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-write$auto
program crashed: WARNING in tracepoint_probe_unregister
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-write$auto
program crashed: WARNING in tracepoint_probe_unregister
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-write$auto
program crashed: WARNING in tracepoint_probe_unregister
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-write$auto
program crashed: WARNING in tracepoint_probe_unregister
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_set_event_fops_trace_events-write$auto
program crashed: WARNING in tracepoint_probe_unregister
reproducing took 49m24.237997174s
repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5829 at kernel/tracepoint.c:358 tracepoint_remove_func kernel/tracepoint.c:358 [inline]
WARNING: CPU: 1 PID: 5829 at kernel/tracepoint.c:358 tracepoint_probe_unregister+0x894/0xd70 kernel/tracepoint.c:504
Modules linked in:
CPU: 1 UID: 0 PID: 5829 Comm: syz-executor241 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
RIP: 0010:tracepoint_remove_func kernel/tracepoint.c:358 [inline]
RIP: 0010:tracepoint_probe_unregister+0x894/0xd70 kernel/tracepoint.c:504
Code: 41 5e 41 5f c3 cc cc cc cc e8 68 27 fe ff 48 c7 c6 60 16 9b 81 48 89 df e8 49 52 e5 ff eb 9f bb fe ff ff ff e8 4d 27 fe ff 90 <0f> 0b 90 eb 91 e8 42 27 fe ff 48 89 da 48 b8 00 00 00 00 00 fc ff
RSP: 0018:ffffc90003e0f898 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 00000000fffffffe RCX: ffffffff819b24ff
RDX: ffff88802f9c1e00 RSI: ffffffff819b27a3 RDI: 0000000000000005
RBP: ffffffff8ecbca40 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000003 R12: ffffffff81a0eb30
R13: 0000000000000402 R14: 0000000000000002 R15: ffffffff8de3fcd8
FS:  000055556e1df380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000100 CR3: 00000000763aa000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 unregister_trace_sched_switch include/trace/events/sched.h:222 [inline]
 tracing_sched_unregister kernel/trace/trace_sched_switch.c:87 [inline]
 tracing_stop_sched_switch kernel/trace/trace_sched_switch.c:129 [inline]
 tracing_stop_cmdline_record+0x66/0xa0 kernel/trace/trace_sched_switch.c:140
 __ftrace_event_enable_disable+0x73f/0x850 kernel/trace/trace_events.c:645
 ftrace_event_enable_disable kernel/trace/trace_events.c:730 [inline]
 ftrace_clear_events kernel/trace/trace_events.c:739 [inline]
 ftrace_event_set_open+0x238/0x2d0 kernel/trace/trace_events.c:2270
 do_dentry_open+0xf59/0x1ea0 fs/open.c:945
 vfs_open+0x82/0x3f0 fs/open.c:1075
 do_open fs/namei.c:3828 [inline]
 path_openat+0x1e6a/0x2d60 fs/namei.c:3987
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
 do_sys_open fs/open.c:1417 [inline]
 __do_sys_openat fs/open.c:1433 [inline]
 __se_sys_openat fs/open.c:1428 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1428
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7efe2dcdd6e9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd6660cd18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efe2dcdd6e9
RDX: 0000000000020201 RSI: 0000000020000100 RDI: ffffffffffffff9c
RBP: 0000000000010bb4 R08: 0000000000000000 R09: 00000000000000a0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6660cd2c
R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5829 at kernel/tracepoint.c:358 tracepoint_remove_func kernel/tracepoint.c:358 [inline]
WARNING: CPU: 1 PID: 5829 at kernel/tracepoint.c:358 tracepoint_probe_unregister+0x894/0xd70 kernel/tracepoint.c:504
Modules linked in:
CPU: 1 UID: 0 PID: 5829 Comm: syz-executor241 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
RIP: 0010:tracepoint_remove_func kernel/tracepoint.c:358 [inline]
RIP: 0010:tracepoint_probe_unregister+0x894/0xd70 kernel/tracepoint.c:504
Code: 41 5e 41 5f c3 cc cc cc cc e8 68 27 fe ff 48 c7 c6 60 16 9b 81 48 89 df e8 49 52 e5 ff eb 9f bb fe ff ff ff e8 4d 27 fe ff 90 <0f> 0b 90 eb 91 e8 42 27 fe ff 48 89 da 48 b8 00 00 00 00 00 fc ff
RSP: 0018:ffffc90003e0f898 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 00000000fffffffe RCX: ffffffff819b24ff
RDX: ffff88802f9c1e00 RSI: ffffffff819b27a3 RDI: 0000000000000005
RBP: ffffffff8ecbca40 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000003 R12: ffffffff81a0eb30
R13: 0000000000000402 R14: 0000000000000002 R15: ffffffff8de3fcd8
FS:  000055556e1df380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000100 CR3: 00000000763aa000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 unregister_trace_sched_switch include/trace/events/sched.h:222 [inline]
 tracing_sched_unregister kernel/trace/trace_sched_switch.c:87 [inline]
 tracing_stop_sched_switch kernel/trace/trace_sched_switch.c:129 [inline]
 tracing_stop_cmdline_record+0x66/0xa0 kernel/trace/trace_sched_switch.c:140
 __ftrace_event_enable_disable+0x73f/0x850 kernel/trace/trace_events.c:645
 ftrace_event_enable_disable kernel/trace/trace_events.c:730 [inline]
 ftrace_clear_events kernel/trace/trace_events.c:739 [inline]
 ftrace_event_set_open+0x238/0x2d0 kernel/trace/trace_events.c:2270
 do_dentry_open+0xf59/0x1ea0 fs/open.c:945
 vfs_open+0x82/0x3f0 fs/open.c:1075
 do_open fs/namei.c:3828 [inline]
 path_openat+0x1e6a/0x2d60 fs/namei.c:3987
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
 do_sys_open fs/open.c:1417 [inline]
 __do_sys_openat fs/open.c:1433 [inline]
 __se_sys_openat fs/open.c:1428 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1428
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7efe2dcdd6e9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd6660cd18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efe2dcdd6e9
RDX: 0000000000020201 RSI: 0000000020000100 RDI: ffffffffffffff9c
RBP: 0000000000010bb4 R08: 0000000000000000 R09: 00000000000000a0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6660cd2c
R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
 </TASK>