Extracting prog: 10m2.641807134s
Minimizing prog: 44m19.250802438s
Simplifying prog options: 15m7.996107445s
Extracting C: 5m30.644656747s
Simplifying C: 0s


extracting reproducer from 25 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-bpf$auto-mmap$auto-openat$auto_proc_sys_file_operations_proc_sysctl-sendfile$auto-capget$auto-mmap$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r1, r1, 0x0, 0x7fffe000)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0xff, 0x3, 0x18, r0, 0x80000000008080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe) (fail_nth: 6)

program did not crash
single: failed to extract reproducer
bisect: bisecting 25 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 9, 6, 5, 30, 6, 6, 30, 6, 23, 30, 30, 26, 16, 30, 30, 11, 23, 2, 24, 14, 30, 30, 25, 10]
detailed listing:
executing program 3:
r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x840, 0x0)
pread64$auto(r0, 0x0, 0x100000001, 0xf4240)
r1 = socket(0x2, 0x1, 0x106)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0)
write$auto(r2, 0x0, 0xb)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyp4\x00', 0x80, 0x0)
r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000c00), r1)
lstat$auto(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x2, 0x0, 0xa775889, 0x9, <r5=>0xee01, 0xee01, 0x0, 0x7, 0x7, 0x7, 0xf0eb, 0x5, 0x7, 0x7, 0x8000000000000001})
r6 = waitid$auto(0x1, 0xffffffffffffffff, &(0x7f0000000e00)={@siginfo_0_0={0x3, 0x7, 0x0, @_rt={0x0, r5, @sival_ptr=&(0x7f0000003800)="5b17e4d888ce8d648986938c4b45e723c54a93f197ab3f4385735a41beb3962a1f2a07ab2e904b6896b32c7cf8c8e2817e9e09e5c6fec91d29ed0b2b4c9bc1227d4c0dbc56ba74bb5d01f32761caf4aff07f0e17aecbe7e38e5691c4250fdfc5e669c794e5925e04e060730289c8b6da8a389fd9dff42681e1aced6717b151b6c1c16a8075dd8dbedd98912f225f5917841eb325a1d495858dd5fded21787f8084120d0f76722d0f46d31f387be026a38346e1b0c20683ff3fcb6bb99cbe8926b63c100d1192e6bf5573bba2bd00607dbd"}}}, 0xa, &(0x7f0000000e80)={{0x80, 0xd}, {0x7fffffffffffffff, 0x97c5}, 0x8, 0x1, 0x1400000000000000, 0x9, 0x2a, 0x8, 0x0, 0x80, 0x4e, 0x8, 0x1, 0x2, 0x9, 0x6})
r7 = setfsuid$auto(0xffffffffffffffff)
r8 = geteuid()
shmctl$auto(0x6285, 0xa4, &(0x7f0000001000)={{0x9, <r9=>0xffffffffffffffff, 0xee01, 0xf7a, 0x2, 0x4, 0x7}, 0x40, 0x2, 0x2, 0x7ff, @inferred, @inferred=0xffffffffffffffff, 0xec5b, 0x0, &(0x7f0000000f40)="20f46fdc479751e8dbaac206b681a2b3e8d2fbdc1e8d74f4fc1f583b9d9f07f361e6", &(0x7f0000000f80)="785f21602c99efee3aa772bb501bf89f85f105073fc5657db4ed3c08aabf98dc1947f3b6eb38016aa915482731554fa29b51a3ecaf6d499021599661d05dd276c48a0c30106ae709b28a69b01e728d9b7c"})
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000003780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003740)={&(0x7f0000001080)=ANY=[@ANYBLOB="94260000", @ANYRES16=r4, @ANYBLOB="000425bd7000fedbdf2501000000bc0001800800df007f0000013800b98004006b801400c600fc0000000000000000000000000000001900a8002f70726f632f73656c662f6d6f756e74696e666f0000000054005f00c6902810454fd01fcb2e920f113553fa9fb97ade5c9f6f7c42a3f89e0af4ae8fb6f6e62673bc198749f231ca71dc46de21a1a9896b50bdc9d9761415100deabddf3d97fa7f67bef482a2ec9a3bc14ef408002e00", @ANYRES32=r5, @ANYBLOB="effa4b00", @ANYRES32=r6, @ANYBLOB="0c0017800800ac00", @ANYRES32=r7, @ANYBLOB="08000f00", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="9fabb24a05560f5f0289413b22faf5cde8fb2e6c04b9afe0228e66fd62046b16c4b4d2bf8cc607f156965e1c32768e403ccc7ce7e66e47cff5ab7d2995d2601380afcd60478fd739c8f35cc2af180468c0731f780a90310099860800e600", @ANYRES32=0x0, @ANYBLOB="00ca00018085466c4a871d07c8f213b367843263612f3b43235eb237d8178fc5fae4445df21339133fc650e1923c73b838f697d53f32237a6931ef207229d211f0a83e924b765b350eafb81d54378b9a23cbcfb685a4d602b012807149b9c3138620bad151e08b68066f5fa27c96f746f059aab81aa7001b1a24f71521641dcd806b685ae8302f9d04f4398366c354bdebe48bbf266d1c9c6357eb28379134981c79d7f4708bca9b8e816781281000b8a3482970ec26b48e6953a6da636ec713b541c3870f359ef88ab248000094230180f4000f8079106216eeefc03a32f70c67218b97dac166839d4765bf10607a0faec77a8530841c5abad58ff1ea0dd8190b5e83a6802bdf69dde48bbb40824c3e3280248f4791bc1a4ca534ef7c65dc0b68c1c6856e5d18fc3aabab5f65538e60af7e2f121fff423067abb2509ea8d80035b4b801bc39aad49addd262065e3548cf67310fc56e53d0c49b12e7999aeefb0343f218d54502fa35a6142aad9977dc50e21a21a8331799fad92ca6953935740f17444f51be0424c0e25291ac618f51fe308d2872a16bc6793cff845fac5e22a4a21d50a5eb7e71a0c73870d18ad2be527ab95331965990cadf67474350348453f460d7eb74a682c33a745b8016e4efd4833cea0352cce79124a0dfaafeba8f24c3ad1c44fe1f3dbb3848891b8164c2bc95efa10114a032efe00c11cce69bf539ef1a469c96e340a336353ed412e6bdf75c51c353d38b362eca67c85285a2c740897b93350c29455939cd17d9cbed2ed03875443cdd60feda33dc1d28f7a78413fc718ef74450a10c1428db6831a96c27b61e20233fad8e7c3c11c17ae5764aa1b732f3d7560bf74d25d41ad3b713730027008d55d2599fcaedd92dfda60fc62855e639ea553ffafd966f373e879f5b19aca535bcf3b5ee3b8f9148f2842836ae0e342514660a69ff04915b988a505cf2d82db11c36ea28dc4aea759882ee446b4ea94a0a813c089bd63c2e9b93a4d61fc72eaddfe6da39acc067c8aa29bfe983f40027413c8511b589ead84abab00b4491647b60dd1912ed3a54c15934b3ec2f546309ee30deceaccc81392ee87ec123fa4cca982c264b69a5937c82501e2842feb32957786a546f3e2052c05b59aeb38c54b16d7fda044c3eda0d89fa57a3597cc3dfcdd2007fe15128ba1772ac82e85c89d5049aaadb64c2f9ccaebd3651c2773364ee5c67e354bbe803b5e69a9f41142cb6c40b99a9457cf8d499d79ea074d29bcf32988b7d9b4fe8c65d0a9e3aa68feace9874429944e5d5a4e814d744816209bf002aa4308b1f1631b152273de9ab0c6434aba6854623c83843bb48d2c56901c2d723171b2ebb23b87b66ed9a5b40402c5bb98ebf47f434271df8bcd65287450025fc674c09d51e0c289799dcadcd0d60c80875f5e23f5ca82bc474043cdaebf546404560563e6fd9144d948bd7feaa33cf2fdb52742e8fbcad8a6894a612cecf06832f78185037b81d62fb1ce2d22376d774bd6973acfa599a4a76da137649e9a10f81efa57f2dba199bc63e3e4eb5b3fa146f976322f55eef5547bf68a554e526c7ed7e669af0c334760fbbf489b7bcdf8192730d9a1421d0cdc0668d6fe5642c0947760943562cb1b7ff9647f9e59740c08fd0cd3c5bfdef3972d0e412b6a1edb8988146d26212b5aa8ebdbbcc04c0f2f302fa3b836c3c05cc25df50a3356b517e8bcfefba0d21a7d0101b2c6434ee9b0420bd2bf4e4799eb55043da563ed79c93f7155fa20ee1cd53b4af8b41c3d5926defec753f842d404dabffe617cc12f223a100463e3235d6dde0aaee65b735dfbbd8c74e9aaabd825f5716c7e0998170fdcb6ff74a4e57ea5b694f6fdfbf8e37cf2d593801d42c34a96adcabd2fa64b35c8572f35e8544134b56bb6c78f1a9c6bb216e2af94186efcd87f693a157a4e3d8e21b64e55b23476d176ab9b470ec124c135723fa177314529f52baa7b30f354ad601b12dedd57c2a7b74f2e12152e4070d94b4e450df27085a58120ad9b36a41407121f6f773709bbb5b2d6ee7bb3c9894fc44409e10cfebfc5034ee30f21d59d757b624862223a06c67f47c5af976eb28d04be88fa6f8457085edc73466872781bc0d14bb42833df0f6d2c424d64cde2c3bfb3547f7f5a59736129400c300369e7b0b8b71367f688a95abf37b01bd98a9e7230e7676f01eb0a514ef278e58f6d70683725225246ff9b357080df53afebd13642c726c4fa731bbd7b5e0e48b9e1b372f570efdc3ce8618aab932c26c295168b25006b108874f9395576d38e90b1b77ac99d256d384585ff43dd527d4bf2a574af4a109adaf02bd7c8784776f42c52ba85bb335d50f6f8225dd1e8a83f2b449aeab87881ff3058fea3bcbc36265f7b214e19f6a7aee4799a7c8bed3c8d9d8a4941654e6c9b75a240181540e822a16fb973503d387dfa7f0daecab1074afcce4f1ca4657efe307f9d7d9e18702be613213a115405ef8dbb77fd35f742716f74ff86812aa7bf60ed4098966128ee460730e5d47fca1846252021655f3b70231d9fe78c87702a547db39e05fcd80486799a230301e46013adc0948dec39278b402fb67ebf1db74b3d30995dfa98832141db6720d3fbf0457bdfd9a8a72527a8a9077b3844e4a6fce6d2f77cb24e60d2998a6e585dd8ee8323df84d8c4df3c2d36911565755b52b9b203f8ebf45259f2f22a1994b8c6517ff719d3b16bb469d9bfe2d7d87e8df3fec1a541f41d1e70965a7a833ef9ad375ae7107dce5927e83d321ac55688e3802e4da3aff6ca1acabf53c89f03a9c53e02214d8716e665a96813af6aea81826263261988dfbe05a4ab07d12de9fc3816b57f9dbf92bc58e1052161664813c49b851eec25986c9b568881945efdb824637513c43f144a2aa23e0a5b3ad6e17e89ed596403308724c8e59e7fe859beb186e0d3b5794d9d5b8a819b38231d72864b78627a43eaf65ea1435c117b6a96f2fcb6b85982e6b2c88b56e0f52fd6903e5573a6952fd5d8aa9f0f5961ce9e904b7d4057960ab7889bd90f54da61d5b75fb3e8d462d1fdbe544cbc956dc647c7bc5afdff2284d83fa44e2b2934e14069b3397d3d6277d20a15962d4ca553b7a4ab6655796d387e1aefb397118f7aee4f722220844c87514ce9e99fb80bb7fab3c129061d91810264161d6023f302af9e74c569d9f9b5de8dda920c22995a9e37d2795a8573eb7187fd30e945f299966bfb686fb4235a6bc8e2b85c266f8b5cffc2a9051f9b6802c4ea28e0c1c309ad6a43aa05b53bd97ffc7ccc11e78dab780f5f68f8faf83eb437c2118734bb244dc8bce1f67e414391bdb941ada2d55977135213f6f06fa03b2d77ce2632e2a296025663da0750efe41fa10e9287c6d99fa0b8747a93d7fa8f0158cdacaf40fe460ebaafeaf3e59bf79f8d22529977dd63ba277361a978f0be26e5ef8cec4bdc85658f07883e88808f70c2c58ff69055c53c69f8a55d071b1ef731be4f34c7dda8ac4ba84d2870d9fabc8bc24d118fe7d8b73e0555f009155c2089171030dd713d46167aeb0a167d7564be090f9a4d97cb65fff4bc83bdbb2182f7a441eefa71c91c2bd14b0fc768088ff8938b63c931934393465f8021e1a383b11fea76fbc604307ff0f6a8cf82322d8fa97ca960c6a362a855db534c52cfe5a5d4dfb142682d0a61c29f1283d7ecc9dc6d296852952075ef6261943de40fea9ebe630f092d6d3baed732e315f81cc684004fba81e06aca65cb779e36652a1ec1df18edc29dbb0e2a95ddeea70881a3da3e6c2c879abd0785ab73907d3329531a0ebd8abc855ff9f59fe5dbed53f71cd8293bae57b673785235cfe1c17f4347fc19a6751666e5f391dd9f4a7cdcf3b9964117b0f3567de4199bffe333386296958b17178355af387b16e9c8c206d3b07d35ac8e072548f991046a0d9eeebd19a2e932348b8e017eaf6d222efb8fc5371914f0f742b2167482815aa8383582e8439fa51aeea7810565b3ca9c17833e9d6d50d7f62ee689c569860e9829c1f6484affcd7fbc00552828022fc5091ae09a87a1f7790bd0a00f73cc48130df55fe9fac5b31c01e9011bde5f1684ee99ace292fae4d29a561d3fe4b3f6de5b28cd06ff64d202b42f4abe747b80b377b66196dad3b696994aad1a772390c61d6b3053c561631750d56369e98c29c4d40ee0e294c7b192d423a8a21dfc90458c28817eeafe5c1e50fdb8c9dc3c4d10d1b58ee4469e916d5eb607ae780c716744fbee4c8742f058af49553883f48fe57f3ac7ffb8e8249ef4f71fc6abdcc062c9803db9900a11e86a8c8ac7f12942f29e1e5f7fdf22efc29a40ca6b6744ba293a0a86f6e56849b8d4eb6e521cdfb9cb8232f21eba80a124f2c76ebf1acbb3d3a163b3b7a48d91a5775c3c904044902515af26a4514a9a1b077776551ce485ed803a9dd84ec990f1fad4fcdbd0becc1f8b1685587d86397c4d953ca4522ddf4876922d6df28d61e0a89e969d20db5cb6509d565ca06c1e32c96791e3045fcecd0647ac077bba85090ec6451edd1646149e0a251cc0eed9c5bc714b42dc5b1057a8d3f98f9107c6bab0416f578950efb63da8ff157f2aa8edfebbb82e8553ca73860bc440c36f8c640b19b4323445fb286fc6afc88af36f87e35c40ead407950d18988de20e7672e12444e1056681b8bdc6b09d05d2dbb8799ede04dd0dc10b0461d1665b8985a7f63980445c49068f37063dc41d480d194d0f42cf87ee1cb2fcf3f4d997a9d1a8248a91ffe9d5f48485ea752420fd510b98dab045dda4ba522f13d2b8d99d938f159918f615b23f03716d4561b6ed3fb0d3b401497f6d2b6704551e0ec8f822912823ceaa92682cc9f6cbb53f8aceda8390c72263f0233f73868846e5915c7debda332e9fb9f53414d7e7e6d223b9733390d9bec5b8db25294409fdf42fd273fadbaecd8d29a1e2d00ee155b68c7a85ea6110cd71440b802f3adefabfee8a513d6d1d497a3caa06174239e7a29f1489f615aeb8243b55c51c1883a02a6529ee0ab05d46c63a76fdcc690bf98b22a9b0094704ccf70f01f6c744e6482f78043eea09675797e1094