Extracting prog: 1h19m35.994864518s
Minimizing prog: 3m17.785889036s
Simplifying prog options: 0s
Extracting C: 1m20.77976138s
Simplifying C: 10m23.165699215s


extracting reproducer from 27 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-fstat$auto-mincore$auto-socket-setsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program did not crash
single: failed to extract reproducer
bisect: bisecting 27 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 2:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 32:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='d\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
ioperm$auto(0x3b, 0xf99b, 0x6)
close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002)
fanotify_init$auto(0x5, 0x2)
open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c)
pwritev$auto(0x1, 0x0, 0x0, 0x9, 0x2)
executing program 0:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x18, 0x940, 0x1ffe0, 0x3, 0x6, 0x6, 0x7, 0x400, 0x2, 0x9, 0x6, 0x10009, 0x2, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x7)
open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400)
executing program 1:
wait4$auto(0x800, 0x0, 0x4, &(0x7f00000000c0)={{0x81, 0xf7f}, {0x5, 0x4}, 0x8, 0x0, 0xffffffff9f75105c, 0x5, 0x4, 0x100000001, 0x8, 0x9, 0x1, 0xffffffffffffff77, 0x8000, 0x1, 0x0, 0xf})
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffbfffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004)
move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x3, 0x6)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c457ffffffffffffff000300"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0xb, 0x0)
preadv$auto(0xc8, &(0x7f00000017c0)={0x0, 0x6}, 0x81, 0x7ebf, 0x0)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'macsec0\x00', <r3=>0x0})
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
statmount$auto(0x0, &(0x7f0000000180)={0x7, 0x4, 0x9, 0x3, 0x30, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x4, 0x3, 0xb0, 0x9, 0x2, 0x7fff, 0x5, 0x7fffffff, 0x0, 0x0, 0x2000002, 0x0, 0x2}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68)
connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55)
write$auto(0x3, 0x0, 0x20)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
timerfd_settime$auto(0x80000000, 0x3, 0x0, 0x0)
getpriority$auto(0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)={0xa, @sockaddr_1_1={"c78edd"}}, 0x2)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1d, &(0x7f0000000000), 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000e1, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
map_shadow_stack$auto(0x0, 0x7, 0x9)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program crashed: WARNING in ip6mr_free_table
bisect: bisecting 27 programs
bisect: split chunks (needed=false): <26>
bisect: split chunk #0 of len 26 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x18, 0x940, 0x1ffe0, 0x3, 0x6, 0x6, 0x7, 0x400, 0x2, 0x9, 0x6, 0x10009, 0x2, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x7)
open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400)
executing program 1:
wait4$auto(0x800, 0x0, 0x4, &(0x7f00000000c0)={{0x81, 0xf7f}, {0x5, 0x4}, 0x8, 0x0, 0xffffffff9f75105c, 0x5, 0x4, 0x100000001, 0x8, 0x9, 0x1, 0xffffffffffffff77, 0x8000, 0x1, 0x0, 0xf})
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffbfffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004)
move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x3, 0x6)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c457ffffffffffffff000300"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0xb, 0x0)
preadv$auto(0xc8, &(0x7f00000017c0)={0x0, 0x6}, 0x81, 0x7ebf, 0x0)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'macsec0\x00', <r3=>0x0})
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
statmount$auto(0x0, &(0x7f0000000180)={0x7, 0x4, 0x9, 0x3, 0x30, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x4, 0x3, 0xb0, 0x9, 0x2, 0x7fff, 0x5, 0x7fffffff, 0x0, 0x0, 0x2000002, 0x0, 0x2}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68)
connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55)
write$auto(0x3, 0x0, 0x20)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
timerfd_settime$auto(0x80000000, 0x3, 0x0, 0x0)
getpriority$auto(0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)={0xa, @sockaddr_1_1={"c78edd"}}, 0x2)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1d, &(0x7f0000000000), 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000e1, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
map_shadow_stack$auto(0x0, 0x7, 0x9)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 2:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 32:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='d\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
ioperm$auto(0x3b, 0xf99b, 0x6)
close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002)
fanotify_init$auto(0x5, 0x2)
open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c)
pwritev$auto(0x1, 0x0, 0x0, 0x9, 0x2)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68)
connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55)
write$auto(0x3, 0x0, 0x20)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
timerfd_settime$auto(0x80000000, 0x3, 0x0, 0x0)
getpriority$auto(0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)={0xa, @sockaddr_1_1={"c78edd"}}, 0x2)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1d, &(0x7f0000000000), 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000e1, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
map_shadow_stack$auto(0x0, 0x7, 0x9)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program crashed: WARNING in ip6mr_free_table
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 2:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 32:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='d\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
ioperm$auto(0x3b, 0xf99b, 0x6)
close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002)
fanotify_init$auto(0x5, 0x2)
open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c)
pwritev$auto(0x1, 0x0, 0x0, 0x9, 0x2)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program did not crash
bisect: split chunks (needed=true): <9>, <8>
bisect: split chunk #0 of len 9 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 32:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='d\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
ioperm$auto(0x3b, 0xf99b, 0x6)
close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002)
fanotify_init$auto(0x5, 0x2)
open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c)
pwritev$auto(0x1, 0x0, 0x0, 0x9, 0x2)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68)
connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55)
write$auto(0x3, 0x0, 0x20)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
timerfd_settime$auto(0x80000000, 0x3, 0x0, 0x0)
getpriority$auto(0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)={0xa, @sockaddr_1_1={"c78edd"}}, 0x2)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1d, &(0x7f0000000000), 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000e1, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
map_shadow_stack$auto(0x0, 0x7, 0x9)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68)
connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55)
write$auto(0x3, 0x0, 0x20)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
timerfd_settime$auto(0x80000000, 0x3, 0x0, 0x0)
getpriority$auto(0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)={0xa, @sockaddr_1_1={"c78edd"}}, 0x2)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1d, &(0x7f0000000000), 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000e1, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
map_shadow_stack$auto(0x0, 0x7, 0x9)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program crashed: WARNING in ip6mr_free_table
bisect: the chunk can be dropped
bisect: split chunk #1 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program crashed: WARNING in ip6mr_free_table
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <5>, <4>
bisect: split chunk #0 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: split chunk #1 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 4, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program did not crash
bisect: split chunks (needed=true): <3>, <2>, <2>, <2>
bisect: split chunk #0 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: split chunk #1 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: split chunk #2 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 4, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: split chunk #3 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 4, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 4, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)

