Extracting prog: 2h22m43.842289596s Minimizing prog: 13m10.319504066s Simplifying prog options: 8m56.230963234s Extracting C: 3m25.33784988s Simplifying C: 0s extracting reproducer from 31 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto-read$auto_vcs_fops_vc_screen-openat$auto_fake_panic_fops_-ppoll$auto-fcntl$auto_F_SETLK-mmap$auto-openat$auto_tty_fops_tty_io-socket$nl_generic-socketpair$auto-sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-ioctl$auto-read$auto_proc_tid_children_operations_internal-socket$nl_generic-syz_genetlink_get_family_id$auto_ovs_packet-ioprio_set$auto-sendmsg$auto_OVS_PACKET_CMD_EXECUTE-fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program did not crash single: failed to extract reproducer bisect: bisecting 31 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 11, 2, 30, 10, 16, 16, 3, 30, 26, 30, 1, 30, 30, 20, 24, 30, 26, 11, 8, 10, 30, 1, 3, 8, 3, 24, 20, 10, 29, 30] detailed listing: executing program 0: openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x111000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) write$auto(r0, &(0x7f0000000000)=';!+^', 0xc9c8) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x82002, 0x0) r1 = socket(0x2, 0x3, 0xfffffff1) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xebf, 0xffffffffffffffff, 0xfffffffffffffe00) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f00000001c0)="b5768bee3f3c74cf468c744fef25f33bb13925b3fb5af7defbb889827f723862f3a243f3119444ad9e80ec153ea68d9608ec19fae313dc2439665df7750b8d468f7d04bdcab432d1eb9c618ff5") r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) recvfrom$auto(r1, &(0x7f0000000140)="b2392e884973a78378acef81e6ebbca7066c8c56b38fb2bbdb698ef8f3ab1823fd69ca81fee6b6f925561db8fffa53", 0x1000, 0x1, &(0x7f0000000240)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, &(0x7f0000000280)=0x4) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r5, 0x80045515, 0x1) ioctl$auto_TIOCSTI2(r4, 0x545c, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r7) sendmsg$auto_CTRL_CMD_GETFAMILY(r7, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000054) r8 = syz_genetlink_get_family_id$auto_thermal(0x0, r7) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES64=r8], 0x1c}}, 0x8084) socket(0xa, 0x800, 0x84) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), 0xffffffffffffffff) executing program 0: mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20540, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x103200, 0x0) ioctl$auto(r0, 0x80044dfb, 0xffffffffffff9901) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) executing program 0: r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101800, 0x0) pread64$auto(r0, 0x0, 0x6, 0xffff) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c40)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) bpf$auto(0xb, 0x0, 0x3) r0 = socketcall$auto(0xfffffffc, &(0x7f0000000c00)=0x7ff) ftruncate$auto(r0, 0x6eb) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event1\x00', 0x40002, 0x0) ioctl$auto_EVIOCGKEYCODE(r1, 0x80084504, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$auto(r1, &(0x7f0000000a80)='nl80211\x00', 0xffffffff) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r2, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="32090200", @ANYRES16=r3, @ANYBLOB="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"], 0x914}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0xc008af12, r4) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) ioctl$auto(r6, 0x4008556c, 0x81) executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) socket(0x11, 0x80003, 0x300) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000040), 0x55) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="4a000000859a482583d9beefc77ded6599266f5b399979226e565d630b611f4f98b06d93e3c9610ce798b6c98a0936dc7ee565e5680052c5e47058ad28abf1ad1a2869cb2cae11523f7d7bddcbb4421ee359f98c8a968278b19c4978520ea0133b4b7cb1ad4ec35a833a72ed7ae9a5d22b62aace77e7dd0c5016f4fc5a7cdd38534c7fdbd3f2eb5c39b38b962ca807e8ee9827163bf98ad9e6b67050aef808206dfc15932baade9419b39284694737b95c6abb446cc8c8006fb44c7f642160ddf3c6886546b507fa2cfa0d689f773cd2eb31b2991152c749d4dd6d469f6aeec9a1a2cbaabdedd1732aa2f53975e8c0884085b3e9f4e785ea9f754fa8aa", @ANYRES64=r0, @ANYBLOB="01"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x84) executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 32: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 1: openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x10000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8) (rerun: 32) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x15) read$auto(0xca, 0x0, 0x200) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000140)=0x47ee) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xb, 0xf, 0xffffffffffffffff, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x245c]}, 0x0, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3f, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0) getpgid$auto(0x0) getpgid$auto(0x0) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) io_setup$auto(0x1, 0x0) unshare$auto(0x40000080) executing program 3: mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x900064b4, 0x2000000000000c37) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r5, r4, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000126584", 0x7) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)={0x6d, 0x6, 0x10001, 0x6146, 0x7, 0x6e0, 0x8000, 0x8000, 0x2}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0x8e, 0x3, 0x7fff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto_MADV_GUARD_REMOVE(0x9, 0x7, 0x67) io_uring_register$auto(0x2, 0x17, &(0x7f0000000100), 0x1) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000000)="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", 0xfa) executing program 3: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x17, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/watchdog\x00', 0x40141, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r3, &(0x7f0000000380)="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", 0x1000) open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20) sendfile$auto(0x6, 0x3, 0x0, 0xc01) r4 = socket(0x10, 0x2, 0x0) msgctl$auto_MSG_STAT_ANY(0x2, 0xd, &(0x7f00000013c0)={{0x30480000, 0x0, 0x0, 0x10000, 0x7, 0xef000000, 0x2}, &(0x7f0000000100)=0x2, &(0x7f0000001380)=0xd, 0x7, 0x7, 0x275c8726, 0x2, 0x4e54, 0x7, 0x7, 0x5, @raw=0xffff, @inferred=r0}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000029c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002980)={&(0x7f0000001440)={0x1520, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x2}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x1504, 0x3, 0x0, 0x1, [@nested={0x248, 0xea, 0x0, 0x1, [@generic="a1b7867726767b0a9d3ffd87ca98a10b8c012d618eab86b64a932bf24a81d26bf31cf9b67e332fde3c75f0ab07cfe8a4df2545b80a1a90b6347bdfddd32eb70a380b42ce67ca4a897596988b8d6cec0851fda9b07e471349afb7f03ffb8a1a6068b373601b211edf6468861fb22c3f59", @nested={0x4, 0xa2}, @generic="a7687f57fc370ed8cd97b81dd5a545bb46307a9aa1bcb3d79bd416eeaaa64e33c98e5749a5e6335711622152a68feb3e132d6046797e7931b4d3a621bcb95b276baf2938e2030266e3d00bf8958436ca64f0e59c0807f67d813a29c99e9c2fdb36e4ac3f43837187cc42176ff7a70ba6ae0078a52e8d60a38954116237c2bdc23b707900b9ee1b45f931a4334a50c426e4aa082e9711a27b7e677ad9117526fcbc6782e6372351f427965504770ecca32a1a63e46a8c15eb56e22fd189a8ae525f26ca762fdaf72347", @typed={0x8, 0x82, 0x0, 0x0, @uid=r5}, @generic="50b636473ab6c8db01a5d92fae26e1c3224b88e448e8ab61cbb178f578e03e52a558748462315fde1e28bef0758de6dae2aa56a2b9153e30ecdb733b11de55aabac39d080545bc1c3a980ae72da8f61002eef6020073106fb08121f2af6ff09bffc3d0efe0c5bafe9c79fd27cbff389a3243592cbab34301aea577c0126637a0343762707880d80aac26dc3dfc3ec485a937c407042e44acefdda8b4a9ac4863cb7d9a15d6a266f5e29c167e6eca0d84b65ef26c8eaf9602e08352216dac4067014793b7b4ff337155b1a8bb1798568a658ff2c44bb2b3fd2763bef7c4e1575b1f9465cb6e0ad1", @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @nested={0x4, 0xec}, @nested={0x4, 0x5a}, @typed={0x7, 0xd4, 0x0, 0x0, @str='!H\x00'}]}, @generic="fe7a064cc1862585fc6ad6a5b5d8eec95c3beb51bb076553145e2a49dad1f88c134623654ac058ac20a66d14feda415304fdfacdc9b0fe077f70302cc911ac9f8cb8059fefb2730c878f12074fbd610a4328fea0712ec5fbd6ccae3e1ceb05bf70e1e739121f25bc7a309415accb28cfd20a86462ad5d52724b52c81dd3fb9d3eb9a0f3690e46bb4c0a4306adb1974c286c631e153359a9aa2b5d49b5f393fb033e379ebe4db1a5e258e4955718188", @nested={0x113e, 0x13e, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="45413876a7600ca2fe1fca9d20ee3043660bc8dbea5020d5f61e386893ea2eac9c0e75c11844368870eac1ea65f462bf2b787b645bb7debc301e41765490d5261bb9727ebd22da5ce22cbf22dfc369be4acc3a437d771ca98bd421392e850a6598659c358d31110fe368e124dcdadce62c34ab20af8dd3499064b819d72bdc5e178130e6de4157cc800bf244662ddb89c8349d8c874b1070527886c37d4dd8e032acf3c58fbddae8598336d9d1c805c1d9ba372f3d3bd8c41e27b59f924df03bf4de497f262be42e85af84f525d9b6eec0ad92301aed68ddf4cf6f88df61", @nested={0x4, 0xd0}, @nested={0x4, 0xe6}, @nested={0x4, 0x5}, @generic="c4e4c38b60042edcbff5c3af03842b176a946bae7a3422cfb4968779741b51526869add3379b053fdf5458260e18a2aac67b3435739e621cc67d223c5cbcb6d67222fb8d4c489e2a1486a2d4d2aaa1e44ab35e3b79d79ff0abb90b954127db473d173cd59389601e0d7b0e374a43ec283994b16939b14afb99d136def4e74d05cc30ed5eefac28dbdbd81dcef26d03c6543757b1a71d55f737c4b3855993ec9e24ce7cc1609575d9ec2756113d86e86afb8fc79735b4131b0abed38701e03b4358354f537fb03fed7cf3fa7d39319a386bbd98b6d3b386e3fa17bf4e045ee0e93ea9a20d8c74e52058c60e2e08ff47418a8255abb395564bffbae351655964c49954c87b6bf1c679f43cc4253a70f111d868142e667a79f0638626a502381ec6b91f69070db473d203970f725e5036b077f7b20344b824860c1d99213dd97f7a9b4ffffd308e636e56c85c6036a902008427e09ac5466c7d6f55be197c33b643e3697efb5b6708e356b782e7809248b13e5b4fa4697db70dbb1bf0cf4f8e7a749823559cce2d140927114c9a39abc50a35ea7264b380824ff7944a9c8b144760a980f679906a86134204fff703d1af962af9efb5f0e6a0db7251c48b9e6f97f84d6471eb740f90f9483e69f4378fb385d3bced682aab8c9d04fe23e15b7a8967b877afdc1d018e0fac2eb44bd5506f503bb72f668bd94cc65305b9d4bdc5da309b0db82f7d7c9a1724baf2138ea13129e3c00a680db9e2016dd386434c66541f9688ed0a53403067b1101957bff0a1fbba888ef1e66f9b59f9f78def95e36087710efe7c31c0e5d4e317581dafda4e1e1794ddb109d69706234572e8e792c1c7e447b3409ef4232c723305c19da74a21d84e17f92f7e36bc79dd30f603d2e4b01aec2e87406ebd97611342ffe7f23840efcd59c93b3049da87494ea956f081382c3177beac51aa96d699691d472df9911307bb6f51305b31cd4d9a411fde19edae66cf833e5105ad5680890ecf8b97d18cffceaa9cbe0a29ca7e1c5edb84957fb5c01bdd155386687622cd154e5f41dd9e102857fa72f8c6d45fb30edfc1ef941fb77990fb01b338eda917f75aa62fd6bf62a5ede39098a5d5f742f3f3cae48a5e32148a194da65ef46850bf74e79ec0dd2e3fc1bdda232a7e705e1eb69fd9dfa55d961b65cb8ff41f082595efdd25ea09c7bab211870be58ec769bd76139ee872e01049a2d04f8c43e76aad58d8a49a30f9761aba18e486b398d808fabc6e0340415625ada3503a5489508e4739825ca7cdf0733f65f4cab5fb347fd9676dd490eeca89579e9fa0a3e3aa845259f105600ccb3d0419ce1aec95b3e551fe71ddfb920317d75914b1e94f351ad3678f5749fd0b3801f65ec0c94750d89d49ff30f5e19c9cd8b0c8313b17195609a18eca6a2825ce5d97a37efcc1bf592a95bfea5e9589b9c280863acbd357b6df8f58198d0e6c69779bdc268ab235b667f29f7d3b304d19fd738ae0e33fec7983a64fb7464c9b3f35a5eaab5d1849ab3afe4e57378d0b5dc24ce9cf5833bc346e25ef1496d5c321f4b292e3f9d9dce35bca0dc0f8c2f6382eac9e30a080daf85fa83c81a87d481d0285d1bd5fc92bb613acf83b231d03c95aeb7f9597ccef97f99bb8288ccf333c9549fc4a31e178e672a7c0f36aa64921342539d7e20d18e459278585696d9fd460eea5c2e516cb91171420d64d144d6a312845414df257508d9b20492b138b33950e168d8f1a4638ecb718aa4477844ca7be8ec0d40b4737cbd589eefd4faad7cd218b4f7b89c06f468bdabbfce2e6d21f082e791865de07862427d3f21a05dae91db2548865157694f97c06805c91abba7c4833a613c10441fec32b7c09dbead7089d545fff9dc7fd182605786129b092bc0d60ce2a2d970b7cdced675fe405d0bb13be2f0c419cf65db90ecc1066be22a8ea808d10d1368a8aa0cd229eb0dac9c7517428e274cdc243329ab4bd07616aa9e4c626af899f9eb26dd56a62dfc1a37e16fe06f6eaa536d27b5d8522ea9908253d1c53577767c39892caba25585ba93f0bc79e4bcb8ff7f810f86579b642a4b07be8aa50c3236abbae50cfc42e088216aef9da25fb520dfb9f618b813938d7e6486a16e0a98d716e14bf7734ebc4b19c8943bb098b209e39a919ddc7d802766dc12e32260e13c938913bc7c81febebee221b0fcb4b2f06f7012265f532dc34fdcf9ba3bd7fe8de2450c6048c9492a2193d117bf6ec5e4d402fb80d19a6b39ba03ad86c7856a6698ce3902d9e2f8748353a0a218d83582dca663a82f118a78656f6de9287c2212b4e77471d3979dd59ffce7432c2c738282908dbfe70b7ad4d53a735b3145bf77311fb79e74ffc3c07555441de6f5bc49eec09a46375bfa10d8d4d6e31c22a59cb26e712334844df4b9a0837f62f3bd231d1588b8db15d87074870ab4879432a383479b875ae96b9c7756edab2d507d7d062f7d16ed38e88f302ac46c5cabcf4eec5242c30bfbece81d3317a4c8fc61b3432627e66c0561fe9ea736c50d4ede44824be13877c9b39f01b30a744feb82628e90ede5014325113312f700e661bd8cb26412d36f028c7eb4a8b5fb5eaf66ca0f6ce953d88d83c5130d9111dc22eb734d72f2c07b8f073d527efb6622de79d314447df7214704f8f76af52700095097c549e595588cc02c538aa7e43a7fd571aa855f8a3afe4335aa2337588f4c70836ec5585e5da5b8fb6eba7063550dc59109a1774db10008ef815b6226c0b0766407ada7004487b905d204b7d7b735e20b68535b42299076788361a9648c766c55dd29f7b293d8b264e59bc988dbd46066d6bcf2d767d100162ab3b948a3c75a5893d3861344d9432070900b23cb06ff3c76922a94e1b58c7f4bff084d1c3f78ab3c7fd1da4be1b005ff5b212b71b64e5dd581c248c3dbf3fe96c03dbf7082122e2d63adea37e1db567c22a0a9509b828d46b87ccaf6f29ffae33b4a23f5e7767dab4b645c9294d8ad8db73951ba8e3ccf0def10cf4e0ba67e1965521dc7140b0d5c2800fa791ff5b3eb292be1dbb309b017d77034e8764000095d44e3cc290dc7c6b6e59853842874d97b4ae6c7453154966a5629e8b8df62ff0c4137e8bf745e6f32a45120b9848c43320d8b0ef643531a7b55c611cef02e653fede043d948a6e2ecc53ed9b76606657ab4d590fff8fef65ae9eece0ebd979f58e6face9b5ba1869e4b67d72b91857b7ed1a04e600139193e29bd7f4efa1bf5478317466093b1aaf7b56f293fba462fcf6e6b30c95285c0c528ace01462348cfa1fb8cfb469c19561192d223f786b55746b6b0fee0f285d9a8a9b1310710b71308f0d451fea6eef897b88c6d3eabd3dfad0031057aac9a3d331c06204937754c47c469088d2cf0aff17889901aab82113e9a1f9597689ae3a1d024dae3138d6e22a0243994fcc142aaaef4774f504a8bf48938322e30d34a00ace25e7494b726a9d1719b2c87ed7893ad1b8fff621d1ea626416628298a2ed29c59825a28bf738590d845f9e08acf000be52e1fb53a91d141850295ae33c4266f02d2cfd10399cd33412018367b44eb93784770a1c421fcc3c08842c5542fddbfc77d01b22e0dd959260c4d418e6c04e6e353844cc20bd2f3a4d386c0c04f649eeff9fa83db7c933fae19d2f3fbfb887bc75927947c04672fb8d201b307e884880fe3245932f1ecd1f226a46a2fbe3adcf645630e1ab8c544a14445c61011a2e6d3e535326ac4647fc328902e73975ad7db2220a82c285fffe0ceee6a850dd37db548d0031786ec35a341b8793fd5c1444e418f4ad5b778b7aadd626967490f591d1d76fd83ff2d33e8b09a09e58990cad62fe84c6f2bbcc57955681d66de85888ed6f7e0f9734083988117fdec0a3d7a2e59de98da5131a34c09e1fb5e02d34f924a2e1f4a0fdf0e0415de111aa11eaca844591c69b74839a89536619c20a78a1e053ea09188357b4eb7ce28b87e74efca5fc5c5e64ee58a498a417ee944c96603d3556b9fc1e9d731395df5ee8ca25139665a60da86caec4eada9c259a999745cb232a18a0a7414186e8d191deb9f02fac9fb7b10200bf0b7f33a35fd115a11d1e5e7236393ea3aaaaa7f5f768c679479cf89972f60ab178c5951ec3bc52128d921456878cd23ebfa266a08c1979fa6a0accf865b5e3d9d3484333e52e77e73765652475ddea84c09a8845061fe019bc75cc94add31ff5f39635c354619a696ea1f665d99b6ef26cd078259cc58560e18a88179f2370e60182feab2e18eda6254116c6b07fdf156dce105a33d09b0c7c6e29a79aa3e9918413346b15c1a4e000a1dd911431288b9d5d41d23da2fcec3191e685cbf38af76e176e158568b1bce72258785396bdfbdd0436bcc4eea4fae94228890fc71036fd9c7e890b915fca52409375dfaa8ba0c0d66e32407443d11bccc54f6c387cd349c5b33e149faab667ffb7b2988ea7a32fd0534c8a101f73e655532aa2f36878f0d316b3fafda2a568e73526414c3a059315f4d4ce8c340e98200b6c16de0fcdcbdfcda71f1461faf89c506017847302fc3d8ee63fc8dc475b9d9656cff232349904f6f956103e4d580fc8f330e41b0c388ca91d0cca1f182b90ac79385f8b6cff4bc710766a0d60c56e9ac9900df6cb1a2d0a82a87a3d329a3e45c42237fb59c343f4a6cec4d63cee53ddf1d78d87281c8dc3c2b3bece42430f26a483cffd7020f3df183015fb75c9911fe61cf00bb47f8f974cd6394064a2750be62d66a0f2cc6b13ec9ce2139e2f8c241d39fdc800784b8d80232d7c1a4e97d26a01442e162a143c88045aece5b17fa6de67ff8021cec6b84ec60bee976c645c161776e75c3bc3f831e0d6a67fb11bac1d26b180db9c86b265acc512c64bce8d42debdeafee06da21a6f681389d9cb4a240cce1f4154a4a16f75d90481a78854117218438e822fd0eec75569f965ba0fcc8ffe95ecef40faee621c8985da40a93bf94b9593c1dd9b6cc95eecacaa3fe733f60a9e3b1f65ec4329f064677b9256f08f83d7ca135d50efb1206164980f52bba21cbcbbe45b88fac6bede92a2aae88bd4e7838ace425118345e283cf43975003ff2b25a5099196bddb576ed0051a8bf198de60d376e3ab555b3df65b5c93bcc55fc8c1ec0dcc547cd27ee900c4923bec1138f5c13acb6a351c80d8cbc1c28f6ab39dfcb736be67a2af1371e8797f562c1e2f6fe492cdc4db787c8c5c9c4ecbfacd572c4507270bd2085c19fc1d9a4abe436e88e680b0fce070c9f7506ef446ced5a5eabc55eaff28eb3393f46af0ab65c79a1691707e2c60f109f7c816f4aeca029bb636ed57c6b0ee6c9404ec8d4b2bff87786bff5f4f5ec04c1e26d1f76fa78234128b9b6a269e90d6d84ccb5ac0e11f5d86a0add0d0b579bfb5d03cbf27e750286d407924390b89d77bcf22e5622bdd44145c0eb44df1b04fc26a27bae296ffff3cc07676f5de2536643cd90b2ad6fbb5fb1a627a99fd5eb263c5b9b1b48bd0059003a41f0d33f82f679a3fb8d6df451464f52b583841ca364cce3da4afb4c584babd9e77f6a62101a508be2b0bcb6a8b9f0bf42742680267700bf978e0262cd97668dd069b276f7ec7b3ac5ab0a165dd83f3f746f1daf3423f11be5f6dea9ac4760d9f59b22eb7326de1ce95945b11b7078c001e6a44d7b98fabeed7d62b5ecab602fcf46b8d1edb7fbd0ed7562638775f73757175d41b5668a6bfad5fb7440c4041d725b91cb0ecb0db0fa5255b8631231965bd111c20c87474", @typed={0x45, 0x31, 0x0, 0x0, @str='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00'}]}, @typed={0xc, 0x26, 0x0, 0x0, @u64=0x50355da5}, @generic="9a6fb948ad6774bb797650583b59992c438acdef00083b4d4b8b80de66f17826ad3904a4291deb29b9acc94da6c6d8b31b1f390e78e7906b72f7ab11d3a9adba04a32eb360777dc561fe2cfd309fe2b0fb3b88a5d0e99f0e2f0af69030a99d8be51dc071377526846979048daded4b895cf76566da234769200f6a26c990bf4cc2c459dc4203a3fa4c7f229086b1d80a8ecfaf90fe2fa35dff47f80e6f3e4a67c01a5849a2092a4503f55aceae49d0c0cfe309ab371b0bd9d2247d64bd"]}]}, 0x1520}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x3, 0x1ffdf, 0x7, 0x200003, 0x209b, 0x1000a121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x280, 0x100000000, 0x2, 0x7, 0x2100, 0x220, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x100000001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffbff5, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x891, 0x7, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0x4, 0x8008, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) executing program 2: openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (fail_nth: 23) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x4000000000002) r1 = socket(0x15, 0xa, 0x0) r2 = socket(0x10, 0x2, 0xc) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) capset$auto(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000000c0)={0x0, 0x62, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00", @ANYBLOB='F8'], 0x24}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x20, r13, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth1_virt_wifi\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x26c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x945}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd154}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x100000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x26c}}, 0x14) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40080, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0, @ANYRES32], 0x18}}, 0x80) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim5/max_vfs\x00', 0x6000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x50280, 0x0) executing program 2: openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x111000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) write$auto(r0, &(0x7f0000000000)=';!+^', 0xc9c8) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x82002, 0x0) socket(0x2, 0x3, 0xfffffff1) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xebf, 0xffffffffffffffff, 0x8001) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000001c0)="b5768bee3f3c74cf468c744fef25f33bb13925b3fb5af7defbb889827f723862f3a243f3119444ad9e80ec153ea68d9608ec19fae313dc2439665df7750b8d468f7d04bdcab432d1eb9c618ff5") r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x80045515, 0x1) ioctl$auto_TIOCSTI2(r3, 0x545c, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r6) sendmsg$auto_CTRL_CMD_GETFAMILY(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000054) r7 = syz_genetlink_get_family_id$auto_thermal(0x0, r6) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r7], 0x1c}}, 0x8084) socket(0xa, 0x800, 0x84) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), 0xffffffffffffffff) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2, 0x1000000004, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xcf, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x29) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000100)={0x30, 0xff, 0x0, @raw=0xfffff028}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x9dfefc5e47f5c72f}, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\x83\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)\x17\xbby\xe5\xc4w\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00'/192, 0x104, 0x0) statfs$auto(&(0x7f0000000180)='}[,&*}\x00', &(0x7f00000001c0)={0x8, 0x2, 0x9, 0x3, 0x4, 0x7ff, 0x8000000000000001, {[0x6, 0x3]}, 0x9a, 0x7, 0x0, [0x8, 0x9, 0x6269, 0xfffffffffffffffa]}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000fc39ad872c00000008000300", @ANYRES32=r2], 0x40}}, 0x4000000) r3 = prctl$auto_PR_SCHED_CORE_CREATE(0x6, 0x1, 0xffffffffffffffff, 0x5, 0x7ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r4) ioperm$auto(0x3, 0x38c, 0x9) modify_ldt$auto(0xf7, 0x0, 0x8) sendmsg$auto_TIPC_NL_MEDIA_SET(r4, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/key\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x20) socket(0xa, 0x2, 0x73) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={"ab90603571d1642a57ff2f7310e874b7d2e4ca80cce1e244cf56e45ec20b3d6c", 0x7, 0x3, 0x8, 0x800, 0x7, 0xffffffffffffffff}) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) fcntl$auto(0x3, 0x400, 0x1) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7fff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x1e8, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NAME_TABLE={0x34, 0x8, 0x0, 0x1, [@typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0xa, 0x56, 0x0, 0x0, @str='[.\xe8%+\x00'}, @generic="b96cc46df4d3317d", @nested={0x8, 0x9c, 0x0, 0x1, [@nested={0x4, 0x9e}]}]}, @TIPC_NLA_SOCK={0x1a0, 0x2, 0x0, 0x1, [@typed={0x8, 0xa3, 0x0, 0x0, @fd=r6}, @typed={0xa3, 0x3b, 0x0, 0x0, @binary="33c4c65fd6e7c7d5d96dc4d05a43b7727d778f477736bea19e60735e4f10912b1017399d3941a723f77f4638197b3efc63231f6acca0f4db4e1577724a8c60e15f9e22d0da599042a7829706058242dd41a694598ac6ee582f45e60c4ed92611cb907e5a7dd13c98ce9c7ffd0f4cc597aee022c5788ebba5842bfde1b782f30a2609dfb00bcddd211e7b467406c3aa7e7c6250ed7034a5ed42428e9460e6d6"}, @nested={0xf0, 0x12a, 0x0, 0x1, [@generic="a20d99c42fe56015db", @typed={0x8, 0x132, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x83}, @generic="352ef16ee221e5c6237ec29c647f5fbed51641220b1bf25fc5e7e7bdb16aa0cbfdca5f62ec4b499d2f5ef4bd396d6d9cc7d509fe8bd4e56b41ae90f31370777d33290e33d017d9c146078e5cae75dba8f7486be6a1cb9696146aaad282c3483d3ea85be3bd18124956ddbd7fdc1f07f8ff944604b58c332bde7652d207217ded2ed2c0cddc72f4a347ff15be15c07cc854bbca8c27b29d28c391", @nested={0x4, 0x43}, @generic="a62d9fb0639af03481c6b29ed4cbc2c843b349529cfd01b41e97267d878946011d83b2f50bb36777f6d0b95298ea0e76fa", @typed={0x6, 0x49, 0x0, 0x0, @str='\xff\xff'}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f0000000740)="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", 0xaf8) executing program 4: socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) select$auto(0x80a, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x8001, 0xffffffffffffffff, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) write$auto(0x3, 0x0, 0xfffffdef) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xe73, 0xbb}, 0x20, 0x0, &(0x7f0000000100)={0x6}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x22, 0xffffffffffffffff, 0x3) memfd_secret$auto(0x0) socket(0xa, 0x3, 0x100) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x22, 0x1, 0x8) mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x7, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0xa4) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=r2, 