ad1ecb9e0c5bcfa2af2f6bc312ecc68ba7dd432e47a4b503855c896647b538c7df22227cbe4928fce609d2b9a689bc6a6574e06183eb42b1f496625558846f6e7ace04d734297fc7d66196663745d5a7c683d8be44c572f36e895bf1263664f16f6f947572cb959995793ef827db55e1bf07b6a7f6ce418508ffaed03c2b444b3548925befb36ebe688f351b973bc9e7b11a50285bf10fd4a652e65d69aa677a734a45a8f5671a61be04870db61ef57813b56911eb3b919ec66930fa76aa22f58367fc83557505aa88406d4af2c7e8c78d31d89e5ff1e59a98304dbe3c70141abe9ba12b8bceb43f3b3c731989992858745654cf5891c3a706ab9987414705fe1ad04fdd56daea2ad2ce8c52f862d44d3ce67e87e31891c768f0e007063531253d2ed9ad2bcf54ecfb03924e75f5f5b117b1acab5ade308f2af84e21cafcf1d8f541dfea32e118fd388e8442a22860801fc1eb1a3cedc1d94739f99babfcd53e9b36e6b400184543883f7d88eaa5182f213faee10eec68af1cde225df6c53a9e291eaf08e906a3513f95abb32d1776ea6e2785bde8898da7b0c220c47cf35fb91fc7eea744cac50be2e193fbf45f7d1deab89b259584e94373404071b7dca0c1178070bd0a972939d7d3dc573a78dd192eecec6bdd6a3de3672c725646921b2a140caf46c09a8818d3a6cb3a19ca2266aeff3b816d89f6f4edf6284bec23b85658636bb0381f3a224d17b8709b82ff08f2c8c0fadb3e80fd01a3a223f6c30335c25f84f8b1d5613128c2db634abc9283e7c668dc537d6e359801d8feb11c64d178a870445e847931249b451d91ba1b5e4c44a662e2b225079dcf03fec1b3bc0e9eea5ff8750b907109b2fc0c8871877c1bde652e59b51ccaa011a5c53e226df75243bb6d2a36e84fb9ee97c9e7b22fa0120a7f32f42cb797e8a1ea03379d86f1b872febae7685063094628570a519b253df886326cb6be34943ed3b9325951ec8d7e2d0ef12a1e7fbcb239684c0dbe60c8cd27678b4b1d313986a419827fc41362c047dc1e4c28a6739d470a910f7acc4465340b38d06f2f6bba0334e4814495b1f4a731e887eab4f87404de6ae19bcb0cc27557eccabe018c7d122f1bbe77836fef4b1570e1e9083e6eed95ebde8a91669bfee3e9966ffa61768017d35fd6511e89f1f3aa08bdaa710b1b6198da74d928cd78c9d6222b80ddbd22866597b9362f9c21fc3dccdcf7d52a21fc609500f8f41c71431107d2f861eab90341ba97c5aaf58b90feada218ce325f1bbb33d485a9feee154c5bc61347081062c5d98a25e2f2f4b1130c29ef256ce48d2b981da5b2a48d3ba7a942989d03e2d454df90365b24ac874bb1fa467312c6be5f4a89722b3c603cfa5ada3b5ddf10302e87ace87e78d6116d2f9d5cc6e439d130f969323ae77d3065acf3d8689361c3fef0c99994320c78d6fddb5211feb6f893619f2e4e4d1a3db6d1ca5ef539e5bcbb0ba3b34c7c807fef150495d468d44ca8f8d7a5705c5a297faec45135b0c4342707099f9d16e1bf7e72af43a12cb09ae2f6c68550590a5e7da1fcaaa09a5707855031cd3d947db1e910457998962ebe08659fabfeef97fd3bbdcade9b784e17bf64cac257791423187238fbbb3c4e04c0d43d7e8c13d1df0d6de23a19a631113720054c2d1a434d9ac58ceaae8d26a11de137d7698855d6633914c7bf296ba540e7a6bb90129c034638990f6a46db5cab14c153053d677c9a5719d804e0cc42dbb5e7a98a73e3a9942af5a8f7e25d28bef2feaaca3d25c785fdb1e8716eb7ea21a538a26598b60ffd1f91eb6b15991607911b6593108b8004009780112fa232c9796b6b8174e40cca0d463e1c788157cb6c0b3966b7397975a85437ee7dbb5644a1d44d04d122198feea11afea560941c268b777af88bf2e66856f51ea479c1e8211c3d90b2eb697ba711d1f7aac5497c80e90f9b4a0507de25c6084c890d39f64af5315d555dfeb9876c99713c54226397265b077d067ce8ca1754453408c9ecacf904002c8039d61867748a8592a34030e9f1e026cb3a41df9bd80255ad0a19317c36049d5124dda107a1a05151b3df7f4acdb7349338b451ebdaa4fcf5e639f6f19c3a576ed06d820ab0e6afbed76715edf2e23e13098b5d9dc632734a0edb4eac0101653f4ba6cf712c3ea2b02a29daa58257a21733da577a690db855654210ae67215fd0ba7561eae45785523b68690c22554ab250359f4621e4e89e256980bdcb4f41b9470d3b6980114af8176b40b218b49df4f6bb55dac4943541c4b1c74b2f046034cc8bd468ba1131db7e803de639cbf76d415426596bf57384b5a376fcb911bd344000e992483f14db7168cb0dc621d73618291c76b512dc841de475b7ee9d3c8d1a1d7937c19758cc2ab43fde00d68f1df1d88216560b88c1506e1ecb623ff8e53004033714ed256e204215ecb884085e26615c2e1a73805fbe951999f1fec96cb33d017f051df296bb7324a57ec2dc74500845ec9206bd13f7eb2ed4175d877efab047edb06235ba8228279846106cab1ba851e4327f44e017a6c432bf5a5c83e476b60d6112982b390fd63aa31018422ee23454e88e21c37703ed67be0bc7b86a3b56447ec34981543566a04eb6bb57525d15cd84e68a798d49dbd197d09defd944e802561fa09d161538d87ad1362aae38f756dc9e1dfce8c4be595fbb23c3da4d8e8c11a46fe82c0ada6479756801d6144eee646a59a4ca1383c9b326b6f35da3a0966e4004c2ec73da945b675f24af365b0aeaad01d4733c853688c6200c9ddbe81d615b1366e617776b546f79ef2f2636618d71ecdef68cdc86290da66bf54cbd64ab21ef682ad6ea5fcdf9c8b518ad6b1b26e836615c01ddcd76924e154a686fba771898605328d520b53d29c1bfda4c1fef06103fd4b3a55d9ce4629189bdb0f38484d1f7bf97f191eaf4ee9438366290b25e087e6430007375fa7ee9afb1ece53a984df82b8df1e049fc1ed144c7d91d77f20d575ca2e268a1b3f506fd22cf420b2796b5a368ef5d283ae8d1ca31bf510f0e7506e026c3a0f9d9a2f1a01023dbad62f1596452d1e1afa96d73f87993af71fa439451adc7a6b4bb2eaf0f117dce00ae63710f0bc59b7e501bacafb27e652ba482c873b3bf0998bc9c2bb0839e151b1c897f54b123bf027f336260c4345313d4e0c9095d13307c11a4baef19b87ea1a24d5d47c19aa2a80144be9411c2737688a60d4d9f8dd8fd0a87e2d392e52db27eb560169cdfdea306af40eecd7ec6c5ffd9e9ce72f4375fae235ac6c311600d14743082e9a05de1a54289f3e6ebcb6605e3908dd930e290b360a1d239b567ada4f4c3f189d57e35516fcef1f59d7febf7ab45e45961083ed07b19828cb4897facac8f80833b29790e5e11af4f0602c24f07ae5c679aafb884bdcc47803e2064a739af15b66167b0121bd0d3d4640c6acf25685c52ba90ec7662d8af4fbe1273ba7b98cab84d155c6f12810c24df02b48a28f0baeadc5d6c1c40f5f198b4d485cc4198ddac8b3adbcfe64a64a7da7bb438187244130a827a25420eb0ee5146f882bd0cd3e4c18da5e4127acf3e071de9fa461870ca8b4dc95ef5a16235a831b47b4b92812833e9405c2e36182e9ccfdbb352289d9cd367a4c4124d1bd6ebdf21d865c00045dd48a6d99d5380fc259fd2f9f36abd5e70c96b881037d5b14a97ec566e0d667738fedc5968784f3e54dc50e40651c5cf564b118467b93660af14978458ff6db97a164568923af3ceaca48f90ec814325e1d80edba0e7ce5f428b869347c7454df985a4a719f502a911f07e6c269edf1529d6612efbcb82c0b99fa4b8c851f54d33038c0b47a79f886c35058012d83bad20efc852760fa3dc67ea2a4b40cb59aa48059754ed0a26b0e9c4e2fbd221bea14c85147ec0865b878388dda5927dc416f4b92ce8993a87449dc2403c170fba9b8a7648d494228c4d0c07cb4c6b55233666099ee40ba453e09bd4d53643bf454131cca5dc87dfbab744b8eb6533a7dac05bd5e7d72672125029ffb401a16f1d13765a5a4b938d6c387bc6411f563a2b580019cbaf47a5499824c11f9263bbadf4503508633b3c0a346b075b06451deea4adfa51c0c45587b5267514716d277261f0d9c469c258fe052eb9b803c06f6ae383c37d506493cdb92aa9906924d5a076308a380448eb2fb811be9573301727b4945f28d0fdecc11f3fa59750feacaa575671d40724c9335411ebe2b210925c76d699fe2763265faade293a32f99c33f45a01895520358b65d14e6c1caae7d82008fd97304f945bbf93ee58030eeecf7ea6e1308fc048894556107cbcd4e2c708b0e7e65b56a1466b4fc192f43d26400093d225dfd9fc3d08b420a017ce216cd07c0d9b8b27ec879432f9f103d778bae442d6fb2ae6d66063962282710e7553dfa01c3f6dc562cb745664c18837c705b6a6c978c051aadbf2cad83c6b25e5e3e0dd90923799546aa70347bbae2ee2b9c10c51be640edf2b7295484e7a316d6c4faa97b362bc425524a501b2ac6e7ecddbadef4b8e883a44185017fffe778b4cd9740ce3a07d9729849462a29bc5f6e77e00a6e38f8a344d7134d729ef506b66256e9bd967421897e0f8a07ccf3353b83d4fe4759e0f3285a13565bd82f93fea2c79fea8a24b22df9c554fba92bb89fd02f66a2b92fcd155145f38a72054043c028232ec773660d0f57b5b918e950f8fe8f779395d6bf97dad567a0dd3bf96d188052b2613e900ad26cc971c72398dc2b955908b5c1282730a1c109e83819c8eaf9e6fbe94646d1afe26d75f9981c910dd55e9f1d38f52afd87c21b02dde5bfd6bc045ae8364a48a77c69f0e7f2b6a2615ac826c1916530caf60eeacef5509a21597f429e5d6203055714a4af0e94f81e3aa05e246f0297ad0eae62008e699d6cef4789f9334d2d368d970aa63ba247f9c0f7d6f1fdc87cc958cef68e7b9b39a94785267a7e412e974e649489616c2cd56fe33059bbf411ec699b1a43d3e9d373c00cd35da31ddebb04ac6cfe15799b51bb6b102f08e7bdaf15bebc3ebaae33e92611f3a297ebef195baf689a5cdff5b9274573a10416ab5e1e15d0ea221f1866582f5a19d83caa45cd790ac066ff38a2b8a8f81464975657e7439b4c65a11adcab6edc1dbf06d4207f97413ad72501b3490cefe7fdceeb3710fa294337b49d1c1c43c444775d6beff9a0f16ed531e5c913de6248880a2ad3f9867b6dda0973ba323480e93069de83fa851f284670fede5eb921e0fbc3783c777f3bb59653c2e22ffe972a8a9bc9dd034ac6f58d0ec507d976c38f03d10c49d4116dccf499e055c2ca1b40974472fcfdc489d97ca7275a7e537b675870f847ebc34c37a04831278eeb295c1dd1565c3c74b5e12bb0c78e52b4c5bbe1576f63cc74ac5466ca4722a279a527f88b8ff6f54fe8789e191613f3845aec55dcc2f256ce3e5d9113324ca2e4ebe7c29d94aae825e2d41f6da2ed54af794b0cf086cd9c19413a5465a1f03293232cd692912bbce2fcb6f505814a434e27fbdac4682a140a09568b1af539d677c4635e0ade42fcda13129430b31c93afe99b041f284147aa7e2d68425a762bd63f90d882dc879d7b4daef6a62509133afa420167aa8054f47d47320f5be8b54aa26827dd635aa9fd78d3d22761a840cf1bd02fb59941af2e5d94db4cd5711c246f09d95c7878b3d5096073a70b4b2df99bbcb5d80f78fbe8937f3a06c870c9b0f1c8d96b764f6c80724acc98666bc7dd0f886ea58e550aae85445ac92da6d5dcadf9090e8dfd0ac71ae7f6beb4081a797b92e07544d8c5fbce6403d7c26d991a0ed93d74640166fb57afc9cde8a23fd33e97ebd48a0e45f279b6bde2d162fa280d2c58ebbb8b7a090756a3ffb75d6b52c23c048441a6ea6911b76528eeb75c36f0bfd7c9ddb3c97c94563670d41c8f5a28d879f958ec68ddb43531aca70b4bedb9c1c7ae54f5ba526ae51c90e5031f13eaa4383eeac3db28b7a3501172d077ef58a958d5881a17963f447c43b2a4e5a532903713148454d330b0986f437dec0503832d8b9582e2909d32d6c105f94f7e6ce713f42071ff3f32d369f7513d7faed2dc16845c0a0e1b00d9e038e52729eba1ed8c41a7fdcea84608ae8f8a866a6f079a14288291afc19412431fd0f72da96ba1ca0558620e68941f71d70486d225ba12d7637242ad4fd54b0b2b2240c10481574a25cc5fd4b32307f7fae5779d593f5c793230b6730be3956785713417cfe3ee73b84f7800165d6e20eb1259d7007acac7847b36e6c2e1bfc08b3cd24bb713468c9abc348207da256978bd77016b31fb661ea431124ba1c392d499fbbac538c6b25e6be10efb8ccf4ace9127a64230b136c96a97a6d7efacb8d15bb61e9fdb336db10f9c1420fcba6f618d992cba0880ab0556016e67e5c4e14b7bd71dd590179255ccdd2d60bdf575213731cf8f1f4569e08bbded3cde39799f00746869f0e433b104a10e7b6242d94c21aa71cc53d9baffac41eb478c18300027cb45763f274fbd6a21cffd667f5f2880ed1b8ca344fe427e0c3707c907b67d1222707dd26feae6dc7e2b30bf0f51d3abec01b2dd5ab2c07538e0470defa05e66bd54ace19e01f7973b6508503e6e953c5700b5b8eced01a54a4f2afe442cd4f33cd352936b401c6d3122b526e58792f8d5fc4a8040caf0ac232fd9a793e3521afd4a4ff32ddfe01cea338bf26fb674379423b7e181a27de9d5ea065220bf022bfc7a788e453578604500c88f54d5a798b7ed0f4fb2fd4b74c918a877232b438e0cf355828279f3f1bedf12ad27719856b7c4d79767b5e74b773f9845da866a345645aa23477454b466e6a4e02e5aec7f7863c11349b9bbcb2c473dcfde969bf1174fa46c8aecdf73f1151bf82477738e13c059095ca2d5305cc25d203d306511d06b8873b7492ec47d3b79db32ff17aa91d14349f8f446f0da893c1aaf48370ac5d7a390599c5abe43e1365fac6f2ae4d11c5c3705b6849936fd091aa34e4f8c69f07c6782f24563b3b2d33a702b215bd5628d757acec25f0a8108003210a9d3b9ea7da1ca76974070d642e1af9ed8d9a84689ac6c5000a69fe6172169e537a85f5417965549f1e5e9fc4774731bd16bf2fce54345c9b0bf5707e2785fe00279d46f0055dc5db97ff6c0e2dde09be8ba8f682540f8912e25040a70e63ffc1b84017cfdae59b621d84a72bc5790a91791daa8866b6a00deec5b3ed641990fa6a28e083ef4710ac957ef4d43e83f3014352dc15825078042d0d268fae0e96ff35a9be960609ba27fb26dbd7042a55e7796e15f7acdeda7d4eca1aa19b344d1ff9c130bc2277daa08f7ff55eb8ee3fb69e17c922b7d5b59489ca98b7d5e9fbc96e63a574b7376b320b65934537879cbdf2ca7e6a3c165d57051aabb8beaf0ed4d53dc4344fd5051ab308a4b30076215bc85d56cb7d8649afbd030c7e432820e05862e553817ae63e73c1b9846459fff118eb9151cf48366ff4c3504fa9b91480f0e3f559050835226f1e21c3ed7fff2d8e8762eef5120ccf9dcafd07886c142b6e604df6b4310d8ae18589ffcd0acb433afb7c96e8f40d7a007c250c4ed0692c5140c5326cba0e27123fd13ce3b1730985e9f9d57f1e1cc7f927097c4671372be11287343daaf0b8201aff506225271c6bb1f7380c82672ede6e206035ad90f82cdec9b82b242325c3bd3469a380e314177ffd41f1be13975353f2d25ba158ffc7121210ea65a2add39a1b57391c6133aaab69360a8265bf37d88a66490b8deedaf98306a5b0a8499e00887ef251f8d3df1a74285b9c655ef4f9910825d790d0174bf593fb167279091ace2e6927a8c3dde32fd2e3914b2e993df8b7b8f357c9ff6d8daa2ff184f6ab6c2a3d470bccb0b1f55b13172ea2c70e899c682c2e3c0a9d7b81d7ab2e2b218259a1c6f3c8e7bd7a3218f3e0e7fc156c5d45c82f3cf6fc3c942cd89f409d537f8e7fec800f1966c956191d82bdf8c1e1b29ba7ccd9ff3345f9b3c76536375b5030"], 0x2694}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c004)