program did not crash
bisect: too many guilty chunks, aborting
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-fstat$auto-mincore$auto-socket-setsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program did not crash
single: failed to extract reproducer
bisect: bisecting 27 programs with base timeout 1m40s
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 2:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 32:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='d\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
ioperm$auto(0x3b, 0xf99b, 0x6)
close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002)
fanotify_init$auto(0x5, 0x2)
open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c)
pwritev$auto(0x1, 0x0, 0x0, 0x9, 0x2)
executing program 0:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x18, 0x940, 0x1ffe0, 0x3, 0x6, 0x6, 0x7, 0x400, 0x2, 0x9, 0x6, 0x10009, 0x2, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x7)
open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400)
executing program 1:
wait4$auto(0x800, 0x0, 0x4, &(0x7f00000000c0)={{0x81, 0xf7f}, {0x5, 0x4}, 0x8, 0x0, 0xffffffff9f75105c, 0x5, 0x4, 0x100000001, 0x8, 0x9, 0x1, 0xffffffffffffff77, 0x8000, 0x1, 0x0, 0xf})
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffbfffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004)
move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x3, 0x6)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c457ffffffffffffff000300"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0xb, 0x0)
preadv$auto(0xc8, &(0x7f00000017c0)={0x0, 0x6}, 0x81, 0x7ebf, 0x0)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'macsec0\x00', <r3=>0x0})
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
statmount$auto(0x0, &(0x7f0000000180)={0x7, 0x4, 0x9, 0x3, 0x30, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x4, 0x3, 0xb0, 0x9, 0x2, 0x7fff, 0x5, 0x7fffffff, 0x0, 0x0, 0x2000002, 0x0, 0x2}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68)
connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55)
write$auto(0x3, 0x0, 0x20)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
timerfd_settime$auto(0x80000000, 0x3, 0x0, 0x0)
getpriority$auto(0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)={0xa, @sockaddr_1_1={"c78edd"}}, 0x2)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1d, &(0x7f0000000000), 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000e1, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
map_shadow_stack$auto(0x0, 0x7, 0x9)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program crashed: WARNING in ip6mr_free_table
bisect: bisecting 27 programs
bisect: split chunks (needed=false): <26>
bisect: split chunk #0 of len 26 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x18, 0x940, 0x1ffe0, 0x3, 0x6, 0x6, 0x7, 0x400, 0x2, 0x9, 0x6, 0x10009, 0x2, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x7)
open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400)
executing program 1:
wait4$auto(0x800, 0x0, 0x4, &(0x7f00000000c0)={{0x81, 0xf7f}, {0x5, 0x4}, 0x8, 0x0, 0xffffffff9f75105c, 0x5, 0x4, 0x100000001, 0x8, 0x9, 0x1, 0xffffffffffffff77, 0x8000, 0x1, 0x0, 0xf})
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffbfffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004)
move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x3, 0x6)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c457ffffffffffffff000300"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0xb, 0x0)
preadv$auto(0xc8, &(0x7f00000017c0)={0x0, 0x6}, 0x81, 0x7ebf, 0x0)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'macsec0\x00', <r3=>0x0})
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
statmount$auto(0x0, &(0x7f0000000180)={0x7, 0x4, 0x9, 0x3, 0x30, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x4, 0x3, 0xb0, 0x9, 0x2, 0x7fff, 0x5, 0x7fffffff, 0x0, 0x0, 0x2000002, 0x0, 0x2}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68)
connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55)
write$auto(0x3, 0x0, 0x20)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
timerfd_settime$auto(0x80000000, 0x3, 0x0, 0x0)
getpriority$auto(0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)={0xa, @sockaddr_1_1={"c78edd"}}, 0x2)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1d, &(0x7f0000000000), 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000e1, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
map_shadow_stack$auto(0x0, 0x7, 0x9)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 2:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 32:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='d\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
ioperm$auto(0x3b, 0xf99b, 0x6)
close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002)
fanotify_init$auto(0x5, 0x2)
open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c)
pwritev$auto(0x1, 0x0, 0x0, 0x9, 0x2)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68)
connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55)