0x4, @old_prog_fd=r3}, 0xa3) mmap$auto(0x0, 0x20009, 0xb8, 0xeb1, 0x401, 0x8000) r4 = socket(0x2, 0x6, 0x0) setsockopt$auto(r4, 0x10d, 0x2, 0x0, 0x4) pread64$auto(r0, 0x0, 0x6, 0xffff) executing program 2: mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x900064b4, 0x2000000000000c37) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r5, r4, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000126584", 0x7) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)={0x6d, 0x6, 0x10001, 0x6146, 0x7, 0x6e0, 0x8000, 0x8000, 0x2}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0x8e, 0x3, 0x7fff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto_MADV_GUARD_REMOVE(0x9, 0x7, 0x67) io_uring_register$auto(0x2, 0x17, &(0x7f0000000100), 0x1) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000000)="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", 0xfa) executing program 1: mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20540, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x103200, 0x0) ioctl$auto(r0, 0x80044dfb, 0xffffffffffff9901) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) executing program 4: getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x2}}, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = socket(0x1e, 0x1, 0x0) r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) bpf$auto(0x10, &(0x7f00000000c0)=@link_detach={r1}, 0x40) connect$auto(r0, &(0x7f0000000000), 0x10) r2 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r2, &(0x7f0000000380)="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", 0x4e00) executing program 3: close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) r2 = socket(0x11, 0x80003, 0x300) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) connect$auto(0x3, &(0x7f0000000040), 0x55) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="01"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x84) executing program 1: mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x900064b4, 0x2000000000000c37) getpeername$auto(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x7) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r1, 0x400, 0x27f}, 0x4, 0x0, 0x0, 0x8) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000126584", 0x7) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)={0x8, 0x6, 0x10001, 0x2144, 0x4, 0x6e1, 0x7, 0x8000, 0x1}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x400402, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0xf766, 0xfffffffffffffffe, 0x8002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="130008000300", @ANYRES32, @ANYBLOB="0800610002"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001c00)=""/4111, 0x100f) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) executing program 4: openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xd4000, 0x0) executing program 3: r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/001/001\x00', 0xa901, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x0, 0x5}, 0xb, &(0x7f0000000080)={0x6, 0xf339}, &(0x7f00000000c0)={0xff}, 0x8) (async) ioctl$auto(r0, 0x4008550d, r0) executing program 2: socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) landlock_create_ruleset$auto(&(0x7f0000000000)={0x1da, 0x1, 0x9}, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000009}, 0x24004880) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (fail_nth: 21) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event1\x00', 0x8140, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x100000001, 0x15, 0x0, 0xa654) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(0x3, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x1000000001c, 0x5, 0x0, 0x6, 0x80001) setreuid$auto(0x0, 0xee00) socket(0xf, 0x3, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@link_create={@prog_fd=0x1, @target_fd=0xa, 0x3, 0x8, @tracing={0x4, 0xffffffff}}, 0xfbf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000280)={0x6, 0x2f, 0x4, 0x8, "dea771719b06ab6c79069170f1ff236dd746dc7533207e91102abd6928eba3bf"}) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2, 0x1000000004, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xcf, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x29) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000100)={0x30, 0xff, 0x0, @raw=0xfffff028}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x9dfefc5e47f5c72f}, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) executing program 4: mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e963b0004000000000800", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x19, @attach_prog_fd, 0x9, 0x7fffffffffffffff, 0x4, 0x2, 0x6}, 0x201) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x900000000000000, 0x9}, 0x7}, 0x3, 0x0) executing program 2: socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x1, 0x6, 0x18, 0x2, 0x8000) r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x2a, 0x2, 0x6) setresgid$auto(0xa05, 0x4, 0x0) access$auto(0x0, 0x3) connect$auto(0x3, 0xfffffffffffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) getsockopt$auto_SO_NOFCS(r0, 0x1, 0x2b, 0x0, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b58", 0x46) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r2, 0x7005, 0x0) readv$auto(r2, &(0x7f00000004c0)={0x0, 0x4}, 0x5) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x6, 0x10001) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto-read$auto_vcs_fops_vc_screen-openat$auto_fake_panic_fops_-ppoll$auto-fcntl$auto_F_SETLK-mmap$auto-openat$auto_tty_fops_tty_io-socket$nl_generic-socketpair$auto-sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-ioctl$auto-read$auto_proc_tid_children_operations_internal-socket$nl_generic-syz_genetlink_get_family_id$auto_ovs_packet-ioprio_set$auto-sendmsg$auto_OVS_PACKET_CMD_EXECUTE-fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program did not crash single: failed to extract reproducer bisect: bisecting 31 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 11, 2, 30, 10, 16, 16, 3, 30, 26, 30, 1, 30, 30, 20, 24, 30, 26, 11, 8, 10, 30, 1, 3, 8, 3, 24, 20, 10, 29, 30] detailed listing: executing program 0: openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x111000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) write$auto(r0, &(0x7f0000000000)=';!+^', 0xc9c8) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x82002, 0x0) r1 = socket(0x2, 0x3, 0xfffffff1) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xebf, 0xffffffffffffffff, 0xfffffffffffffe00) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f00000001c0)="b5768bee3f3c74cf468c744fef25f33bb13925b3fb5af7defbb889827f723862f3a243f3119444ad9e80ec153ea68d9608ec19fae313dc2439665df7750b8d468f7d04bdcab432d1eb9c618ff5") r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) recvfrom$auto(r1, &(0x7f0000000140)="b2392e884973a78378acef81e6ebbca7066c8c56b38fb2bbdb698ef8f3ab1823fd69ca81fee6b6f925561db8fffa53", 0x1000, 0x1, &(0x7f0000000240)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, &(0x7f0000000280)=0x4) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r5, 0x80045515, 0x1) ioctl$auto_TIOCSTI2(r4, 0x545c, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r7) sendmsg$auto_CTRL_CMD_GETFAMILY(r7, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000054) r8 = syz_genetlink_get_family_id$auto_thermal(0x0, r7) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES64=r8], 0x1c}}, 0x8084) socket(0xa, 0x800, 0x84) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), 0xffffffffffffffff) executing program 0: mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20540, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x103200, 0x0) ioctl$auto(r0, 0x80044dfb, 0xffffffffffff9901) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) executing program 0: r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101800, 0x0) pread64$auto(r0, 0x0, 0x6, 0xffff) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c40)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) bpf$auto(0xb, 0x0, 0x3) r0 = socketcall$auto(0xfffffffc, &(0x7f0000000c00)=0x7ff) ftruncate$auto(r0, 0x6eb) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event1\x00', 0x40002, 0x0) ioctl$auto_EVIOCGKEYCODE(r1, 0x80084504, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$auto(r1, &(0x7f0000000a80)='nl80211\x00', 0xffffffff) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r2, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="32090200", @ANYRES16=r3, @ANYBLOB="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"], 0x914}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0xc008af12, r4) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) ioctl$auto(r6, 0x4008556c, 0x81) executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) socket(0x11, 0x80003, 0x300) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000040), 0x55) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="01"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x84) executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 32: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 1: openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x10000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8) (rerun: 32) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x15) read$auto(0xca, 0x0, 0x200) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000140)=0x47ee) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xb, 0xf, 0xffffffffffffffff, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x245c]}, 0x0, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3f, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0) getpgid$auto(0x0) getpgid$auto(0x0) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) io_setup$auto(0x1, 0x0) unshare$auto(0x40000080) executing program 3: mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x900064b4, 0x2000000000000c37) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r5, r4, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000126584", 0x7) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)={0x6d, 0x6, 0x10001, 0x6146, 0x7, 0x6e0, 0x8000, 0x8000, 0x2}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0x8e, 0x3, 0x7fff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto_MADV_GUARD_REMOVE(0x9, 0x7, 0x67) io_uring_register$auto(0x2, 0x17, &(0x7f0000000100), 0x1) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000000)="d765327926e3ac60522934c8079d978b2f5372bef04aceeb07a01352ee4629542ef90e5e20d788637132d1046c3297dbeec2c4cf8dbf291cb3187bbbdad624f16eae737df773ff32ee334af6e4c54de9987bd434312457675f73c9dd86b6a6265abbf361685cad1916b67a21b93b5a40199a7ec8cee0d166f2c1406bf01756ee37a42aaa6dad7973e8c6d917e884ea6f54c173d42ebd77b7ab4f1286095870688c4d9811ce6116058ae4d499ef1fb893db43c1209e68aa5a4d78ffc492f3d6378e26842cb4cb7c199266789c103589b7af4813c309eca7b39d0fee1987b8390eb52ad1c099c389cdbe94804c9837bcbb4d720efdc39a3f15c6c0", 0xfa) executing program 3: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x17, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/watchdog\x00', 0x40141, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r3, &(0x7f0000000380)="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", 0x1000) open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20) sendfile$auto(0x6, 0x3, 0x0, 0xc01) r4 = socket(0x10, 0x2, 0x0) msgctl$auto_MSG_STAT_ANY(0x2, 0xd, &(0x7f00000013c0)={{0x30480000, 0x0, 0x0, 0x10000, 0x7, 0xef000000, 0x2}, &(0x7f0000000100)=0x2, &(0x7f0000001380)=0xd, 0x7, 0x7, 0x275c8726, 0x2, 0x4e54, 0x7, 0x7, 0x5, @raw=0xffff, @inferred=r0}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000029c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002980)={&(0x7f0000001440)={0x1520, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x2}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x1504, 0x3, 0x0, 0x1, [@nested={0x248, 0xea, 0x0, 0x1, [@generic="a1b7867726767b0a9d3ffd87ca98a10b8c012d618eab86b64a932bf24a81d26bf31cf9b67e332fde3c75f0ab07cfe8a4df2545b80a1a90b6347bdfddd32eb70a380b42ce67ca4a897596988b8d6cec0851fda9b07e471349afb7f03ffb8a1a6068b373601b211edf6468861fb22c3f59", @nested={0x4, 