r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
pselect6$auto(0xef5e, &(0x7f0000000240)={[0x2, 0x1, 0x3, 0x42, 0x1000, 0x9, 0x9, 0x3, 0x1, 0xfffffffffffffffa, 0x9, 0x9, 0xd8f, 0x3, 0xece, 0x3]}, &(0x7f0000000380)={[0x100, 0x9, 0x54, 0x9, 0x5, 0x10000, 0xb8cf300000000000, 0x4, 0x4, 0x0, 0x4, 0x401, 0x0, 0x8000000000000001, 0xfffffffffffffffa, 0x5]}, &(0x7f0000000400)={[0x2, 0x1, 0x400, 0x5, 0x0, 0x9, 0x9, 0x5, 0x8, 0x7, 0xfffffffffffffffa, 0x1, 0x7, 0x0, 0x1, 0x1]}, &(0x7f0000000300)={0x29df, 0xa}, &(0x7f0000000480)="9e15")
r11 = fcntl$getown(r3, 0x9)
mmap$auto(0x5, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x10000000008}, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9ae, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0)
r12 = geteuid()
sendmmsg$auto(r3, &(0x7f0000000640)={{&(0x7f00000004c0)="87b1f42bd00a42ca63e227dfc239353a6babbbf6", 0x1, &(0x7f0000000580)={&(0x7f0000000500)="880c340eaf47c28822b08e9437419759c1a05c8eaead05f93bbe2cde37dc04307f83b517a833254c74c8b9a27547dc1a312b7f106e790257bac99a5a37aa7e0491fa47e8f686c57192ac2c0eaf01a2d0", 0xa16}, 0x6, &(0x7f00000005c0)="0e32148e69968cdf9a16f4e09a7d758803938d1bc81a14e04b283b8f8224ed6241c99c0c782cdb82b9797449d491be8838157a213a750b23339dd84f66845d9c46e4869c297ca3f79a2b2e4c22a71516975be4e89c19ce03dd133b8a9e453f10982b1b4cd590e2548e331d655c8e50a75280d7710e8b", 0x3, 0x401}, 0x1000}, 0x3, 0x7)
r13 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r13, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x5, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7dffffffffffffffff005dfe27", @raw=0x5}, 0x0, @integer64=@value=[0x1000000, 0x1, 0x9, 0x8000, 0x5, 0x4, 0x2, 0x9, 0x8, 0x100000000, 0x5, 0xff, 0xe95, 0xb, 0xa, 0xfff, 0x0, 0x7, 0x2, 0x3c1, 0x4, 0xd8a, 0xffffffffffffffff, 0xa3, 0x6af, 0xb, 0x7fffffff, 0x7fffffffffffffff, 0x401, 0x6, 0x9, 0x8, 0x4, 0x9, 0xcf, 0x403, 0xec, 0x1, 0x9, 0x1, 0x4, 0x0, 0x5, 0x3, 0x8, 0x548, 0xc, 0xe4, 0x7, 0x4, 0x3, 0x0, 0xe0000000000000, 0x6, 0x0, 0x0, 0x6, 0x4000000000000003, 0xb, 0x5, 0x4436, 0x0, 0xc5, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"})
setreuid$auto(r12, 0x0)
setuid$auto(r12)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f00000037c0), 0x0, 0x0)
r14 = waitid$auto(0xfffffff9, 0xffffffffffffffff, &(0x7f0000000080)={@_si_pad}, 0x7f, &(0x7f0000000100)={{0x8, 0x3}, {0x26cd, 0x9}, 0x8, 0x8, 0x8000000000000001, 0xd, 0x5, 0x8000000000000000, 0xffffffff00000000, 0x9, 0x14d, 0x2, 0x1, 0x56, 0x0, 0x4000000000000000})
sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20030000", @ANYRES16=r10, @ANYBLOB="200026bd7000fedbdf25200000009b02038008002700", @ANYRES32=r11, @ANYBLOB="ee003280a42bdf051bffd0f4735d306b138e1dbf80a6b04d2a5044eb3bbd36b9f106552640a23641c6f229a2336632f3fe551aba83c8bcbb985ef201c6b45d2886352df263be7955d2e7c837db70cd6cf19b7be8223e1ee33d9cf0b2394dc01fa0fefe4cda219555b8ad7144de36697e1e46e48196d9afc155794c790ad66773d164d8c14003688a16a5516d6f0730bc0c4a3ad10f2e5d1fc3e4cc0db062827e2281e511e9d925cf3d5b3264e01e8e755cc5baefc050e337444a8a3b5024cab35e440b943b153ceb1f9e83ba9b78e226346462c8ef2d01d6eddccec7b57508004400f0f9c7eeeba6", @ANYRES32=r12, @ANYBLOB="08009700", @ANYRES32=r14, @ANYBLOB="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"], 0x320}, 0x1, 0x0, 0x0, 0x200000d0}, 0x44)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D1\x00', 0x141f41, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000240)={0x1, 0x0, 0x3, 0x6, 0xb04d, "68e6fe89d79059ae94debcc36b2972d2"})
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = socketpair$auto(0x39a, 0x2a3, 0x1ff, &(0x7f0000000000)=0x6)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
listmount$auto(&(0x7f0000000100)={0x18, @raw, 0x80000024, 0xfffffffffffffff7, 0x202}, 0x0, 0x4, 0x1)
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES64=r2, @ANYBLOB="013bbc40a8e71953412f"], 0x14}}, 0x810)
executing program 3:
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
lseek$auto(0x3, 0x2, 0x4)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
open(&(0x7f0000000800)='./file0\x00', 0x183242, 0x154)
fcntl$auto(0x3, 0x400, 0x2)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x1)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0xc0684608, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x1, 0x1, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000180), r0)
sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x21, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, ':]**\x00'}, @SMC_PNETID_ETHNAME={0x7, 0x2, 'P-\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x400c080)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x7)
ioctl$auto_SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x541, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, 0x0, 0x24000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4000008000)
socket(0x2, 0x2, 0x1)
prctl$auto(0x1000000003b, 0x1, 0x3, 0x3, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
unlink$auto(0x0)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCGNPMODE(r3, 0xc008744c, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
executing program 32:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
executing program 0:
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = socket(0xa, 0x801, 0x84) (async)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
prctl$auto(0x2, 0x20005, 0x0, 0x9, 0x8) (async)
symlinkat$auto(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
bind$auto(r0, &(0x7f0000000100), 0xe) (async)
socket(0x29, 0x5, 0x21) (async)
r1 = socketpair$auto(0x7, 0x7, 0x5, &(0x7f0000000040)=0x8) (async)
mmap$auto(0x80000001, 0x4, 0x100000000, 0x15, 0x5, 0x1)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) (async)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002740)='/sys/devices/pci0000:00/0000:00:03.0/broken_parity_status\x00', 0x20000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000002780)=""/173, 0xad) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async)
mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
fcntl$getown(0xffffffffffffffff, 0x9) (async)
ioctl$auto(r2, 0x5646, r2)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000080), 0xfffffed0)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (async)
capset$auto(0x0, 0x0)
r4 = gettid()
capget$auto(&(0x7f0000000000)={0x7, r4}, &(0x7f0000000040)={0x8, 0x3d, 0x3}) (async)
r5 = socket(0x200000000000011, 0x2, 0x0)
setsockopt$auto(r5, 0x107, 0x17, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x801, 0x84)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (fail_nth: 3)
executing program 0:
r0 = geteuid()
r1 = setfsuid$auto(r0)
setresuid$auto(r1, r0, 0xee00)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x1d, 0x2, 0x2)
connect$auto(0x3, 0x0, 0x55)
r4 = socket(0x10, 0x3, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x5c8)
close_range$auto(r4, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x5, 0x0)
socket(0x11, 0x80003, 0x300)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x5c8)
sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0xa01, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000)
mmap$auto(0x80000020, 0x2020009, 0x6, 0x1b, 0xfffffffffffffffa, 0x5)
r5 = prctl$auto(0x6, 0x3, 0x0, 0x6, 0x1)
mmap$auto_snd_pcm_f_ops_pcm1(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, r5, 0x1)
r6 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0)
ioctl$auto_BINDER_CTL_ADD(r6, 0xc1086201, 0x0)
executing program 2:
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a)
r0 = socket(0x0, 0x5, 0x8004)
sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0x7, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='N\x00\x00\x00', @ANYRES32, @ANYBLOB="00022dbd7000fedbdf25030000000500060005000000080002000100000005000500d700000005000600a5000000050006003800000014000100ff020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x930e92c5dfc4726d}, 0x40010)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES8=0x0, @ANYRES64=r2], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x8040)
bpf$auto(0x80000007, &(0x7f0000000480)=@prog_bind_map={r1, <r5=>r1, 0x2}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r6, 0xffffffffffffffff, 0x0, 0x9)
mmap$auto(0xfffffffffffffffd, 0x600004, 0x4000000000df, 0x40eb2, 0x402, 0x2ffffffffffe)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0xff, 0x3, 0x18, r3, 0x80000000008080)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x9, 0x42020006, 0x80000000004, 0xfffffffffffffff8, r3, 0x8000)
io_uring_setup$auto(0x2043ff, 0x0)
r7 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x282, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r7, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, 0x6)
poll$auto(&(0x7f0000000000)={<r8=>r7, 0x1ff, 0x9}, 0x4, 0x7)
execve$auto(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=&(0x7f0000000340)='SEG6\x00', &(0x7f0000000400)=&(0x7f0000000380)='+%\x10!*\x80')
ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, 0x0)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7fffffffffffffff, 0x4)
get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1)
ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
executing program 0:
mmap$auto(0x0, 0x202000c, 0x2c50, 0xeb1, 0xfffffffffffffffa, 0x8000000000000001)
capget$auto(0x0, 0xfffffffffffffffe)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)="311d4d", 0x3)
mmap$auto(0x0, 0x9, 0x401, 0xeb1, r0, 0x8000)
setuid$auto(0xe)
bpf$auto(0x5, &(0x7f0000003c80)=@bpf_attr_7={@map_id=0x8, 0x81, 0xf}, 0x5)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setitimer$auto(0x4, &(0x7f0000000000)={{0x1ff, 0x10001}, {0x200000000004, 0x6}}, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r2 = bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf)
sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="df6b9f0ec1eea3727b0a4e2e06a71b783af70e0dbf60595bb12df9d576f12b880c22d3f3edf3ae8ae33cb05d8c536d37d9e85975621fe56ed940af2862e6036fecc025a86eeaa128f992e50f2ee63e95b91f938f"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket(0x10, 0x2, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, <r4=>0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x9, 0x100, 0x7f, 0x101, 0x6, 0x4}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x100, 0x76c4, 0x8, 0x100000000}})