write$auto(0x3, 0x0, 0x20)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
timerfd_settime$auto(0x80000000, 0x3, 0x0, 0x0)
getpriority$auto(0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)={0xa, @sockaddr_1_1={"c78edd"}}, 0x2)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1d, &(0x7f0000000000), 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000e1, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
map_shadow_stack$auto(0x0, 0x7, 0x9)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program crashed: WARNING in ip6mr_free_table
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 2:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 32:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='d\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
ioperm$auto(0x3b, 0xf99b, 0x6)
close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002)
fanotify_init$auto(0x5, 0x2)
open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c)
pwritev$auto(0x1, 0x0, 0x0, 0x9, 0x2)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program did not crash
bisect: split chunks (needed=true): <9>, <8>
bisect: split chunk #0 of len 9 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 32:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'', @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mq_open$auto(&(0x7f0000000000)='-\x00', 0x955, 0x1, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='d\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
ioperm$auto(0x3b, 0xf99b, 0x6)
close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002)
fanotify_init$auto(0x5, 0x2)
open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c)
pwritev$auto(0x1, 0x0, 0x0, 0x9, 0x2)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68)
connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55)
write$auto(0x3, 0x0, 0x20)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
timerfd_settime$auto(0x80000000, 0x3, 0x0, 0x0)
getpriority$auto(0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)={0xa, @sockaddr_1_1={"c78edd"}}, 0x2)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1d, &(0x7f0000000000), 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000e1, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
map_shadow_stack$auto(0x0, 0x7, 0x9)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68)
connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55)
write$auto(0x3, 0x0, 0x20)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
timerfd_settime$auto(0x80000000, 0x3, 0x0, 0x0)
getpriority$auto(0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)={0xa, @sockaddr_1_1={"c78edd"}}, 0x2)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1d, &(0x7f0000000000), 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000e1, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
map_shadow_stack$auto(0x0, 0x7, 0x9)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program crashed: WARNING in ip6mr_free_table
bisect: the chunk can be dropped
bisect: split chunk #1 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
read$auto(0x4, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0x10001)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
open(0x0, 0x22240, 0x155)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x68)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program crashed: WARNING in ip6mr_free_table
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <5>, <4>
bisect: split chunk #0 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 4, 5, 5, 5, 5]
detailed listing:
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program crashed: WARNING in ip6mr_free_table
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5]
detailed listing:
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)
executing program 3:
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1, 0x0, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28)
executing program 0:
socket(0xa, 0x1, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
ioctl$auto(0x3, 0x894b, 0x38)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 4, 5, 5]
detailed listing:
executing program 2:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100)
write$auto(r0, &(0x7f0000000000)='}\x00', 0x8)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x2, 0x4)
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program crashed: WARNING in ip6mr_free_table
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>, <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program crashed: WARNING in ip6mr_free_table
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 4:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
ioctl$auto(0x3, 0x5411, 0x8000000000000000)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program crashed: WARNING in ip6mr_free_table
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <1>, <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #1 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 3 programs left: 