0xa2}, @generic="a7687f57fc370ed8cd97b81dd5a545bb46307a9aa1bcb3d79bd416eeaaa64e33c98e5749a5e6335711622152a68feb3e132d6046797e7931b4d3a621bcb95b276baf2938e2030266e3d00bf8958436ca64f0e59c0807f67d813a29c99e9c2fdb36e4ac3f43837187cc42176ff7a70ba6ae0078a52e8d60a38954116237c2bdc23b707900b9ee1b45f931a4334a50c426e4aa082e9711a27b7e677ad9117526fcbc6782e6372351f427965504770ecca32a1a63e46a8c15eb56e22fd189a8ae525f26ca762fdaf72347", @typed={0x8, 0x82, 0x0, 0x0, @uid=r5}, @generic="50b636473ab6c8db01a5d92fae26e1c3224b88e448e8ab61cbb178f578e03e52a558748462315fde1e28bef0758de6dae2aa56a2b9153e30ecdb733b11de55aabac39d080545bc1c3a980ae72da8f61002eef6020073106fb08121f2af6ff09bffc3d0efe0c5bafe9c79fd27cbff389a3243592cbab34301aea577c0126637a0343762707880d80aac26dc3dfc3ec485a937c407042e44acefdda8b4a9ac4863cb7d9a15d6a266f5e29c167e6eca0d84b65ef26c8eaf9602e08352216dac4067014793b7b4ff337155b1a8bb1798568a658ff2c44bb2b3fd2763bef7c4e1575b1f9465cb6e0ad1", @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @nested={0x4, 0xec}, @nested={0x4, 0x5a}, @typed={0x7, 0xd4, 0x0, 0x0, @str='!H\x00'}]}, @generic="fe7a064cc1862585fc6ad6a5b5d8eec95c3beb51bb076553145e2a49dad1f88c134623654ac058ac20a66d14feda415304fdfacdc9b0fe077f70302cc911ac9f8cb8059fefb2730c878f12074fbd610a4328fea0712ec5fbd6ccae3e1ceb05bf70e1e739121f25bc7a309415accb28cfd20a86462ad5d52724b52c81dd3fb9d3eb9a0f3690e46bb4c0a4306adb1974c286c631e153359a9aa2b5d49b5f393fb033e379ebe4db1a5e258e4955718188", @nested={0x113e, 0x13e, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="45413876a7600ca2fe1fca9d20ee3043660bc8dbea5020d5f61e386893ea2eac9c0e75c11844368870eac1ea65f462bf2b787b645bb7debc301e41765490d5261bb9727ebd22da5ce22cbf22dfc369be4acc3a437d771ca98bd421392e850a6598659c358d31110fe368e124dcdadce62c34ab20af8dd3499064b819d72bdc5e178130e6de4157cc800bf244662ddb89c8349d8c874b1070527886c37d4dd8e032acf3c58fbddae8598336d9d1c805c1d9ba372f3d3bd8c41e27b59f924df03bf4de497f262be42e85af84f525d9b6eec0ad92301aed68ddf4cf6f88df61", @nested={0x4, 0xd0}, @nested={0x4, 0xe6}, @nested={0x4, 0x5}, @generic="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", @typed={0x45, 0x31, 0x0, 0x0, @str='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00'}]}, @typed={0xc, 0x26, 0x0, 0x0, @u64=0x50355da5}, @generic="9a6fb948ad6774bb797650583b59992c438acdef00083b4d4b8b80de66f17826ad3904a4291deb29b9acc94da6c6d8b31b1f390e78e7906b72f7ab11d3a9adba04a32eb360777dc561fe2cfd309fe2b0fb3b88a5d0e99f0e2f0af69030a99d8be51dc071377526846979048daded4b895cf76566da234769200f6a26c990bf4cc2c459dc4203a3fa4c7f229086b1d80a8ecfaf90fe2fa35dff47f80e6f3e4a67c01a5849a2092a4503f55aceae49d0c0cfe309ab371b0bd9d2247d64bd"]}]}, 0x1520}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x3, 0x1ffdf, 0x7, 0x200003, 0x209b, 0x1000a121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x280, 0x100000000, 0x2, 0x7, 0x2100, 0x220, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x100000001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffbff5, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x891, 0x7, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0x4, 0x8008, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) executing program 2: openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (fail_nth: 23) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x4000000000002) r1 = socket(0x15, 0xa, 0x0) r2 = socket(0x10, 0x2, 0xc) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) capset$auto(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000000c0)={0x0, 0x62, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00", @ANYBLOB='F8'], 0x24}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x20, r13, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth1_virt_wifi\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x26c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x945}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd154}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x100000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x26c}}, 0x14) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40080, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0, @ANYRES32], 0x18}}, 0x80) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim5/max_vfs\x00', 0x6000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x50280, 0x0) executing program 2: openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x111000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) write$auto(r0, &(0x7f0000000000)=';!+^', 0xc9c8) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x82002, 0x0) socket(0x2, 0x3, 0xfffffff1) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xebf, 0xffffffffffffffff, 0x8001) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000001c0)="b5768bee3f3c74cf468c744fef25f33bb13925b3fb5af7defbb889827f723862f3a243f3119444ad9e80ec153ea68d9608ec19fae313dc2439665df7750b8d468f7d04bdcab432d1eb9c618ff5") r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x80045515, 0x1) ioctl$auto_TIOCSTI2(r3, 0x545c, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r6) sendmsg$auto_CTRL_CMD_GETFAMILY(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000054) r7 = syz_genetlink_get_family_id$auto_thermal(0x0, r6) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r7], 0x1c}}, 0x8084) socket(0xa, 0x800, 0x84) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), 0xffffffffffffffff) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2, 0x1000000004, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xcf, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x29) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000100)={0x30, 0xff, 0x0, @raw=0xfffff028}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x9dfefc5e47f5c72f}, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\x83\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)\x17\xbby\xe5\xc4w\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00'/192, 0x104, 0x0) statfs$auto(&(0x7f0000000180)='}[,&*}\x00', &(0x7f00000001c0)={0x8, 0x2, 0x9, 0x3, 0x4, 0x7ff, 0x8000000000000001, {[0x6, 0x3]}, 0x9a, 0x7, 0x0, [0x8, 0x9, 0x6269, 0xfffffffffffffffa]}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000fc39ad872c00000008000300", @ANYRES32=r2], 0x40}}, 0x4000000) r3 = prctl$auto_PR_SCHED_CORE_CREATE(0x6, 0x1, 0xffffffffffffffff, 0x5, 0x7ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r4) ioperm$auto(0x3, 0x38c, 0x9) modify_ldt$auto(0xf7, 0x0, 0x8) sendmsg$auto_TIPC_NL_MEDIA_SET(r4, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/key\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x20) socket(0xa, 0x2, 0x73) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={"ab90603571d1642a57ff2f7310e874b7d2e4ca80cce1e244cf56e45ec20b3d6c", 0x7, 0x3, 0x8, 0x800, 0x7, 0xffffffffffffffff}) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) fcntl$auto(0x3, 0x400, 0x1) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7fff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x1e8, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NAME_TABLE={0x34, 0x8, 0x0, 0x1, [@typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0xa, 0x56, 0x0, 0x0, @str='[.\xe8%+\x00'}, @generic="b96cc46df4d3317d", @nested={0x8, 0x9c, 0x0, 0x1, [@nested={0x4, 0x9e}]}]}, @TIPC_NLA_SOCK={0x1a0, 0x2, 0x0, 0x1, [@typed={0x8, 0xa3, 0x0, 0x0, @fd=r6}, @typed={0xa3, 0x3b, 0x0, 0x0, @binary="33c4c65fd6e7c7d5d96dc4d05a43b7727d778f477736bea19e60735e4f10912b1017399d3941a723f77f4638197b3efc63231f6acca0f4db4e1577724a8c60e15f9e22d0da599042a7829706058242dd41a694598ac6ee582f45e60c4ed92611cb907e5a7dd13c98ce9c7ffd0f4cc597aee022c5788ebba5842bfde1b782f30a2609dfb00bcddd211e7b467406c3aa7e7c6250ed7034a5ed42428e9460e6d6"}, @nested={0xf0, 0x12a, 0x0, 0x1, [@generic="a20d99c42fe56015db", @typed={0x8, 0x132, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x83}, @generic="352ef16ee221e5c6237ec29c647f5fbed51641220b1bf25fc5e7e7bdb16aa0cbfdca5f62ec4b499d2f5ef4bd396d6d9cc7d509fe8bd4e56b41ae90f31370777d33290e33d017d9c146078e5cae75dba8f7486be6a1cb9696146aaad282c3483d3ea85be3bd18124956ddbd7fdc1f07f8ff944604b58c332bde7652d207217ded2ed2c0cddc72f4a347ff15be15c07cc854bbca8c27b29d28c391", @nested={0x4, 0x43}, @generic="a62d9fb0639af03481c6b29ed4cbc2c843b349529cfd01b41e97267d878946011d83b2f50bb36777f6d0b95298ea0e76fa", @typed={0x6, 0x49, 0x0, 0x0, @str='\xff\xff'}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f0000000740)="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", 0xaf8) executing program 4: socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) select$auto(0x80a, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x8001, 0xffffffffffffffff, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) write$auto(0x3, 0x0, 0xfffffdef) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xe73, 0xbb}, 0x20, 0x0, &(0x7f0000000100)={0x6}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x22, 0xffffffffffffffff, 0x3) memfd_secret$auto(0x0) socket(0xa, 0x3, 0x100) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x22, 0x1, 0x8) mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x7, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0xa4) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=r2, 0x4, @old_prog_fd=r3}, 0xa3) mmap$auto(0x0, 0x20009, 0xb8, 0xeb1, 0x401, 0x8000) r4 = socket(0x2, 0x6, 0x0) setsockopt$auto(r4, 0x10d, 0x2, 0x0, 0x4) pread64$auto(r0, 0x0, 0x6, 0xffff) executing program 2: mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x900064b4, 0x2000000000000c37) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r5, r4, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000126584", 0x7) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)={0x6d, 0x6, 0x10001, 0x6146, 0x7, 0x6e0, 0x8000, 0x8000, 0x2}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0x8e, 0x3, 0x7fff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto_MADV_GUARD_REMOVE(0x9, 0x7, 0x67) io_uring_register$auto(0x2, 0x17, &(0x7f0000000100), 0x1) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000000)="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", 0xfa) executing program 1: mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20540, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x103200, 0x0) ioctl$auto(r0, 0x80044dfb, 0xffffffffffff9901) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) executing program 4: getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x2}}, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = socket(0x1e, 0x1, 0x0) r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) bpf$auto(0x10, &(0x7f00000000c0)=@link_detach={r1}, 0x40) connect$auto(r0, &(0x7f0000000000), 0x10) r2 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r2, &(0x7f0000000380)="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", 0x4e00) executing program 3: close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) r2 = socket(0x11, 0x80003, 0x300) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) connect$auto(0x3, &(0x7f0000000040), 0x55) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="01"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x84) executing program 1: mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x900064b4, 0x2000000000000c37) getpeername$auto(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x7) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r1, 0x400, 0x27f}, 0x4, 0x0, 0x0, 0x8) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000126584", 0x7) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)={0x8, 0x6, 0x10001, 0x2144, 0x4, 0x6e1, 0x7, 0x8000, 0x1}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x400402, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0xf766, 0xfffffffffffffffe, 0x8002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="130008000300", @ANYRES32, @ANYBLOB="0800610002"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001c00)=""/4111, 0x100f) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) executing program 4: openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xd4000, 0x0) executing program 3: r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/001/001\x00', 0xa901, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x0, 0x5}, 0xb, &(0x7f0000000080)={0x6, 0xf339}, &(0x7f00000000c0)={0xff}, 0x8) (async) ioctl$auto(r0, 0x4008550d, r0) executing program 2: socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) landlock_create_ruleset$auto(&(0x7f0000000000)={0x1da, 0x1, 0x9}, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000009}, 0x24004880) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (fail_nth: 21) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event1\x00', 0x8140, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x100000001, 0x15, 0x0, 0xa654) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(0x3, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x1000000001c, 0x5, 0x0, 0x6, 0x80001) setreuid$auto(0x0, 0xee00) socket(0xf, 0x3, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@link_create={@prog_fd=0x1, @target_fd=0xa, 0x3, 0x8, @tracing={0x4, 0xffffffff}}, 0xfbf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000280)={0x6, 0x2f, 0x4, 0x8, "dea771719b06ab6c79069170f1ff236dd746dc7533207e91102abd6928eba3bf"}) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2, 0x1000000004, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xcf, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x29) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000100)={0x30, 0xff, 0x0, @raw=0xfffff028}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x9dfefc5e47f5c72f}, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) executing program 4: mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e963b0004000000000800", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x19, @attach_prog_fd, 0x9, 0x7fffffffffffffff, 0x4, 0x2, 0x6}, 0x201) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x900000000000000, 0x9}, 0x7}, 0x3, 0x0) executing program 2: socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x1, 0x6, 0x18, 0x2, 0x8000) r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x2a, 0x2, 0x6) setresgid$auto(0xa05, 0x4, 0x0) access$auto(0x0, 0x3) connect$auto(0x3, 0xfffffffffffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) getsockopt$auto_SO_NOFCS(r0, 0x1, 0x2b, 0x0, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b58", 0x46) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r2, 0x7005, 0x0) readv$auto(r2, &(0x7f00000004c0)={0x0, 0x4}, 0x5) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x6, 0x10001) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write bisect: bisecting 31 programs bisect: split chunks (needed=false): <30> bisect: split chunk #0 of len 30 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 1, 30, 30, 20, 24, 30, 26, 11, 8, 10, 30, 1, 3, 8, 3, 24, 20, 10, 29, 30] detailed listing: executing program 3: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x17, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/watchdog\x00', 0x40141, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r3, &(0x7f0000000380)="8f85fae536edcca3f39f03aef3d45257d646cfbd34b3ccaa6b7752f9cb66a86f5422a8287fa60eb6caefee00c437de2f6209ac81b0191d40bbb9b618c6c7913dda97351421fa54ec8e1970a8f1e4ad94aea37105fa6f0144982e7e21fa0d5b8f8085e95449618d0066cd3d137241dc73fb8bb682209b121a7637dfe9f3899d92e20a18d36832c19ea9bc7a933ea14bc397ef05dea49c577658740dccc019ef18092c43c65da2438ba8a7cdb6be3360c01a7eebe7645822b831ac14887655bfdab8e6782e0e187896810602337bf45f7b4b34881474476442c26c67c8705631a86716f9ea1ad880f86216916777af3473782f95c40ca794e3addfbe1871caf3c435246ca94dfa8b24e58dba8271ae4ba8eaa1e566de5f6c5727508c3e803a00d4abd53f10a35dafef8447762ea87c9b96bafcc199670861725ac462533502014a0ee781f63f0ded4a261355ee0d47201a8e2acf8337ffe86c9402b2f0b0ab2c61c0616d2abfeba60d1641ef5607eecf79a110aa71ca7cec3d21f2918c52b22f756af516501e12e300e186bd077a37dcf447edaa6e6cf122e2c61c3f204b4b3147e94eff431e32dfebfb810f48d19ea031af5775097ecbc2a9e7a85de3cd07c79d4b1540d9fc310f6e95e0b157e36f4d455cf9bc8e30d3d42200cf31965c6bd65b3e6489e1c6e26cb39a526a1275a9e612a075907000d7f82e0f32a9f71b72561af958fa717db5c783091e25de23bcc291e809b339101e04dba36a9334b01dd8a364c0260f13b616535ed595781d32e530922e15b222d0db31f4208ec633672ffba109c3e1a5db8b295d5577aaa1797d875108c097ace2cfb671fbb428f4e51aaf9f890f057003a3dc0b98b0a5c5020303a78f1ea1dd8c961184683ababcaf5d249c4a392918d932b62c10f256c431e2917e1777c66a3b529eba989e83cf0b74b68c7d02cc69c0deb0fb36c43004f8e0dfeb5b53fab21f76771a7aa209552d2d21b698acbe6a0ccc287624bcd024aa7bc229029761750f4c86a574caa4e081012f5075cd25c1f2727ede7a637038a82e6d4b43432d7d1d58c428a71f2b2b64c2f03ee43cee134463a0d6dde9682b7c337098e5405fca9f6df92f1ea79c33e3967b776037c15289b485e2a69e0f29109923d7ecd49a5677f9d8c0c59e05cf4eda4d468b19308aa3c93e478688057568daa82b36cdd0883abf39091c6de874943eb2abbdb10e923806b5442b7d25d73f8d055085f0ee65dd5bcb2d98d630dfc5d6afd8e7a0c2fe8c7c1a58fb97e337584517205ee4a0327a4b8d7b8f632858c57bf178ff0db7d3588679b10f87accbef2503e05c013acc512d73b2ad2674dc315aa141588513e5582d8cb809d0aaf725a6cf31600a773b5649ee1b08b10e82531fe6b83f53b67358102e0c627b44dcbc75491dfbe43917e3d5389a1e9baebb69f018bc4b8761605c09544638f0f1c9cc967148b3eebbbad5ed4a4934c0b770f21a7f86d9bf3d91d90e02dae1758b0b8028f37434ef679527abb555133cfa7aff6cd78860ce9b7cc32b932b2ad713aeb6607bc2d7fc1a0882d1d870f17ea378cc82d40026a84b8550bdc8582efa91a5372526bb5ff7c22c9614aa1fd7602e43afe3f2c6769404a57b31b9a0c211f363c4f569deee99c293dabe703be7c1cb4a6653e620e43f8a7cbea3a9e2f33905a2d64cccf93997ba99a30ff77466387b91e59ec58df062723e6f2d390b6353eb76df34023060f9639f7b6ab1f5f2c48d5a554943196b8a22506d0d76fe0e5e753f64e59dfd2f05bdf1c5f7cac6abe64b4f517302c720c74dfaf594d06e5e4e9fa79b49db7310453a81d7d424cfe941451ef6ed4d09f57259c786fd646e0504e561ecb443811e3a344cdd60b377a486550c0db079694159b15a07a58a30b88375a2a86db71bcb8e4bb8d587543b4b56037871a79f5ffec50f5f6b23a7b6595aa920ab3c1bba408572ebf34aece700ca2e743bb29d87f320494be11cf650bde6893eddd3badf9a11eb7c9f54f17e3ec8e0423d123bf5f71e24655c1806f6c3ed3733250e7e1ceeb4c8c43bf7adc650dcae99e089f88aab4729f2a0585323f28b0fbb1febef4b7edfc750993a5bd1e29433b14d8f0cead123f8f01b96c3ac8dd5fbe59f6c6aa1fd0bbc9d9cfa89066236b73abb565d9d0be6d915783fa8d94d57b13a7555535ec85a939e2769477e95d22ad1023c8a34f9232b93ae648c2e9f93396ac5c51fae136caeb01174196c1f14863981d26d82d5d4ae8c5d0b6c16f3e862128156ce744d7b71942f3f3fa8cb673fde92c12903a22defa8c22acd8c2c3d1fcf0fe2ef534eba7fe54db56cdb7710cb9b3a2bc3f4797d174cf9f524ce5c8bd6af9d2f27d2765bb670f79671098db76188aab45c1bad358daea7337f1c56527697a2b8d412f11226a7373589f874676603b5fa0ea5c5393a19810450dbc1e181e5bf064557816e74bf064b772a8420cfbf9e11b166df8285428153da1de2d5f7f8a6b66dfb8493b6d2af8bd1ab6e58206238868d4ee187887a4046dd7d4067d88e87884f9735c6807d2470b30f12c9e997d93ae244c03a9903cc6074abd281490a05046dea2e5dc2a7fd60597ef22ced8eb408df8a3836bd1bbe877327cb9454eb1f1fd09d8892c5748427d217fd3e38b485841dee3c9a75662900ae9df66b0fdb276e353948ddaec67ce6f9b6cd715b16bc5debe4c6a78106e3b12372df5c72b7507dace12faecaf4acad6dc954b297e3601798692c27b5bd1681c7298d035a0af561d027aaf9ee6335fc6fcb7259cae83e4218d3d8017191cadeebe2531e871240d0b54f2a37252d636eeb50a6f056bd985d8d3978cbb955dbfd9b35110d5eac9258f14c77cbff259772d219e5c317350ae2ab6519a8f913ebb5829498a58b4670b7a37c03a94bc372ee0c2d59ee01b9177f12fadf5eb920d57793a59b21840882c8866124878a333d2832563f0532969a12ef3e0e264ddd3dc00de754ee118dfa1eaadc96f5d35916478dd55e82cf10417cbcdc8362a73eb32d01206fae78ae09d9e2e649cf399dd0707f4370213c1118b2a22e5d74705d2a0915984a07dc21dcdc0bff517457927bfc1e42876696f38abd0081b5dd3b270019c360b2b7c4193a2e8be6e49dbce4fd55299291cde1edcb1f64725599a2b08d03889b089228daca2d96668d57e6be4636ba62f31ebac13d03c52fcc41841e23873d47db7d9ff4ecbf2f03942e3bb1ec4d0729ed73960861ef749e810579a658178f286b5c5abaeddef59d773f4f304874aef7fbffa840407f5c68b63dc2cdc8c2c9ce0fdbd3c1bf5dd79368531ec06b4da217c56ae1221a342f65e4aaca0c861846142c37fdd84d070d73d2c4f9fc690f6b7b3f75504a13886d8b641e6f14a0f3c5ce3d371056989014f2a204dfccae673c13e9594651e8ec1da321e2d206fe441b51c5b92c4116869dd18b1f1b6dbd848808c53795902abb6644350e90151aee23e9d7db52b5135a5a89147b51bf4ed330c09fea6b499d571dc7805a04e5e4acf320fea0a8095c0058ad50035f1e9786ba560d64a8e537b5125c0d0e5ec9706aa89abf66d60a3feae4f4dd963630cb905091fa7360ff0b85285b2b4aeb5132b376942c477d8c6a31171e987068afa3c7e20181364499fd05b2cd9ee9d01a0f345701158311e911f6ce87a0db6b263cb41370be65996b1e4c964f5e22a9fabd0783b4252417737b0b80a630e3cf627f59312bd7446c07baf96d261ccbd8e4b2eca40421cbbbc102b7047035b0e2e202ac211fbc3ef028d6ab8bf3505c25b544410cd7346e62c91a6e4d422bac15102e309b5b56f750c75405c4abf7d9fd592eca6bdcf6d7c58fafd598fc3a0868a75da8c3826ca6ec9332d037deecbcb904ec50f3a06f17987522803d6697baf8d45663ef63423ab1c0bcff2fb621c0618a27ac1e045de98585c142b463d165a1d9c58fac2f01565a60c8406c9ad118be374a8ff10349be8c9a2d976b0df9e82ee9a75c4607610e3548abcea46cb83a21f5b22c63ea94aa100ec6936b3f2584a81750c9974a20d0444eecd6259ac924f98eae79fbefed5e59852b4e502b7d9ad39547c4317027bb2c7963efaa02acaa8a27790e819d8832fe5ae6af96e4666cfb215860e4a003ca0cfc405f1fbaaef87daba5cc7b30fa9000af86ad3ff3476e1c9003e759d24216907cfd49d432ecf6b89c287544c79354cf9ece61799770f1d667689946ab514721d9181c60fd1ba91d089b227601b97dfd842446c2dae3cb89676c2963ddf9b569816140235e496ac1f61972b5b41d6f7cc84659d0bbd53d2e1e0eb0b5e43cf37ab0402887ea71617abbc7e978840b530b6dbb23ca801523d80d0a7a5090edb5072af24b5eec68fdcd13959b7d44a80a189149047cf4701758b97c6d83704f3c8f47c4d9f0794e834e1981f96457b1f6da8438d1ca02310055c51eff0bf6624e5d640b53aa7b7569ec0648be595db8a54796aa7a0e427214592def5c1003d3cdcbfc60987d35ce36860a55b062fa2314b31df20fe6bf95191eba5fb83c399593fc1efc1cfd9e15f069d998869c7ff65a890b887df00515bc5837f55aa01c0c005c8a973b88956248d589540c9e67760d0824901d8d96adfe8c1fb5bc42323fa9a5d42faf3a12360881cda97800984b5b7f84f0ae834e0a5f7bf027b4ce0cac6e36d1ce0b04c894d3965ce97a8cabbb01832985d925c1f2d908d8638b6be52bf8e73d3df202b63dcf28c55dfe1bbfa8862a2aaa2fb1f6a660d1247785ffc07e5acad49078ba9eb5d1a280669b71e159d4c1518a793cc2def05c14a82e2965ad0b57a3c5a56b9c1bef379f55100254b4efe98bfb7661a363a45294638ec6bb6cededf3654fe6c67c930a0c595246a4ade3dc928fccd8a2ba774dd6d4edfb82ca68639ff417a9b0e48fa8cc335ba82a98ef19276d4c477a38e985b09ec9f6c43a23d3edfb33809caf9fe3d14677f7294e0a5b423a2e20ee015e692ee938aca13182094983b0d73c8e2ba931eb30ec3cc33f582b826fa28181529984b5034b43aedbd87dcdc5e06f44c3fba3656c7c61607c0d053247a274b96b3bfff62f25def3dddb9b46e6d6406b0fe2a3fbda8c2462297c0b84ffcde582c63694eec0db157511088b6acd8efb616857ea962c3a1c30fb22112d613390dbe3f0b0301b7faed4d48502791263ae2459ab23fd21b235b9b87813c68f2581c0f4fc411aa5a0ef09bc19dbd65a63c9a131b7e72fe1d26ec5847f36f7e24356ded54c8779dcc296e13c2ba16b804526250890cfd03944ac79a4ec9c71be1adbb03955c6cb3e510b78f554257b18c8bde325f0cd6ef727ae6982b97e670975f2b109cdd32d567acbf71a07bbdbb863ef258869bede4c32d0b6e49ffb5869706d56ade508ea286a82d0bf5e54487f0db871ea2c310a5182429d38e761fbbecaf62c9cfaf1fe06888862bc06a441bbdd05bc8ef48f0c94969bebfc016bb8d37c843ff72f97603d0cccce08fdacbabe1203ed0393e00dee592771f596f83aed1b995adc587e9f6538e68b66ccf01c3229c8647240d92abdc63ab057fd0adb9fd356882c310faf6906de2da0f6b506c9456250e8b95a3f3565487633e6c30b88510a2a73562f6c2ea251c8905810afb280f9288056b222ebbe1c6ba28eb61aa8422316821c38fdf99ff1b7d048b141dd5b36cbe7d8aad6cd9305fb6181509bddbb2c6135ba535c34b2949c57761fcd4dd0f286bc15272574fa28afd3ac9787b35a1d66735f3dabd9cefd38198493130219", 0x1000) open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20) sendfile$auto(0x6, 0x3, 0x0, 0xc01) r4 = socket(0x10, 0x2, 0x0) msgctl$auto_MSG_STAT_ANY(0x2, 0xd, &(0x7f00000013c0)={{0x30480000, 0x0, 0x0, 0x10000, 0x7, 0xef000000, 0x2}, &(0x7f0000000100)=0x2, &(0x7f0000001380)=0xd, 0x7, 0x7, 0x275c8726, 0x2, 0x4e54, 0x7, 0x7, 0x5, @raw=0xffff, @inferred=r0}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000029c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002980)={&(0x7f0000001440)={0x1520, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x2}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x1504, 0x3, 0x0, 0x1, [@nested={0x248, 0xea, 0x0, 0x1, [@generic="a1b7867726767b0a9d3ffd87ca98a10b8c012d618eab86b64a932bf24a81d26bf31cf9b67e332fde3c75f0ab07cfe8a4df2545b80a1a90b6347bdfddd32eb70a380b42ce67ca4a897596988b8d6cec0851fda9b07e471349afb7f03ffb8a1a6068b373601b211edf6468861fb22c3f59", @nested={0x4, 