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/131, 0x83)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000033, 0x0)
fsopen$auto(0x0, 0x1)
sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fc827d250500000008000400efffffff0800040005000000080004f007000000080004000700000008000400070000000800040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x40)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
r6 = open(0x0, 0x4040, 0x75)
move_mount$auto(r2, &(0x7f0000000280)='./file0\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x10000)
socket(0xa, 0x2, 0x3a)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
executing program 1:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
setpriority$auto(0x1, 0x0, 0xe55c)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000300)={{@raw=0x4, 0x4, 0xf8, 0x5, "a401d243991a4de376cc2bd4dbe3e10d3cff152230323227f8d6c24be7ceeed84366bbadec1b7ea40209a468", @raw}, 0x1ea, 0x3, 0x1, @raw=0x8f10, @reserved="1f21b2aa03e626d5da400a9e13f017f54c625fbe785ff8a079f5f335840ca5ee5c72d7c5dd9684cc9ec3d4551843651db67be7a66dc7420e0baebb7eb8a880fe494bb541abf1fad77749d5d4e58490133df980172cacbfd9fe2e372ddc298dcd9e9b59e603a8f2cd3f3500e3850bf32ab968e7afd0388afaa3712b60835ab268", "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"})
pwrite64$auto(r0, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x6, 0x8)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
write$auto(0x3, 0x0, 0x7fffffff)
tkill$auto(0x0, 0x7)
syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0)
read$auto(r1, 0x0, 0x39b8)
executing program 0:
mount$auto(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0x2, 0x80002, 0x73)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x2a801, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x80002, 0x73)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/version\x00', 0x104000, 0x0)
futex_waitv$auto(&(0x7f00000000c0)={0x4, 0x8, 0x800}, 0x0, 0xfffffffa, &(0x7f0000000240)={0x7, 0xa60}, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/28, 0x1c)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
ioctl$auto(0x3, 0x5412, 0x38)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r1)
msgctl$auto(0x9, 0x9, &(0x7f0000000380)={{0xff, <r4=>0xee01, 0xee00, 0x0, 0x5, 0x6, 0x3ff}, &(0x7f0000000300)=0xc5, &(0x7f0000000340)=0x20, 0x8000000000000000, 0x4, 0x100000001, 0xa3ff, 0x0, 0x3aa4, 0xe674, 0x8, @raw=0x4800, @raw=0x7})
sendmsg$auto_NL80211_CMD_CONNECT(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)={0x123c, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_FLAGS={0x11be, 0x11, 0x0, 0x1, [@generic="1ee84d1118e2b05d116c47b5636342edf70ca2282a25c2dabdc0235263f3787c071f92d79deb122c466b4474967094880a5519bcc6c882b15540c920002c1955a39bf1075a776fe7e4583599110de4d6ec265d9b717331af2dfa637e5cbde2dd81f7cc50b11770b0a7312609ea88607c5d80878bde4e294c3849bcc4fbd27bee2c7f84831c5622246ae3ed14a6aa5c318e814384bbcffeda01afeef370292c153fa19c70565d17c5d2d3d1dab44015", @typed={0x8, 0x124, 0x0, 0x0, @fd=r0}, @nested={0x8, 0xbc, 0x0, 0x1, [@nested={0x4, 0x145}]}, @typed={0x8, 0x108, 0x0, 0x0, @uid=r4}, @generic="33a5b7e49db483e346771374df334308069337edad028fc0c263e0980cd4c42f00599da5e9f737533dd369e231ac1a068b95fc4d7063d80277461a4b54bebe4bbb3a3f3f7756697204dc8754b26da732eade28e23d1a4fe2f57f3d1dce3450cfea1d6c541235c691327f722f9021017469cfea82daf158caf3879f8a0a5bda6f14d43d4a722797ccb8786866e723bafe4489e17043a638c637b899fe111a811544ec9833f2b6861a48f9ead8fd96f3f44a75c7254eb5f02afccec4adc8cd50abce7beb6e7d427f07f032f6f86a5af7ffd0ebebe524553ca3c49fe89b48f075d8bed31c3f71dd559a982ab6cebe535e1ce242a4", @generic="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"]}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x8}, @NL80211_ATTR_MAC={0x4}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_PMKR0_NAME={0x48, 0x102, "557ad1bf9ec7108c688a388b996ee7418af8b2c59bba64e4bca96d0eb32ae61446728902b0b0e0f0d5636ac404bcc0d75c508be59eef097664cf360393e26d711b97dd4c"}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x123c}, 0x1, 0x0, 0x0, 0x4000010}, 0xa000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
executing program 2:
r0 = io_uring_setup$auto(0x6, 0x0)
r1 = fsmount$auto(r0, 0xffffffff, 0x1002ce9)
r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x9c, r2, 0x411, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x45, 0x2, '/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00'}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '(\x00'}, @CTRL_ATTR_FAMILY_NAME={0xb, 0x2, '+/]@{@\x00'}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '}\x00'}, @CTRL_ATTR_FAMILY_NAME={0x11, 0x2, '/dev/usbmon0\x00'}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '/@-\x00'}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x5044}, 0x4008004)
r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x8500, 0x0)
r4 = openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x841, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x1a1180, 0x80)
r5 = socketpair$auto(0xf, 0x7, 0x8, 0x0)
ioctl$auto(0xffffffffffffffff, 0x80044dff, 0x9)
r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101b01, 0x0)
pwritev$auto(r6, &(0x7f0000000140)={0x0, 0x9}, 0x6, 0x9, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
read$auto(r5, 0x0, 0x1)
write$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(r4, 0x0, 0x2b)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2000000000000021, 0x2, 0x10000000000002)
pipe2$auto(&(0x7f00000003c0)=r3, 0x80000009)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1d, &(0x7f00000003c0), 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2c, 0x1, 0x3)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
socket(0x2, 0x2, 0x88)
mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto(0x100000006, 0x88, 0x1, 0xfffffffffffffffe, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$auto_MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0, 0x2})
syslog$auto(0x2, &(0x7f0000001cc0)='nl80211\x00', 0x6)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r0, 0x40046207, 0x9)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52204b}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000)
r1 = waitid$auto(0x3, 0xffffffffffffffff, &(0x7f0000000180)={@siginfo_0_0={0x8, 0x9, 0x5, @_sigchld={<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0x19cdbc3b, 0x7, 0x7fffffffffffffff}}}, 0xc, &(0x7f0000000200)={{0x8, 0x3}, {0x400, 0x800}, 0xffffffffffffffff, 0x7, 0x3, 0x7, 0x1000, 0x0, 0x4, 0x8000000000000001, 0x10001, 0x1000, 0xd, 0x3ff, 0x0, 0xa25})
kcmp$auto(r2, r1, 0xc, 0x1d, r0)
select$auto(0x3, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x0, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000002, 0xd, 0x3, 0xfffffffffffffffe, 0x7, 0x1000000006]}, 0x0, 0x0)
syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf)
close_range$auto(0x2, 0x8, 0x0)
clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="17000000", @ANYBLOB="7600279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0)
socket(0x1d, 0x80000, 0x30)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket(0x2, 0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a)
sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x1000000004)
executing program 2:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x4601, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), 0xffffffffffffffff)
r2 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x1, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto_tracing_mark_fops_trace(r2, 0x0, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x32, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x8050100000000000, 0x0, 0x100100001, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x200000000004, 0x8, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x6, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r3, 0x5425, 0x5)
socket(0x2, 0x3, 0x1)
read$auto_snd_ctl_f_ops_control(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r5 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf000200000008000d00b7002000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000800}, 0x8000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001a40), r6)
sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r6, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002abd700700000000000000000800040080000000"], 0x1c}}, 0x90)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x7}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040041}, 0x20004000)
executing program 1:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto_def_blk_fops_fs(r0, 0x2285, &(0x7f0000000000))
executing program 1:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async)
clock_gettime$auto(0x1, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4bfb, 0x9)
r1 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim2/trap_flow_action_cookie\x00', 0x200082, 0x0)
pread64$auto(r1, &(0x7f0000000280)='$\x00', 0xfff, 0x3)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) (async, rerun: 32)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x8000) (async, rerun: 32)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) (async)
r2 = socket(0x2, 0x5, 0x0) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cec24\x00', 0x400, 0x0)
ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000002c40)=0x40) (async)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xffe0}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async)
futex$auto(&(0x7f0000000000), 0x7d6, 0x9, &(0x7f0000000080)={0x7, 0x10000}, &(0x7f0000000100)=0x4, 0x6) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r4)
r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
r7 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64)
ioctl$auto_VHOST_SET_OWNER(r7, 0xaf01, 0x5) (async)
ioctl$auto(r7, 0x4008af12, r6)
sendmsg$auto_OVS_DP_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r5, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x0)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram10/queue/physical_block_size\x00', 0x2040, 0x0)
msgget$auto(0x0, 0x5)
socket(0xa, 0x2, 0x3a)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/4105, 0x1009)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40)
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r1 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r1, 0x29, 0x32, 0x0, 0x10000110)
connect$auto(0x3, 0x0, 0x55)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_component_list_fops_(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7fffe000)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0xff, 0x3, 0x18, r0, 0x8000)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