executing program 2:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)


bisect: trying to concatenate
bisect: concatenate 3 entries
minimizing program #0 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 5]
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 5]
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program crashed: WARNING in ip6mr_free_table
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 4, 5]
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program crashed: WARNING in ip6mr_free_table
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4, 5]
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program crashed: WARNING in ip6mr_free_table
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 4, 5]
detailed listing:
executing program 0:
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70fd2c, 0x25dfdbff}, 0x14}}, 0x4010)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program crashed: WARNING in ip6mr_free_table
minimized 5 calls -> 1 calls
minimizing program #1 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 3, 5]
detailed listing:
executing program 2:
tkill$auto(0x1, 0x7)
executing program 0:
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program crashed: WARNING in ip6mr_free_table
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 2, 5]
detailed listing:
executing program 2:
tkill$auto(0x1, 0x7)
executing program 0:
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program crashed: WARNING in ip6mr_free_table
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 5]
detailed listing:
executing program 2:
tkill$auto(0x1, 0x7)
executing program 0:
unshare$auto(0x40000080)
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program crashed: WARNING in ip6mr_free_table
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 0, 5]
detailed listing:
executing program 2:
tkill$auto(0x1, 0x7)
executing program 0:
executing program 4:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201)

program did not crash
minimized 4 calls -> 1 calls
minimizing program #2 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 4]
detailed listing:
executing program 2:
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
socket(0x2b, 0x1, 0x1)

program crashed: WARNING in ip6mr_free_table
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 3]
detailed listing:
executing program 2:
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)

program crashed: WARNING in ip6mr_free_table
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 2]
detailed listing:
executing program 2:
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)

program crashed: WARNING in ip6mr_free_table
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1]
detailed listing:
executing program 2:
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 0]
detailed listing:
executing program 2:
tkill$auto(0x1, 0x7)
executing program 3:
unshare$auto(0x40000080)
executing program 0:

program crashed: WARNING in ip6mr_free_table
minimized 5 calls -> 0 calls
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-unshare$auto
detailed listing:
executing program 0:
tkill$auto(0x1, 0x7)
unshare$auto(0x40000080)

program crashed: WARNING in ip6mr_free_table
bisect: concatenation succeeded
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=1m7.644084856s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto
detailed listing:
executing program 0:
tkill$auto(0x1, 0x7)

program did not crash
testing program (duration=1m7.644084856s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto
detailed listing:
executing program 0:
unshare$auto(0x40000080)