0xa2}, @generic="a7687f57fc370ed8cd97b81dd5a545bb46307a9aa1bcb3d79bd416eeaaa64e33c98e5749a5e6335711622152a68feb3e132d6046797e7931b4d3a621bcb95b276baf2938e2030266e3d00bf8958436ca64f0e59c0807f67d813a29c99e9c2fdb36e4ac3f43837187cc42176ff7a70ba6ae0078a52e8d60a38954116237c2bdc23b707900b9ee1b45f931a4334a50c426e4aa082e9711a27b7e677ad9117526fcbc6782e6372351f427965504770ecca32a1a63e46a8c15eb56e22fd189a8ae525f26ca762fdaf72347", @typed={0x8, 0x82, 0x0, 0x0, @uid=r5}, @generic="50b636473ab6c8db01a5d92fae26e1c3224b88e448e8ab61cbb178f578e03e52a558748462315fde1e28bef0758de6dae2aa56a2b9153e30ecdb733b11de55aabac39d080545bc1c3a980ae72da8f61002eef6020073106fb08121f2af6ff09bffc3d0efe0c5bafe9c79fd27cbff389a3243592cbab34301aea577c0126637a0343762707880d80aac26dc3dfc3ec485a937c407042e44acefdda8b4a9ac4863cb7d9a15d6a266f5e29c167e6eca0d84b65ef26c8eaf9602e08352216dac4067014793b7b4ff337155b1a8bb1798568a658ff2c44bb2b3fd2763bef7c4e1575b1f9465cb6e0ad1", @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @nested={0x4, 0xec}, @nested={0x4, 0x5a}, @typed={0x7, 0xd4, 0x0, 0x0, @str='!H\x00'}]}, @generic="fe7a064cc1862585fc6ad6a5b5d8eec95c3beb51bb076553145e2a49dad1f88c134623654ac058ac20a66d14feda415304fdfacdc9b0fe077f70302cc911ac9f8cb8059fefb2730c878f12074fbd610a4328fea0712ec5fbd6ccae3e1ceb05bf70e1e739121f25bc7a309415accb28cfd20a86462ad5d52724b52c81dd3fb9d3eb9a0f3690e46bb4c0a4306adb1974c286c631e153359a9aa2b5d49b5f393fb033e379ebe4db1a5e258e4955718188", @nested={0x113e, 0x13e, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="45413876a7600ca2fe1fca9d20ee3043660bc8dbea5020d5f61e386893ea2eac9c0e75c11844368870eac1ea65f462bf2b787b645bb7debc301e41765490d5261bb9727ebd22da5ce22cbf22dfc369be4acc3a437d771ca98bd421392e850a6598659c358d31110fe368e124dcdadce62c34ab20af8dd3499064b819d72bdc5e178130e6de4157cc800bf244662ddb89c8349d8c874b1070527886c37d4dd8e032acf3c58fbddae8598336d9d1c805c1d9ba372f3d3bd8c41e27b59f924df03bf4de497f262be42e85af84f525d9b6eec0ad92301aed68ddf4cf6f88df61", @nested={0x4, 0xd0}, @nested={0x4, 0xe6}, @nested={0x4, 0x5}, @generic="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", @typed={0x45, 0x31, 0x0, 0x0, @str='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00'}]}, @typed={0xc, 0x26, 0x0, 0x0, @u64=0x50355da5}, @generic="9a6fb948ad6774bb797650583b59992c438acdef00083b4d4b8b80de66f17826ad3904a4291deb29b9acc94da6c6d8b31b1f390e78e7906b72f7ab11d3a9adba04a32eb360777dc561fe2cfd309fe2b0fb3b88a5d0e99f0e2f0af69030a99d8be51dc071377526846979048daded4b895cf76566da234769200f6a26c990bf4cc2c459dc4203a3fa4c7f229086b1d80a8ecfaf90fe2fa35dff47f80e6f3e4a67c01a5849a2092a4503f55aceae49d0c0cfe309ab371b0bd9d2247d64bd"]}]}, 0x1520}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x3, 0x1ffdf, 0x7, 0x200003, 0x209b, 0x1000a121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x280, 0x100000000, 0x2, 0x7, 0x2100, 0x220, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x100000001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffbff5, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x891, 0x7, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0x4, 0x8008, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) executing program 2: openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (fail_nth: 23) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x4000000000002) r1 = socket(0x15, 0xa, 0x0) r2 = socket(0x10, 0x2, 0xc) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) capset$auto(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000000c0)={0x0, 0x62, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00", @ANYBLOB='F8'], 0x24}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x20, r13, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth1_virt_wifi\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x26c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x945}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd154}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x100000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x26c}}, 0x14) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40080, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0, @ANYRES32], 0x18}}, 0x80) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim5/max_vfs\x00', 0x6000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x50280, 0x0) executing program 2: openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x111000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) write$auto(r0, &(0x7f0000000000)=';!+^', 0xc9c8) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x82002, 0x0) socket(0x2, 0x3, 0xfffffff1) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xebf, 0xffffffffffffffff, 0x8001) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000001c0)="b5768bee3f3c74cf468c744fef25f33bb13925b3fb5af7defbb889827f723862f3a243f3119444ad9e80ec153ea68d9608ec19fae313dc2439665df7750b8d468f7d04bdcab432d1eb9c618ff5") r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x80045515, 0x1) ioctl$auto_TIOCSTI2(r3, 0x545c, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r6) sendmsg$auto_CTRL_CMD_GETFAMILY(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000054) r7 = syz_genetlink_get_family_id$auto_thermal(0x0, r6) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r7], 0x1c}}, 0x8084) socket(0xa, 0x800, 0x84) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), 0xffffffffffffffff) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2, 0x1000000004, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xcf, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x29) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000100)={0x30, 0xff, 0x0, @raw=0xfffff028}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x9dfefc5e47f5c72f}, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\x83\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)\x17\xbby\xe5\xc4w\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00'/192, 0x104, 0x0) statfs$auto(&(0x7f0000000180)='}[,&*}\x00', &(0x7f00000001c0)={0x8, 0x2, 0x9, 0x3, 0x4, 0x7ff, 0x8000000000000001, {[0x6, 0x3]}, 0x9a, 0x7, 0x0, [0x8, 0x9, 0x6269, 0xfffffffffffffffa]}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000fc39ad872c00000008000300", @ANYRES32=r2], 0x40}}, 0x4000000) r3 = prctl$auto_PR_SCHED_CORE_CREATE(0x6, 0x1, 0xffffffffffffffff, 0x5, 0x7ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r4) ioperm$auto(0x3, 0x38c, 0x9) modify_ldt$auto(0xf7, 0x0, 0x8) sendmsg$auto_TIPC_NL_MEDIA_SET(r4, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/key\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x20) socket(0xa, 0x2, 0x73) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={"ab90603571d1642a57ff2f7310e874b7d2e4ca80cce1e244cf56e45ec20b3d6c", 0x7, 0x3, 0x8, 0x800, 0x7, 0xffffffffffffffff}) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) fcntl$auto(0x3, 0x400, 0x1) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7fff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x1e8, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NAME_TABLE={0x34, 0x8, 0x0, 0x1, [@typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0xa, 0x56, 0x0, 0x0, @str='[.\xe8%+\x00'}, @generic="b96cc46df4d3317d", @nested={0x8, 0x9c, 0x0, 0x1, [@nested={0x4, 0x9e}]}]}, @TIPC_NLA_SOCK={0x1a0, 0x2, 0x0, 0x1, [@typed={0x8, 0xa3, 0x0, 0x0, @fd=r6}, @typed={0xa3, 0x3b, 0x0, 0x0, @binary="33c4c65fd6e7c7d5d96dc4d05a43b7727d778f477736bea19e60735e4f10912b1017399d3941a723f77f4638197b3efc63231f6acca0f4db4e1577724a8c60e15f9e22d0da599042a7829706058242dd41a694598ac6ee582f45e60c4ed92611cb907e5a7dd13c98ce9c7ffd0f4cc597aee022c5788ebba5842bfde1b782f30a2609dfb00bcddd211e7b467406c3aa7e7c6250ed7034a5ed42428e9460e6d6"}, @nested={0xf0, 0x12a, 0x0, 0x1, [@generic="a20d99c42fe56015db", @typed={0x8, 0x132, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x83}, @generic="352ef16ee221e5c6237ec29c647f5fbed51641220b1bf25fc5e7e7bdb16aa0cbfdca5f62ec4b499d2f5ef4bd396d6d9cc7d509fe8bd4e56b41ae90f31370777d33290e33d017d9c146078e5cae75dba8f7486be6a1cb9696146aaad282c3483d3ea85be3bd18124956ddbd7fdc1f07f8ff944604b58c332bde7652d207217ded2ed2c0cddc72f4a347ff15be15c07cc854bbca8c27b29d28c391", @nested={0x4, 0x43}, @generic="a62d9fb0639af03481c6b29ed4cbc2c843b349529cfd01b41e97267d878946011d83b2f50bb36777f6d0b95298ea0e76fa", @typed={0x6, 0x49, 0x0, 0x0, @str='\xff\xff'}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f0000000740)="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", 0xaf8) executing program 4: socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) select$auto(0x80a, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x8001, 0xffffffffffffffff, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) write$auto(0x3, 0x0, 0xfffffdef) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xe73, 0xbb}, 0x20, 0x0, &(0x7f0000000100)={0x6}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x22, 0xffffffffffffffff, 0x3) memfd_secret$auto(0x0) socket(0xa, 0x3, 0x100) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x22, 0x1, 0x8) mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x7, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0xa4) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=r2, 0x4, @old_prog_fd=r3}, 0xa3) mmap$auto(0x0, 0x20009, 0xb8, 0xeb1, 0x401, 0x8000) r4 = socket(0x2, 0x6, 0x0) setsockopt$auto(r4, 0x10d, 0x2, 0x0, 0x4) pread64$auto(r0, 0x0, 0x6, 0xffff) executing program 2: mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x900064b4, 0x2000000000000c37) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r5, r4, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000126584", 0x7) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)={0x6d, 0x6, 0x10001, 0x6146, 0x7, 0x6e0, 0x8000, 0x8000, 0x2}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0x8e, 0x3, 0x7fff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto_MADV_GUARD_REMOVE(0x9, 0x7, 0x67) io_uring_register$auto(0x2, 0x17, &(0x7f0000000100), 0x1) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000000)="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", 0xfa) executing program 1: mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20540, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x103200, 0x0) ioctl$auto(r0, 0x80044dfb, 0xffffffffffff9901) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) executing program 4: getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x2}}, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = socket(0x1e, 0x1, 0x0) r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) bpf$auto(0x10, &(0x7f00000000c0)=@link_detach={r1}, 0x40) connect$auto(r0, &(0x7f0000000000), 0x10) r2 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r2, &(0x7f0000000380)="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", 0x4e00) executing program 3: close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) r2 = socket(0x11, 0x80003, 0x300) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) connect$auto(0x3, &(0x7f0000000040), 0x55) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="01"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x84) executing program 1: mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x900064b4, 0x2000000000000c37) getpeername$auto(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x7) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r1, 0x400, 0x27f}, 0x4, 0x0, 0x0, 0x8) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000126584", 0x7) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)={0x8, 0x6, 0x10001, 0x2144, 0x4, 0x6e1, 0x7, 0x8000, 0x1}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x400402, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0xf766, 0xfffffffffffffffe, 0x8002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="130008000300", @ANYRES32, @ANYBLOB="0800610002"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001c00)=""/4111, 0x100f) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) executing program 4: openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xd4000, 0x0) executing program 3: r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/001/001\x00', 0xa901, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x0, 