madvise$auto(0x200000000101, 0x7fd, 0x200004)
r4 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, 0x0, 0x1fe, 0xe)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(r3, 0x0, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x1000000000011, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
setdomainname$auto(0x0, 0x551)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop7\x00', 0x101, 0x0)
r2 = socket(0x10, 0x2, 0x6)
r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r3, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400)
recvmmsg$auto(r2, 0x0, 0xc1c, 0x42, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = getpgid(0x0)
kcmp$auto(r5, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$auto(r2, 0x7a, 0x0, &(0x7f00000002c0)='\x00y\"\xda\xfa\xb3\x16\xef\xe0\xc7\xf2\xa26\xb50U)\xac\x9a\x7f\a\x01\x81\xf98\a\xa7(k\xda\xb6]\xf9IA\"\xcb\xc4\xdd\x89\x94\v\xb0\x1e\x13?\xcf\x95\xbe\xf0\x8d~\x87{oBI\xf0\x8c\xa7\'?\x83\x1f\x90\xc6?\a\xc0h\r\xf4\xe4\xc9K\x05\xd4E\x10;\xaf\x8b\xdf\x8e*\x01\x8d\xc2\xd69SM\xea\x1cL\xca\x82\x06F\'2\xd0\x99\x91M\xbc\x06c\xb86\x94R\x86\x93\xec\xc9^?5\xc5\xe7(O\xa7K\xde\x03p!\'8Uum\n\xe4\xe7F\x81\xae\xe4\xb8\xd5\xd9\xfe\xbcl\xd2zRP\xee5\xea\xda\xd6\x03\x9b\x05#\xd1\xefd', 0x1)
mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(r2, 0x0, 0xf1)
close_range$auto(r1, r3, 0xd591)
ioctl$auto(0xffffffffffffffff, 0x802c550a, 0x1)
mmap$auto(0xfffffffffffffff9, 0x8, 0x10000000400df, 0xeb2, r2, 0x4)
mmap$auto(0x20007, 0x5f8, 0x4000000000e4, 0x40eb1, r3, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x2)
r6 = socket(0x3, 0x5, 0x0)
setsockopt$auto(r6, 0x114, 0x1d, 0x0, 0x4)
r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0)
bpf$auto(0x0, 0x0, 0xa3)
ioctl$auto_PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000040)={0x7, 0x0})
ioctl$auto_PPPIOCSPASS(r7, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x3, 0xf1, 0xb0, @raw=0x7}})
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000100)="deeee9c4188feedaba9417e9feb729d0475bdf1b8d00bc25184e986e15fb1367163bfd5f8b1077c5a5974adbbb7b609cd63874c5ce2b82b8e209bb11bdc9ca5e59c758d43557c94a503af523", 0x8524}, 0x400)
sendmsg$auto_NL80211_CMD_VENDOR(r2, 0x0, 0x20040000)
keyctl$auto(0x1485, 0xfffffffffffffffd, 0x0, 0x0, 0xd6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001740), 0xffffffffffffffff)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00')
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0xfeffffff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0xff, 0x3, 0x18, r0, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x200000000101, 0x7fd, 0x200004)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x7, 0x1ff, 0x7, 0x8, 0x4909b6f8, 0x1ffdf, 0x9, 0x200003, 0x2, 0xa121, 0x3, 0x0, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x6, 0x2000, 0x0, 0x6, 0x70624ce7, 0x0, 0x94cf, 0xfffffffffffffffd, 0x0, 0x80000, 0x5, 0x7ff, 0xffffffffffffbfff, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xe)
sendmsg$auto_OVS_VPORT_CMD_DEL(r1, 0x0, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
setdomainname$auto(0x0, 0x551)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
executing program 2:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r1, r1, 0x0, 0x7fffe000)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0xff, 0x3, 0x18, r0, 0x80000000008080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe) (fail_nth: 6)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-bpf$auto-mmap$auto-openat$auto_proc_sys_file_operations_proc_sysctl-sendfile$auto-capget$auto-mmap$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r1, r1, 0x0, 0x7fffe000)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0xff, 0x3, 0x18, r0, 0x80000000008080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe) (fail_nth: 6)

program did not crash
single: failed to extract reproducer
bisect: bisecting 25 programs with base timeout 1m40s
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 9, 6, 5, 30, 6, 6, 30, 6, 23, 30, 30, 26, 16, 30, 30, 11, 23, 2, 24, 14, 30, 30, 25, 10]
detailed listing:
executing program 3:
r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x840, 0x0)
pread64$auto(r0, 0x0, 0x100000001, 0xf4240)
r1 = socket(0x2, 0x1, 0x106)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0)
write$auto(r2, 0x0, 0xb)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyp4\x00', 0x80, 0x0)
r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000c00), r1)
lstat$auto(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x2, 0x0, 0xa775889, 0x9, <r5=>0xee01, 0xee01, 0x0, 0x7, 0x7, 0x7, 0xf0eb, 0x5, 0x7, 0x7, 0x8000000000000001})
r6 = waitid$auto(0x1, 0xffffffffffffffff, &(0x7f0000000e00)={@siginfo_0_0={0x3, 0x7, 0x0, @_rt={0x0, r5, @sival_ptr=&(0x7f0000003800)="5b17e4d888ce8d648986938c4b45e723c54a93f197ab3f4385735a41beb3962a1f2a07ab2e904b6896b32c7cf8c8e2817e9e09e5c6fec91d29ed0b2b4c9bc1227d4c0dbc56ba74bb5d01f32761caf4aff07f0e17aecbe7e38e5691c4250fdfc5e669c794e5925e04e060730289c8b6da8a389fd9dff42681e1aced6717b151b6c1c16a8075dd8dbedd98912f225f5917841eb325a1d495858dd5fded21787f8084120d0f76722d0f46d31f387be026a38346e1b0c20683ff3fcb6bb99cbe8926b63c100d1192e6bf5573bba2bd00607dbd"}}}, 0xa, &(0x7f0000000e80)={{0x80, 0xd}, {0x7fffffffffffffff, 0x97c5}, 0x8, 0x1, 0x1400000000000000, 0x9, 0x2a, 0x8, 0x0, 0x80, 0x4e, 0x8, 0x1, 0x2, 0x9, 0x6})
r7 = setfsuid$auto(0xffffffffffffffff)
r8 = geteuid()
shmctl$auto(0x6285, 0xa4, &(0x7f0000001000)={{0x9, <r9=>0xffffffffffffffff, 0xee01, 0xf7a, 0x2, 0x4, 0x7}, 0x40, 0x2, 0x2, 0x7ff, @inferred, @inferred=0xffffffffffffffff, 0xec5b, 0x0, &(0x7f0000000f40)="20f46fdc479751e8dbaac206b681a2b3e8d2fbdc1e8d74f4fc1f583b9d9f07f361e6", &(0x7f0000000f80)="785f21602c99efee3aa772bb501bf89f85f105073fc5657db4ed3c08aabf98dc1947f3b6eb38016aa915482731554fa29b51a3ecaf6d499021599661d05dd276c48a0c30106ae709b28a69b01e728d9b7c"})
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000003780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003740)={&(0x7f0000001080)=ANY=[@ANYBLOB="94260000", @ANYRES16=r4, @ANYBLOB="000425bd7000fedbdf2501000000bc0001800800df007f0000013800b98004006b801400c600fc0000000000000000000000000000001900a8002f70726f632f73656c662f6d6f756e74696e666f0000000054005f00c6902810454fd01fcb2e920f113553fa9fb97ade5c9f6f7c42a3f89e0af4ae8fb6f6e62673bc198749f231ca71dc46de21a1a9896b50bdc9d9761415100deabddf3d97fa7f67bef482a2ec9a3bc14ef408002e00", @ANYRES32=r5, @ANYBLOB="effa4b00", @ANYRES32=r6, @ANYBLOB="0c0017800800ac00", @ANYRES32=r7, @ANYBLOB="08000f00", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="9fabb24a05560f5f0289413b22faf5cde8fb2e6c04b9afe0228e66fd62046b16c4b4d2bf8cc607f156965e1c32768e403ccc7ce7e66e47cff5ab7d2995d2601380afcd60478fd739c8f35cc2af180468c0731f780a90310099860800e600", @ANYRES32=0x0, @ANYBLOB="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"], 0x2694}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c004)
r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
pselect6$auto(0xef5e, &(0x7f0000000240)={[0x2, 0x1, 0x3, 0x42, 0x1000, 0x9, 0x9, 0x3, 0x1, 0xfffffffffffffffa, 0x9, 0x9, 0xd8f, 0x3, 0xece, 0x3]}, &(0x7f0000000380)={[0x100, 0x9, 0x54, 0x9, 0x5, 0x10000, 0xb8cf300000000000, 0x4, 0x4, 0x0, 0x4, 0x401, 0x0, 0x8000000000000001, 0xfffffffffffffffa, 0x5]}, &(0x7f0000000400)={[0x2, 0x1, 0x400, 0x5, 0x0, 0x9, 0x9, 0x5, 0x8, 0x7, 0xfffffffffffffffa, 0x1, 0x7, 0x0, 0x1, 0x1]}, &(0x7f0000000300)={0x29df, 0xa}, &(0x7f0000000480)="9e15")
r11 = fcntl$getown(r3, 0x9)
mmap$auto(0x5, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x10000000008}, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9ae, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0)
r12 = geteuid()
sendmmsg$auto(r3, &(0x7f0000000640)={{&(0x7f00000004c0)="87b1f42bd00a42ca63e227dfc239353a6babbbf6", 0x1, &(0x7f0000000580)={&(0x7f0000000500)="880c340eaf47c28822b08e9437419759c1a05c8eaead05f93bbe2cde37dc04307f83b517a833254c74c8b9a27547dc1a312b7f106e790257bac99a5a37aa7e0491fa47e8f686c57192ac2c0eaf01a2d0", 0xa16}, 0x6, &(0x7f00000005c0)="0e32148e69968cdf9a16f4e09a7d758803938d1bc81a14e04b283b8f8224ed6241c99c0c782cdb82b9797449d491be8838157a213a750b23339dd84f66845d9c46e4869c297ca3f79a2b2e4c22a71516975be4e89c19ce03dd133b8a9e453f10982b1b4cd590e2548e331d655c8e50a75280d7710e8b", 0x3, 0x401}, 0x1000}, 0x3, 0x7)
r13 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r13, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x5, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7dffffffffffffffff005dfe27", @raw=0x5}, 0x0, @integer64=@value=[0x1000000, 0x1, 0x9, 0x8000, 0x5, 0x4, 0x2, 0x9, 0x8, 0x100000000, 0x5, 0xff, 0xe95, 0xb, 0xa, 0xfff, 0x0, 0x7, 0x2, 0x3c1, 0x4, 0xd8a, 0xffffffffffffffff, 0xa3, 0x6af, 0xb, 0x7fffffff, 0x7fffffffffffffff, 0x401, 0x6, 0x9, 0x8, 0x4, 0x9, 0xcf, 0x403, 0xec, 0x1, 0x9, 0x1, 0x4, 0x0, 0x5, 0x3, 0x8, 0x548, 0xc, 0xe4, 0x7, 0x4, 0x3, 0x0, 0xe0000000000000, 0x6, 0x0, 0x0, 0x6, 0x4000000000000003, 0xb, 0x5, 0x4436, 0x0, 0xc5, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"})
setreuid$auto(r12, 0x0)
setuid$auto(r12)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f00000037c0), 0x0, 0x0)
r14 = waitid$auto(0xfffffff9, 0xffffffffffffffff, &(0x7f0000000080)={@_si_pad}, 0x7f, &(0x7f0000000100)={{0x8, 0x3}, {0x26cd, 0x9}, 0x8, 0x8, 0x8000000000000001, 0xd, 0x5, 0x8000000000000000, 0xffffffff00000000, 0x9, 0x14d, 0x2, 0x1, 0x56, 0x0, 0x4000000000000000})
sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20030000", @ANYRES16=r10, @ANYBLOB="200026bd7000fedbdf25200000009b02038008002700", @ANYRES32=r11, @ANYBLOB="ee003280a42bdf051bffd0f4735d306b138e1dbf80a6b04d2a5044eb3bbd36b9f106552640a23641c6f229a2336632f3fe551aba83c8bcbb985ef201c6b45d2886352df263be7955d2e7c837db70cd6cf19b7be8223e1ee33d9cf0b2394dc01fa0fefe4cda219555b8ad7144de36697e1e46e48196d9afc155794c790ad66773d164d8c14003688a16a5516d6f0730bc0c4a3ad10f2e5d1fc3e4cc0db062827e2281e511e9d925cf3d5b3264e01e8e755cc5baefc050e337444a8a3b5024cab35e440b943b153ceb1f9e83ba9b78e226346462c8ef2d01d6eddccec7b57508004400f0f9c7eeeba6", @ANYRES32=r12, @ANYBLOB="08009700", @ANYRES32=r14, @ANYBLOB="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"], 0x320}, 0x1, 0x0, 0x0, 0x200000d0}, 0x44)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D1\x00', 0x141f41, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000240)={0x1, 0x0, 0x3, 0x6, 0xb04d, "68e6fe89d79059ae94debcc36b2972d2"})
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = socketpair$auto(0x39a, 0x2a3, 0x1ff, &(0x7f0000000000)=0x6)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
listmount$auto(&(0x7f0000000100)={0x18, @raw, 0x80000024, 0xfffffffffffffff7, 0x202}, 0x0, 0x4, 0x1)