program crashed: WARNING in ip6mr_free_table
extracting C reproducer
testing compiled C program (duration=1m7.644084856s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto
program crashed: WARNING in ip6mr_free_table
simplifying C reproducer
testing compiled C program (duration=1m7.644084856s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto
program did not crash
testing compiled C program (duration=1m7.644084856s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto
program crashed: WARNING in ip6mr_free_table
testing compiled C program (duration=1m7.644084856s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto
program crashed: WARNING in ip6mr_free_table
testing compiled C program (duration=1m7.644084856s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto
program crashed: WARNING in ip6mr_free_table
testing compiled C program (duration=1m7.644084856s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto
program crashed: WARNING in ip6mr_free_table
testing compiled C program (duration=1m7.644084856s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto
program crashed: WARNING in ip6mr_free_table
testing compiled C program (duration=1m7.644084856s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto
program crashed: WARNING in ip6mr_free_table
reproducing took 1h34m37.726233317s
repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 0 PID: 6357 at net/ipv6/ip6mr.c:419 ip6mr_free_table+0xbd/0x120 net/ipv6/ip6mr.c:419
Modules linked in:
CPU: 0 UID: 0 PID: 6357 Comm: syz-executor286 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:ip6mr_free_table+0xbd/0x120 net/ipv6/ip6mr.c:419
Code: 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 58 49 83 bc 24 c0 0e 00 00 00 74 09 e8 34 3f bb f7 90 <0f> 0b 90 e8 2b 3f bb f7 48 8d 7b 38 e8 02 17 a8 f7 48 89 df be 0f
RSP: 0018:ffffc9000461fbd8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff88802d3c8000 RCX: ffffffff89de0114
RDX: ffff88802eec3c00 RSI: ffffffff89de014c RDI: ffff88807bbce980
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffff88807bbcdac0
R13: ffff88802d3c8000 R14: ffff88802d3c8008 R15: dead000000000100
FS:  00007f2b8d2476c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000563e73d490e8 CR3: 0000000029b22000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ip6mr_rules_exit+0x176/0x2d0 net/ipv6/ip6mr.c:283
 ip6mr_net_exit_batch+0x53/0xa0 net/ipv6/ip6mr.c:1388
 ops_exit_list+0x128/0x180 net/core/net_namespace.c:177
 setup_net+0x4fe/0x860 net/core/net_namespace.c:394
 copy_net_ns+0x2b4/0x6b0 net/core/net_namespace.c:500
 create_new_namespaces+0x3ea/0xad0 kernel/nsproxy.c:110
 unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:228
 ksys_unshare+0x45d/0xa40 kernel/fork.c:3334
 __do_sys_unshare kernel/fork.c:3405 [inline]
 __se_sys_unshare kernel/fork.c:3403 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3403
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2b8d28c269
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b8d247238 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f2b8d316308 RCX: 00007f2b8d28c269
RDX: 00007f2b8d2688f6 RSI: 0000000000000000 RDI: 0000000040000080
RBP: 00007f2b8d316300 R08: 00007ffcb7f51477 R09: 00007f2b8d2476c0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b8d31630c
R13: 0000000000000000 R14: 00007ffcb7f51390 R15: 00007ffcb7f51478
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 0 PID: 6357 at net/ipv6/ip6mr.c:419 ip6mr_free_table+0xbd/0x120 net/ipv6/ip6mr.c:419
Modules linked in:
CPU: 0 UID: 0 PID: 6357 Comm: syz-executor286 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:ip6mr_free_table+0xbd/0x120 net/ipv6/ip6mr.c:419
Code: 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 58 49 83 bc 24 c0 0e 00 00 00 74 09 e8 34 3f bb f7 90 <0f> 0b 90 e8 2b 3f bb f7 48 8d 7b 38 e8 02 17 a8 f7 48 89 df be 0f
RSP: 0018:ffffc9000461fbd8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff88802d3c8000 RCX: ffffffff89de0114
RDX: ffff88802eec3c00 RSI: ffffffff89de014c RDI: ffff88807bbce980
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffff88807bbcdac0
R13: ffff88802d3c8000 R14: ffff88802d3c8008 R15: dead000000000100
FS:  00007f2b8d2476c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000563e73d490e8 CR3: 0000000029b22000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ip6mr_rules_exit+0x176/0x2d0 net/ipv6/ip6mr.c:283
 ip6mr_net_exit_batch+0x53/0xa0 net/ipv6/ip6mr.c:1388
 ops_exit_list+0x128/0x180 net/core/net_namespace.c:177
 setup_net+0x4fe/0x860 net/core/net_namespace.c:394
 copy_net_ns+0x2b4/0x6b0 net/core/net_namespace.c:500
 create_new_namespaces+0x3ea/0xad0 kernel/nsproxy.c:110
 unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:228
 ksys_unshare+0x45d/0xa40 kernel/fork.c:3334
 __do_sys_unshare kernel/fork.c:3405 [inline]
 __se_sys_unshare kernel/fork.c:3403 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3403
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2b8d28c269
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b8d247238 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f2b8d316308 RCX: 00007f2b8d28c269
RDX: 00007f2b8d2688f6 RSI: 0000000000000000 RDI: 0000000040000080
RBP: 00007f2b8d316300 R08: 00007ffcb7f51477 R09: 00007f2b8d2476c0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b8d31630c
R13: 0000000000000000 R14: 00007ffcb7f51390 R15: 00007ffcb7f51478
 </TASK>