0x5}, 0xb, &(0x7f0000000080)={0x6, 0xf339}, &(0x7f00000000c0)={0xff}, 0x8) (async) ioctl$auto(r0, 0x4008550d, r0) executing program 2: socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) landlock_create_ruleset$auto(&(0x7f0000000000)={0x1da, 0x1, 0x9}, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000009}, 0x24004880) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (fail_nth: 21) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event1\x00', 0x8140, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x100000001, 0x15, 0x0, 0xa654) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(0x3, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x1000000001c, 0x5, 0x0, 0x6, 0x80001) setreuid$auto(0x0, 0xee00) socket(0xf, 0x3, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@link_create={@prog_fd=0x1, @target_fd=0xa, 0x3, 0x8, @tracing={0x4, 0xffffffff}}, 0xfbf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000280)={0x6, 0x2f, 0x4, 0x8, "dea771719b06ab6c79069170f1ff236dd746dc7533207e91102abd6928eba3bf"}) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2, 0x1000000004, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xcf, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x29) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000100)={0x30, 0xff, 0x0, @raw=0xfffff028}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x9dfefc5e47f5c72f}, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) executing program 4: mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e963b0004000000000800", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x19, @attach_prog_fd, 0x9, 0x7fffffffffffffff, 0x4, 0x2, 0x6}, 0x201) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x900000000000000, 0x9}, 0x7}, 0x3, 0x0) executing program 2: socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x1, 0x6, 0x18, 0x2, 0x8000) r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x2a, 0x2, 0x6) setresgid$auto(0xa05, 0x4, 0x0) access$auto(0x0, 0x3) connect$auto(0x3, 0xfffffffffffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) getsockopt$auto_SO_NOFCS(r0, 0x1, 0x2b, 0x0, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b58", 0x46) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r2, 0x7005, 0x0) readv$auto(r2, &(0x7f00000004c0)={0x0, 0x4}, 0x5) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x6, 0x10001) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 11, 2, 30, 10, 16, 16, 3, 30, 26, 10, 30, 1, 3, 8, 3, 24, 20, 10, 29, 30] detailed listing: executing program 0: openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x111000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) write$auto(r0, &(0x7f0000000000)=';!+^', 0xc9c8) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x82002, 0x0) r1 = socket(0x2, 0x3, 0xfffffff1) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xebf, 0xffffffffffffffff, 0xfffffffffffffe00) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f00000001c0)="b5768bee3f3c74cf468c744fef25f33bb13925b3fb5af7defbb889827f723862f3a243f3119444ad9e80ec153ea68d9608ec19fae313dc2439665df7750b8d468f7d04bdcab432d1eb9c618ff5") r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) recvfrom$auto(r1, &(0x7f0000000140)="b2392e884973a78378acef81e6ebbca7066c8c56b38fb2bbdb698ef8f3ab1823fd69ca81fee6b6f925561db8fffa53", 0x1000, 0x1, &(0x7f0000000240)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, &(0x7f0000000280)=0x4) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r5, 0x80045515, 0x1) ioctl$auto_TIOCSTI2(r4, 0x545c, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r7) sendmsg$auto_CTRL_CMD_GETFAMILY(r7, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000054) r8 = syz_genetlink_get_family_id$auto_thermal(0x0, r7) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES64=r8], 0x1c}}, 0x8084) socket(0xa, 0x800, 0x84) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), 0xffffffffffffffff) executing program 0: mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20540, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x103200, 0x0) ioctl$auto(r0, 0x80044dfb, 0xffffffffffff9901) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) executing program 0: r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101800, 0x0) pread64$auto(r0, 0x0, 0x6, 0xffff) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c40)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) bpf$auto(0xb, 0x0, 0x3) r0 = socketcall$auto(0xfffffffc, &(0x7f0000000c00)=0x7ff) ftruncate$auto(r0, 0x6eb) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event1\x00', 0x40002, 0x0) ioctl$auto_EVIOCGKEYCODE(r1, 0x80084504, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$auto(r1, &(0x7f0000000a80)='nl80211\x00', 0xffffffff) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r2, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="32090200", @ANYRES16=r3, @ANYBLOB="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"], 0x914}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0xc008af12, r4) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) ioctl$auto(r6, 0x4008556c, 0x81) executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) socket(0x11, 0x80003, 0x300) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000040), 0x55) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="01"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x84) executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 32: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 1: openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x10000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8) (rerun: 32) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x15) read$auto(0xca, 0x0, 0x200) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000140)=0x47ee) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xb, 0xf, 0xffffffffffffffff, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x245c]}, 0x0, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3f, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0) getpgid$auto(0x0) getpgid$auto(0x0) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) io_setup$auto(0x1, 0x0) unshare$auto(0x40000080) executing program 3: mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x900064b4, 0x2000000000000c37) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r5, r4, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000126584", 0x7) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)={0x6d, 0x6, 0x10001, 0x6146, 0x7, 0x6e0, 0x8000, 0x8000, 0x2}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0x8e, 0x3, 0x7fff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto_MADV_GUARD_REMOVE(0x9, 0x7, 0x67) io_uring_register$auto(0x2, 0x17, &(0x7f0000000100), 0x1) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000000)="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", 0xfa) executing program 3: close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) r2 = socket(0x11, 0x80003, 0x300) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) connect$auto(0x3, &(0x7f0000000040), 0x55) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="01"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x84) executing program 1: mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x900064b4, 0x2000000000000c37) getpeername$auto(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x7) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r1, 0x400, 0x27f}, 0x4, 0x0, 0x0, 0x8) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000126584", 0x7) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)={0x8, 0x6, 0x10001, 0x2144, 0x4, 0x6e1, 0x7, 0x8000, 0x1}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x400402, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0xf766, 0xfffffffffffffffe, 0x8002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="130008000300", @ANYRES32, @ANYBLOB="0800610002"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001c00)=""/4111, 0x100f) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) executing program 4: openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xd4000, 0x0) executing program 3: r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/001/001\x00', 0xa901, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x0, 0x5}, 0xb, &(0x7f0000000080)={0x6, 0xf339}, &(0x7f00000000c0)={0xff}, 0x8) (async) ioctl$auto(r0, 0x4008550d, r0) executing program 2: socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) landlock_create_ruleset$auto(&(0x7f0000000000)={0x1da, 0x1, 0x9}, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000009}, 0x24004880) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (fail_nth: 21) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event1\x00', 0x8140, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x100000001, 0x15, 0x0, 0xa654) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(0x3, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x1000000001c, 0x5, 0x0, 0x6, 0x80001) setreuid$auto(0x0, 0xee00) socket(0xf, 0x3, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@link_create={@prog_fd=0x1, @target_fd=0xa, 0x3, 0x8, @tracing={0x4, 0xffffffff}}, 0xfbf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000280)={0x6, 0x2f, 0x4, 0x8, "dea771719b06ab6c79069170f1ff236dd746dc7533207e91102abd6928eba3bf"}) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2, 0x1000000004, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xcf, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x29) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000100)={0x30, 0xff, 0x0, @raw=0xfffff028}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x9dfefc5e47f5c72f}, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) executing program 4: mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e963b0004000000000800", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x19, @attach_prog_fd, 0x9, 0x7fffffffffffffff, 0x4, 0x2, 0x6}, 0x201) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x900000000000000, 0x9}, 0x7}, 0x3, 0x0) executing program 2: socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x1, 0x6, 0x18, 0x2, 0x8000) r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x2a, 0x2, 0x6) setresgid$auto(0xa05, 0x4, 0x0) access$auto(0x0, 0x3) connect$auto(0x3, 0xfffffffffffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) getsockopt$auto_SO_NOFCS(r0, 0x1, 0x2b, 0x0, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b58", 0x46) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r2, 0x7005, 0x0) readv$auto(r2, &(0x7f00000004c0)={0x0, 0x4}, 0x5) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x6, 0x10001) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 11, 2, 30, 10, 16, 16, 3, 30, 26, 30] detailed listing: executing program 0: openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x111000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) write$auto(r0, &(0x7f0000000000)=';!