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES64=r2, @ANYBLOB="013bbc40a8e71953412f"], 0x14}}, 0x810)
executing program 3:
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
lseek$auto(0x3, 0x2, 0x4)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
open(&(0x7f0000000800)='./file0\x00', 0x183242, 0x154)
fcntl$auto(0x3, 0x400, 0x2)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x1)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0xc0684608, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x1, 0x1, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000180), r0)
sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x21, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, ':]**\x00'}, @SMC_PNETID_ETHNAME={0x7, 0x2, 'P-\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x400c080)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x7)
ioctl$auto_SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x541, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, 0x0, 0x24000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4000008000)
socket(0x2, 0x2, 0x1)
prctl$auto(0x1000000003b, 0x1, 0x3, 0x3, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
unlink$auto(0x0)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCGNPMODE(r3, 0xc008744c, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
executing program 32:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
executing program 0:
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = socket(0xa, 0x801, 0x84) (async)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
prctl$auto(0x2, 0x20005, 0x0, 0x9, 0x8) (async)
symlinkat$auto(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
bind$auto(r0, &(0x7f0000000100), 0xe) (async)
socket(0x29, 0x5, 0x21) (async)
r1 = socketpair$auto(0x7, 0x7, 0x5, &(0x7f0000000040)=0x8) (async)
mmap$auto(0x80000001, 0x4, 0x100000000, 0x15, 0x5, 0x1)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) (async)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002740)='/sys/devices/pci0000:00/0000:00:03.0/broken_parity_status\x00', 0x20000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000002780)=""/173, 0xad) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async)
mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
fcntl$getown(0xffffffffffffffff, 0x9) (async)
ioctl$auto(r2, 0x5646, r2)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000080), 0xfffffed0)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (async)
capset$auto(0x0, 0x0)
r4 = gettid()
capget$auto(&(0x7f0000000000)={0x7, r4}, &(0x7f0000000040)={0x8, 0x3d, 0x3}) (async)
r5 = socket(0x200000000000011, 0x2, 0x0)
setsockopt$auto(r5, 0x107, 0x17, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x801, 0x84)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (fail_nth: 3)
executing program 0:
r0 = geteuid()
r1 = setfsuid$auto(r0)
setresuid$auto(r1, r0, 0xee00)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x1d, 0x2, 0x2)
connect$auto(0x3, 0x0, 0x55)
r4 = socket(0x10, 0x3, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x5c8)
close_range$auto(r4, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x5, 0x0)
socket(0x11, 0x80003, 0x300)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x5c8)
sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0xa01, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000)
mmap$auto(0x80000020, 0x2020009, 0x6, 0x1b, 0xfffffffffffffffa, 0x5)
r5 = prctl$auto(0x6, 0x3, 0x0, 0x6, 0x1)
mmap$auto_snd_pcm_f_ops_pcm1(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, r5, 0x1)
r6 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0)
ioctl$auto_BINDER_CTL_ADD(r6, 0xc1086201, 0x0)
executing program 2:
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a)
r0 = socket(0x0, 0x5, 0x8004)
sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0x7, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='N\x00\x00\x00', @ANYRES32, @ANYBLOB="00022dbd7000fedbdf25030000000500060005000000080002000100000005000500d700000005000600a5000000050006003800000014000100ff020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x930e92c5dfc4726d}, 0x40010)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES8=0x0, @ANYRES64=r2], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x8040)
bpf$auto(0x80000007, &(0x7f0000000480)=@prog_bind_map={r1, <r5=>r1, 0x2}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r6, 0xffffffffffffffff, 0x0, 0x9)
mmap$auto(0xfffffffffffffffd, 0x600004, 0x4000000000df, 0x40eb2, 0x402, 0x2ffffffffffe)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0xff, 0x3, 0x18, r3, 0x80000000008080)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x9, 0x42020006, 0x80000000004, 0xfffffffffffffff8, r3, 0x8000)
io_uring_setup$auto(0x2043ff, 0x0)
r7 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x282, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r7, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, 0x6)
poll$auto(&(0x7f0000000000)={<r8=>r7, 0x1ff, 0x9}, 0x4, 0x7)
execve$auto(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=&(0x7f0000000340)='SEG6\x00', &(0x7f0000000400)=&(0x7f0000000380)='+%\x10!*\x80')
ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, 0x0)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7fffffffffffffff, 0x4)
get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1)
ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
executing program 0:
mmap$auto(0x0, 0x202000c, 0x2c50, 0xeb1, 0xfffffffffffffffa, 0x8000000000000001)
capget$auto(0x0, 0xfffffffffffffffe)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)="311d4d", 0x3)
mmap$auto(0x0, 0x9, 0x401, 0xeb1, r0, 0x8000)
setuid$auto(0xe)
bpf$auto(0x5, &(0x7f0000003c80)=@bpf_attr_7={@map_id=0x8, 0x81, 0xf}, 0x5)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setitimer$auto(0x4, &(0x7f0000000000)={{0x1ff, 0x10001}, {0x200000000004, 0x6}}, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r2 = bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf)
sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="df6b9f0ec1eea3727b0a4e2e06a71b783af70e0dbf60595bb12df9d576f12b880c22d3f3edf3ae8ae33cb05d8c536d37d9e85975621fe56ed940af2862e6036fecc025a86eeaa128f992e50f2ee63e95b91f938f"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket(0x10, 0x2, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, <r4=>0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x9, 0x100, 0x7f, 0x101, 0x6, 0x4}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x100, 0x76c4, 0x8, 0x100000000}})
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/131, 0x83)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000033, 0x0)
fsopen$auto(0x0, 0x1)
sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fc827d250500000008000400efffffff0800040005000000080004f007000000080004000700000008000400070000000800040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x40)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
r6 = open(0x0, 0x4040, 0x75)
move_mount$auto(r2, &(0x7f0000000280)='./file0\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x10000)
socket(0xa, 0x2, 0x3a)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
executing program 1:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
setpriority$auto(0x1, 0x0, 0xe55c)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000300)={{@raw=0x4, 0x4, 0xf8, 0x5, "a401d243991a4de376cc2bd4dbe3e10d3cff152230323227f8d6c24be7ceeed84366bbadec1b7ea40209a468", @raw}, 0x1ea, 0x3, 0x1, @raw=0x8f10, @reserved="1f21b2aa03e626d5da400a9e13f017f54c625fbe785ff8a079f5f335840ca5ee5c72d7c5dd9684cc9ec3d4551843651db67be7a66dc7420e0baebb7eb8a880fe494bb541abf1fad77749d5d4e58490133df980172cacbfd9fe2e372ddc298dcd9e9b59e603a8f2cd3f3500e3850bf32ab968e7afd0388afaa3712b60835ab268", "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"})
pwrite64$auto(r0, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x6, 0x8)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
write$auto(0x3, 0x0, 0x7fffffff)
tkill$auto(0x0, 0x7)
syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0)
read$auto(r1, 0x0, 0x39b8)
executing program 0:
mount$auto(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0x2, 0x80002, 0x73)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x2a801, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x80002, 0x73)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/version\x00', 0x104000, 0x0)
futex_waitv$auto(&(0x7f00000000c0)={0x4, 0x8, 0x800}, 0x0, 0xfffffffa, &(0x7f0000000240)={0x7, 0xa60}, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/28, 0x1c)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
ioctl$auto(0x3, 0x5412, 0x38)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r1)
msgctl$auto(0x9, 0x9, &(0x7f0000000380)={{0xff, <r4=>0xee01, 0xee00, 0x0, 0x5, 0x6, 0x3ff}, &(0x7f0000000300)=0xc5, &(0x7f0000000340)=0x20, 0x8000000000000000, 0x4, 0x100000001, 0xa3ff, 0x0, 0x3aa4, 0xe674, 0x8, @raw=0x4800, @raw=0x7})
sendmsg$auto_NL80211_CMD_CONNECT(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)={0x123c, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_FLAGS={0x11be, 0x11, 0x0, 0x1, [@generic="1ee84d1118e2b05d116c47b5636342edf70ca2282a25c2dabdc0235263f3787c071f92d79deb122c466b4474967094880a5519bcc6c882b15540c920002c1955a39bf1075a776fe7e4583599110de4d6ec265d9b717331af2dfa637e5cbde2dd81f7cc50b11770b0a7312609ea88607c5d80878bde4e294c3849bcc4fbd27bee2c7f84831c5622246ae3ed14a6aa5c318e814384bbcffeda01afeef370292c153fa19c70565d17c5d2d3d1dab44015", @typed={0x8, 0x124, 0x0, 0x0, @fd=r0}, @nested={0x8, 0xbc, 0x0, 0x1, [@nested={0x4, 0x145}]}, @typed={0x8, 0x108, 0x0, 0x0, @uid=r4}, @generic="33a5b7e49db483e346771374df334308069337edad028fc0c263e0980cd4c42f00599da5e9f737533dd369e231ac1a068b95fc4d7063d80277461a4b54bebe4bbb3a3f3f7756697204dc8754b26da732eade28e23d1a4fe2f57f3d1dce3450cfea1d6c541235c691327f722f9021017469cfea82daf158caf3879f8a0a5bda6f14d43d4a722797ccb8786866e723bafe4489e17043a638c637b899fe111a811544ec9833f2b6861a48f9ead8fd96f3f44a75c7254eb5f02afccec4adc8cd50abce7beb6e7d427f07f032f6f86a5af7ffd0ebebe524553ca3c49fe89b48f075d8bed31c3f71dd559a982ab6cebe535e1ce242a4", @generic="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"]}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x8}, @NL80211_ATTR_MAC={0x4}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_PMKR0_NAME={0x48, 0x102, "557ad1bf9ec7108c688a388b996ee7418af8b2c59bba64e4bca96d0eb32ae61446728902b0b0e0f0d5636ac404bcc0d75c508be59eef097664cf360393e26d711b97dd4c"}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x123c}, 0x1, 0x0, 0x0, 0x4000010}, 0xa000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
executing program 2:
r0 = io_uring_setup$auto(0x6, 0x0)
r1 = fsmount$auto(r0, 0xffffffff, 0x1002ce9)
r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x9c, r2, 0x411, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x45, 0x2, '/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00'}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '(\x00'}, @CTRL_ATTR_FAMILY_NAME={0xb, 0x2, '+/]@{@\x00'}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '}\x00'}, @CTRL_ATTR_FAMILY_NAME={0x11, 0x2, '/dev/usbmon0\x00'}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '/@-\x00'}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x5044}, 0x4008004)
r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x8500, 0x0)
r4 = openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x841, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x1a1180, 0x80)
r5 = socketpair$auto(0xf, 0x7, 0x8, 0x0)
ioctl$auto(0xffffffffffffffff, 0x80044dff, 0x9)
r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101b01, 0x0)
pwritev$auto(r6, &(0x7f0000000140)={0x0, 0x9}, 0x6, 0x9, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
read$auto(r5, 0x0, 0x1)
write$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(r4, 0x0, 0x2b)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2000000000000021, 0x2, 0x10000000000002)
pipe2$auto(&(0x7f00000003c0)=r3, 0x80000009)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1d, &(0x7f00000003c0), 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2c, 0x1, 0x3)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
socket(0x2, 0x2, 0x88)
mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto(0x100000006, 0x88, 0x1, 0xfffffffffffffffe, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$auto_MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0, 0x2})
syslog$auto(0x2, &(0x7f0000001cc0)='nl80211\x00', 0x6)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r0, 0x40046207, 0x9)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52204b}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000)
r1 = waitid$auto(0x3, 0xffffffffffffffff, &(0x7f0000000180)={@siginfo_0_0={0x8, 0x9, 0x5, @_sigchld={<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0x19cdbc3b, 0x7, 0x7fffffffffffffff}}}, 0xc, &(0x7f0000000200)={{0x8, 0x3}, {0x400, 0x800}, 0xffffffffffffffff, 0x7, 0x3, 0x7, 0x1000, 0x0, 0x4, 0x8000000000000001, 0x10001, 0x1000, 0xd, 0x3ff, 0x0, 0xa25})
kcmp$auto(r2, r1, 0xc, 0x1d, r0)
select$auto(0x3, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x0, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000002, 0xd, 0x3, 0xfffffffffffffffe, 0x7, 0x1000000006]}, 0x0, 0x0)
syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf)
close_range$auto(0x2, 0x8, 0x0)
clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="17000000", @ANYBLOB="7600279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0)
socket(0x1d, 0x80000, 0x30)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket(0x2, 0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a)
sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x1000000004)
executing program 2:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x4601, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), 0xffffffffffffffff)
r2 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x1, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto_tracing_mark_fops_trace(r2, 0x0, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x32, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x8050100000000000, 0x0, 0x100100001, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x200000000004, 0x8, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x6, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r3, 0x5425, 0x5)
socket(0x2, 0x3, 0x1)
read$auto_snd_ctl_f_ops_control(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r5 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf000200000008000d00b7002000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000800}, 0x8000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001a40), r6)
sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r6, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002abd700700000000000000000800040080000000"], 0x1c}}, 0x90)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x7}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040041}, 0x20004000)
executing program 1:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto_def_blk_fops_fs(r0, 0x2285, &(0x7f0000000000))
executing program 1:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async)
clock_gettime$auto(0x1, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4bfb, 0x9)
r1 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim2/trap_flow_action_cookie\x00', 0x200082, 0x0)
pread64$auto(r1, &(0x7f0000000280)='$\x00', 0xfff, 0x3)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) (async, rerun: 32)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x8000) (async, rerun: 32)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) (async)
r2 = socket(0x2, 0x5, 0x0) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cec24\x00', 0x400, 0x0)
ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000002c40)=0x40) (async)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xffe0}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async)
futex$auto(&(0x7f0000000000), 0x7d6, 0x9, &(0x7f0000000080)={0x7, 0x10000}, &(0x7f0000000100)=0x4, 0x6) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r4)
r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
r7 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64)
ioctl$auto_VHOST_SET_OWNER(r7, 0xaf01, 0x5) (async)
ioctl$auto(r7, 0x4008af12, r6)
sendmsg$auto_OVS_DP_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r5, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x0)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram10/queue/physical_block_size\x00', 0x2040, 0x0)
msgget$auto(0x0, 0x5)
socket(0xa, 0x2, 0x3a)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/4105, 0x1009)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40)
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r1 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r1, 0x29, 0x32, 0x0, 0x10000110)
connect$auto(0x3, 0x0, 0x55)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_component_list_fops_(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7fffe000)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0xff, 0x3, 0x18, r0, 0x8000)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
madvise$auto(0x200000000101, 0x7fd, 0x200004)
r4 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, 0x0, 0x1fe, 0xe)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(r3, 0x0, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x1000000000011, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
setdomainname$auto(0x0, 0x551)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop7\x00', 0x101, 0x0)
r2 = socket(0x10, 0x2, 0x6)
r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r3, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400)
recvmmsg$auto(r2, 0x0, 0xc1c, 0x42, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = getpgid(0x0)
kcmp$auto(r5, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$auto(r2, 0x7a, 0x0, &(0x7f00000002c0)='\x00y\"\xda\xfa\xb3\x16\xef\xe0\xc7\xf2\xa26\xb50U)\xac\x9a\x7f\a\x01\x81\xf98\a\xa7(k\xda\xb6]\xf9IA\"\xcb\xc4\xdd\x89\x94\v\xb0\x1e\x13?\xcf\x95\xbe\xf0\x8d~\x87{oBI\xf0\x8c\xa7\'?\x83\x1f\x90\xc6?\a\xc0h\r\xf4\xe4\xc9K\x05\xd4E\x10;\xaf\x8b\xdf\x8e*\x01\x8d\xc2\xd69SM\xea\x1cL\xca\x82\x06F\'2\xd0\x99\x91M\xbc\x06c\xb86\x94R\x86\x93\xec\xc9^?5\xc5\xe7(O\xa7K\xde\x03p!\'8Uum\n\xe4\xe7F\x81\xae\xe4\xb8\xd5\xd9\xfe\xbcl\xd2zRP\xee5\xea\xda\xd6\x03\x9b\x05#\xd1\xefd', 0x1)
mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(r2, 0x0, 0xf1)
close_range$auto(r1, r3, 0xd591)
ioctl$auto(0xffffffffffffffff, 0x802c550a, 0x1)
mmap$auto(0xfffffffffffffff9, 0x8, 0x10000000400df, 0xeb2, r2, 0x4)
mmap$auto(0x20007, 0x5f8, 0x4000000000e4, 0x40eb1, r3, 0x300000000000)
getrandom$auto(0x0, 0x6000000, 0x2)
r6 = socket(0x3, 0x5, 0x0)
setsockopt$auto(r6, 0x114, 0x1d, 0x0, 0x4)
r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0)
bpf$auto(0x0, 0x0, 0xa3)
ioctl$auto_PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000040)={0x7, 0x0})
ioctl$auto_PPPIOCSPASS(r7, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x3, 0xf1, 0xb0, @raw=0x7}})
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000100)="deeee9c4188feedaba9417e9feb729d0475bdf1b8d00bc25184e986e15fb1367163bfd5f8b1077c5a5974adbbb7b609cd63874c5ce2b82b8e209bb11bdc9ca5e59c758d43557c94a503af523", 0x8524}, 0x400)
sendmsg$auto_NL80211_CMD_VENDOR(r2, 0x0, 0x20040000)
keyctl$auto(0x1485, 0xfffffffffffffffd, 0x0, 0x0, 0xd6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001740), 0xffffffffffffffff)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00')
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0xfeffffff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0xff, 0x3, 0x18, r0, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x200000000101, 0x7fd, 0x200004)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x7, 0x1ff, 0x7, 0x8, 0x4909b6f8, 0x1ffdf, 0x9, 0x200003, 0x2, 0xa121, 0x3, 0x0, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x6, 0x2000, 0x0, 0x6, 0x70624ce7, 0x0, 0x94cf, 0xfffffffffffffffd, 0x0, 0x80000, 0x5, 0x7ff, 0xffffffffffffbfff, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xe)
sendmsg$auto_OVS_VPORT_CMD_DEL(r1, 0x0, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
setdomainname$auto(0x0, 0x551)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
executing program 2:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r1, r1, 0x0, 0x7fffe000)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0xff, 0x3, 0x18, r0, 0x80000000008080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe) (fail_nth: 6)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-bpf$auto-mmap$auto-openat$auto_proc_sys_file_operations_proc_sysctl-sendfile$auto-capget$auto-mmap$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r1, r1, 0x0, 0x7fffe000)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0xff, 0x3, 0x18, r0, 0x80000000008080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe) (fail_nth: 6)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
single: successfully extracted reproducer
found reproducer with 10 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-bpf$auto-mmap$auto-openat$auto_proc_sys_file_operations_proc_sysctl-sendfile$auto-capget$auto-mmap$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci
detailed listing:
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r1, r1, 0x0, 0x7fffe000)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0xff, 0x3, 0x18, r0, 0x80000000008080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-bpf$auto-mmap$auto-openat$auto_proc_sys_file_operations_proc_sysctl-sendfile$auto-capget$auto-mmap$auto-mmap$auto-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r1, r1, 0x0, 0x7fffe000)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0xff, 0x3, 0x18, r0, 0x80000000008080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0xffffffffffffffff, 0x0, 0xe) (fail_nth: 6)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-bpf$auto-mmap$auto-openat$auto_proc_sys_file_operations_proc_sysctl-sendfile$auto-capget$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r1, r1, 0x0, 0x7fffe000)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0xff, 0x3, 0x18, r0, 0x80000000008080)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe) (fail_nth: 6)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-bpf$auto-mmap$auto-openat$auto_proc_sys_file_operations_proc_sysctl-sendfile$auto-capget$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x7fffe000)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe) (fail_nth: 6)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-bpf$auto-mmap$auto-openat$auto_proc_sys_file_operations_proc_sysctl-sendfile$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x7fffe000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe) (fail_nth: 6)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-bpf$auto-mmap$auto-openat$auto_proc_sys_file_operations_proc_sysctl-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe) (fail_nth: 6)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-bpf$auto-mmap$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe) (fail_nth: 6)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-bpf$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe) (fail_nth: 6)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe) (fail_nth: 6)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe) (fail_nth: 6)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
reproducing took 1h15m47.709711782s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff88807b144000 by task syz.0.1816/7973

CPU: 0 UID: 0 PID: 7973 Comm: syz.0.1816 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0xfd/0x1b0 fs/debugfs/file.c:369
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f53ac585d29
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcd9f53f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f53ac775fa0 RCX: 00007f53ac585d29
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f53ac601b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f53ac775fa0 R14: 00007f53ac775fa0 R15: 00000000000018c7
 </TASK>

Allocated by task 7271:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:165
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0xf59/0x1ea0 fs/open.c:945
 vfs_open+0x82/0x3f0 fs/open.c:1075
 do_open fs/namei.c:3828 [inline]
 path_openat+0x1e6a/0x2d60 fs/namei.c:3987
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
 do_sys_open fs/open.c:1417 [inline]
 __do_sys_openat fs/open.c:1433 [inline]
 __se_sys_openat fs/open.c:1428 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1428
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 7271:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:582
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4613 [inline]
 kfree+0x14f/0x4b0 mm/slub.c:4761
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3f8/0xb60 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x2576/0x2610 kernel/signal.c:3017
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88807b144000
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff88807b144000, ffff88807b144400)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b140
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001
raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
head: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001
head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
head: 00fff00000000003 ffffea0001ec5001 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5563, tgid 5563 (dhcpcd-run-hook), ts 56790728964, free_ts 56770511529
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558
 prep_new_page mm/page_alloc.c:1566 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3476
 __alloc_pages_noprof+0x223/0x25b0 mm/page_alloc.c:4753
 alloc_pages_mpol_noprof+0x2c8/0x620 mm/mempolicy.c:2269
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2589 [inline]
 new_slab+0x2c9/0x410 mm/slub.c:2642
 ___slab_alloc+0xce2/0x1650 mm/slub.c:3830
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3920
 __slab_alloc_node mm/slub.c:3995 [inline]
 slab_alloc_node mm/slub.c:4156 [inline]
 __do_kmalloc_node mm/slub.c:4297 [inline]
 __kmalloc_noprof+0x2de/0x4f0 mm/slub.c:4310
 kmalloc_noprof include/linux/slab.h:905 [inline]
 load_elf_phdrs+0x103/0x210 fs/binfmt_elf.c:532
 load_elf_binary+0x1f8/0x4ed0 fs/binfmt_elf.c:861
 search_binary_handler fs/exec.c:1748 [inline]
 exec_binprm fs/exec.c:1790 [inline]
 bprm_execve fs/exec.c:1842 [inline]
 bprm_execve+0x703/0x19b0 fs/exec.c:1818
 do_execveat_common.isra.0+0x4f1/0x630 fs/exec.c:1949
 do_execve fs/exec.c:2023 [inline]
 __do_sys_execve fs/exec.c:2099 [inline]
 __se_sys_execve fs/exec.c:2094 [inline]
 __x64_sys_execve+0x8c/0xb0 fs/exec.c:2094
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
page last free pid 5562 tgid 5562 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_unref_page+0x661/0x1080 mm/page_alloc.c:2659
 __put_partials+0x14c/0x170 mm/slub.c:3157
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4119 [inline]
 slab_alloc_node mm/slub.c:4168 [inline]
 kmem_cache_alloc_noprof+0x1c8/0x3b0 mm/slub.c:4175
 vm_area_alloc+0x1f/0x1c0 kernel/fork.c:472
 __mmap_new_vma mm/vma.c:2340 [inline]
 __mmap_region+0x1091/0x2760 mm/vma.c:2456
 mmap_region+0x127/0x320 mm/mmap.c:1352
 do_mmap+0xa09/0x1050 mm/mmap.c:500
 vm_mmap_pgoff+0x1ba/0x360 mm/util.c:575
 ksys_mmap_pgoff+0x32c/0x5c0 mm/mmap.c:546
 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline]
 __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline]
 __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88807b143f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88807b143f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88807b144000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff88807b144080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88807b144100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff88807b144000 by task syz.0.1816/7973

CPU: 0 UID: 0 PID: 7973 Comm: syz.0.1816 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0xfd/0x1b0 fs/debugfs/file.c:369
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f53ac585d29
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcd9f53f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f53ac775fa0 RCX: 00007f53ac585d29
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f53ac601b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f53ac775fa0 R14: 00007f53ac775fa0 R15: 00000000000018c7
 </TASK>

Allocated by task 7271:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:165
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0xf59/0x1ea0 fs/open.c:945
 vfs_open+0x82/0x3f0 fs/open.c:1075
 do_open fs/namei.c:3828 [inline]
 path_openat+0x1e6a/0x2d60 fs/namei.c:3987
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
 do_sys_open fs/open.c:1417 [inline]
 __do_sys_openat fs/open.c:1433 [inline]
 __se_sys_openat fs/open.c:1428 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1428
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 7271:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:582
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4613 [inline]
 kfree+0x14f/0x4b0 mm/slub.c:4761
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3f8/0xb60 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x2576/0x2610 kernel/signal.c:3017
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88807b144000
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff88807b144000, ffff88807b144400)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b140
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001
raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
head: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001
head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
head: 00fff00000000003 ffffea0001ec5001 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5563, tgid 5563 (dhcpcd-run-hook), ts 56790728964, free_ts 56770511529
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558
 prep_new_page mm/page_alloc.c:1566 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3476
 __alloc_pages_noprof+0x223/0x25b0 mm/page_alloc.c:4753
 alloc_pages_mpol_noprof+0x2c8/0x620 mm/mempolicy.c:2269
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2589 [inline]
 new_slab+0x2c9/0x410 mm/slub.c:2642
 ___slab_alloc+0xce2/0x1650 mm/slub.c:3830
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3920
 __slab_alloc_node mm/slub.c:3995 [inline]
 slab_alloc_node mm/slub.c:4156 [inline]
 __do_kmalloc_node mm/slub.c:4297 [inline]
 __kmalloc_noprof+0x2de/0x4f0 mm/slub.c:4310
 kmalloc_noprof include/linux/slab.h:905 [inline]
 load_elf_phdrs+0x103/0x210 fs/binfmt_elf.c:532
 load_elf_binary+0x1f8/0x4ed0 fs/binfmt_elf.c:861
 search_binary_handler fs/exec.c:1748 [inline]
 exec_binprm fs/exec.c:1790 [inline]
 bprm_execve fs/exec.c:1842 [inline]
 bprm_execve+0x703/0x19b0 fs/exec.c:1818
 do_execveat_common.isra.0+0x4f1/0x630 fs/exec.c:1949
 do_execve fs/exec.c:2023 [inline]
 __do_sys_execve fs/exec.c:2099 [inline]
 __se_sys_execve fs/exec.c:2094 [inline]
 __x64_sys_execve+0x8c/0xb0 fs/exec.c:2094
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
page last free pid 5562 tgid 5562 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_unref_page+0x661/0x1080 mm/page_alloc.c:2659
 __put_partials+0x14c/0x170 mm/slub.c:3157
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4119 [inline]
 slab_alloc_node mm/slub.c:4168 [inline]
 kmem_cache_alloc_noprof+0x1c8/0x3b0 mm/slub.c:4175
 vm_area_alloc+0x1f/0x1c0 kernel/fork.c:472
 __mmap_new_vma mm/vma.c:2340 [inline]
 __mmap_region+0x1091/0x2760 mm/vma.c:2456
 mmap_region+0x127/0x320 mm/mmap.c:1352
 do_mmap+0xa09/0x1050 mm/mmap.c:500
 vm_mmap_pgoff+0x1ba/0x360 mm/util.c:575
 ksys_mmap_pgoff+0x32c/0x5c0 mm/mmap.c:546
 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline]
 __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline]
 __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88807b143f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88807b143f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88807b144000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff88807b144080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88807b144100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================