+^', 0xc9c8) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x82002, 0x0) r1 = socket(0x2, 0x3, 0xfffffff1) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xebf, 0xffffffffffffffff, 0xfffffffffffffe00) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f00000001c0)="b5768bee3f3c74cf468c744fef25f33bb13925b3fb5af7defbb889827f723862f3a243f3119444ad9e80ec153ea68d9608ec19fae313dc2439665df7750b8d468f7d04bdcab432d1eb9c618ff5") r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) recvfrom$auto(r1, &(0x7f0000000140)="b2392e884973a78378acef81e6ebbca7066c8c56b38fb2bbdb698ef8f3ab1823fd69ca81fee6b6f925561db8fffa53", 0x1000, 0x1, &(0x7f0000000240)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, &(0x7f0000000280)=0x4) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r5, 0x80045515, 0x1) ioctl$auto_TIOCSTI2(r4, 0x545c, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r7) sendmsg$auto_CTRL_CMD_GETFAMILY(r7, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000054) r8 = syz_genetlink_get_family_id$auto_thermal(0x0, r7) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES64=r8], 0x1c}}, 0x8084) socket(0xa, 0x800, 0x84) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), 0xffffffffffffffff) executing program 0: mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20540, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x103200, 0x0) ioctl$auto(r0, 0x80044dfb, 0xffffffffffff9901) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) executing program 0: r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101800, 0x0) pread64$auto(r0, 0x0, 0x6, 0xffff) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c40)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) bpf$auto(0xb, 0x0, 0x3) r0 = socketcall$auto(0xfffffffc, &(0x7f0000000c00)=0x7ff) ftruncate$auto(r0, 0x6eb) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event1\x00', 0x40002, 0x0) ioctl$auto_EVIOCGKEYCODE(r1, 0x80084504, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$auto(r1, &(0x7f0000000a80)='nl80211\x00', 0xffffffff) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r2, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="32090200", @ANYRES16=r3, @ANYBLOB="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"], 0x914}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0xc008af12, r4) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) ioctl$auto(r6, 0x4008556c, 0x81) executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) socket(0x11, 0x80003, 0x300) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000040), 0x55) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="01"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x84) executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 32: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 1: openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x10000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8) (rerun: 32) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x15) read$auto(0xca, 0x0, 0x200) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000140)=0x47ee) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xb, 0xf, 0xffffffffffffffff, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x245c]}, 0x0, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3f, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0) getpgid$auto(0x0) getpgid$auto(0x0) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) io_setup$auto(0x1, 0x0) unshare$auto(0x40000080) executing program 3: mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x900064b4, 0x2000000000000c37) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r5, r4, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000126584", 0x7) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)={0x6d, 0x6, 0x10001, 0x6146, 0x7, 0x6e0, 0x8000, 0x8000, 0x2}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0x8e, 0x3, 0x7fff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto_MADV_GUARD_REMOVE(0x9, 0x7, 0x67) io_uring_register$auto(0x2, 0x17, &(0x7f0000000100), 0x1) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000000)="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", 0xfa) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write bisect: the chunk can be dropped bisect: split chunks (needed=true): <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 16, 3, 30, 26, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 32: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 1: openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x10000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8) (rerun: 32) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x15) read$auto(0xca, 0x0, 0x200) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000140)=0x47ee) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xb, 0xf, 0xffffffffffffffff, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x245c]}, 0x0, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3f, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0) getpgid$auto(0x0) getpgid$auto(0x0) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) io_setup$auto(0x1, 0x0) unshare$auto(0x40000080) executing program 3: mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x900064b4, 0x2000000000000c37) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r5, r4, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000126584", 0x7) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)={0x6d, 0x6, 0x10001, 0x6146, 0x7, 0x6e0, 0x8000, 0x8000, 0x2}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0x8e, 0x3, 0x7fff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto_MADV_GUARD_REMOVE(0x9, 0x7, 0x67) io_uring_register$auto(0x2, 0x17, &(0x7f0000000100), 0x1) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000000)="d765327926e3ac60522934c8079d978b2f5372bef04aceeb07a01352ee4629542ef90e5e20d788637132d1046c3297dbeec2c4cf8dbf291cb3187bbbdad624f16eae737df773ff32ee334af6e4c54de9987bd434312457675f73c9dd86b6a6265abbf361685cad1916b67a21b93b5a40199a7ec8cee0d166f2c1406bf01756ee37a42aaa6dad7973e8c6d917e884ea6f54c173d42ebd77b7ab4f1286095870688c4d9811ce6116058ae4d499ef1fb893db43c1209e68aa5a4d78ffc492f3d6378e26842cb4cb7c199266789c103589b7af4813c309eca7b39d0fee1987b8390eb52ad1c099c389cdbe94804c9837bcbb4d720efdc39a3f15c6c0", 0xfa) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 26, 30] detailed listing: executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x15) read$auto(0xca, 0x0, 0x200) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000140)=0x47ee) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xb, 0xf, 0xffffffffffffffff, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x245c]}, 0x0, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3f, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0) getpgid$auto(0x0) getpgid$auto(0x0) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) io_setup$auto(0x1, 0x0) unshare$auto(0x40000080) executing program 3: mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x900064b4, 0x2000000000000c37) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r5, r4, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000126584", 0x7) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)={0x6d, 0x6, 0x10001, 0x6146, 0x7, 0x6e0, 0x8000, 0x8000, 0x2}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0x8e, 0x3, 0x7fff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto_MADV_GUARD_REMOVE(0x9, 0x7, 0x67) io_uring_register$auto(0x2, 0x17, &(0x7f0000000100), 0x1) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000000)="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", 0xfa) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 16, 3, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 32: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 1: openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x10000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8) (rerun: 32) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write bisect: the chunk can be dropped bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 30] detailed listing: executing program 1: openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x10000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8) (rerun: 32) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 16, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 32: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 30] detailed listing: executing program 32: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 32: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0x2) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) io_uring_setup$auto(0xcb2, 0x0) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r3) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r1, 0x0) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) io_uring_setup$auto(0x6, 0x0) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 30] detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 30] detailed listing: executing program 0: executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0x6, &(0x7f00000000c0)='/dev/vcsa\x00', &(0x7f00000001c0)="08dce3120ae8397192a7aeb863ffb85915ac5cc2ba496552190c043eca4db3b219297890ea79530a5704fd991d7301ba3b9c98e09acc925c6f8a9a6891b846b99edcb078006514349e7a05a61b07cfe4620fd0a38c4134c0603a282e0d9e49b2", 0x40) program crashed: KASAN: slab-use-after-free Read in force_devcd_write minimized 16 calls -> 0 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 29] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0c9107a81d0028bd7000fddbdf25030000001800038014003f00fe88000000000000000000000000f501040003800400df80861f932576d9522700d10c690d09cb26c1990a41a2f99e0fda1440849f3f637f0212ad14c0c4d6615cba7c64a1da41a2deda7212b5221e84ae08df3cf41f53907373fefc2422"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 28] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioprio_set$auto(0x476, r7, 0x101) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 27] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 26] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) socket$nl_generic(0x10, 0x3, 0x10) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 25] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r5, 0x4b72, r6) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000140)=""/92, 0x5c) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 24] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(r4, 0x4b72, r5) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 23] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 22] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) socket$nl_generic(0x10, 0x3, 0x10) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 21] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 20] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 19] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 18] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 17] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 16] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 15] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 14] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7}, 0x36, 0x0, 0x0, 0x8) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 13] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 12] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 11] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r3, 0x560a, 0x7) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 10] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 9] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r1, 0x0, 0xe) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 5] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 4] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 4] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 3] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) write$auto(0xffffffffffffffff, 0x0, 0xe) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 3] detailed listing: executing program 32: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2] detailed listing: executing program 32: executing program 0: r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program did not crash minimized 30 calls -> 3 calls testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: slab-use-after-free Read in force_devcd_write bisect: concatenation succeeded found reproducer with 3 syscalls minimizing guilty program testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0xe) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(r0, 0x0, 0xe) program did not crash extracting C reproducer testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program did not crash simplifying guilty program options testing program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: slab-use-after-free Read in force_devcd_write extracting C reproducer testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program did not crash testing program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: slab-use-after-free Read in force_devcd_write extracting C reproducer testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program did not crash reproducing took 2h47m34.396640385s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327 Read of size 8 at addr ffff888029c39800 by task syz.0.616/6644 CPU: 1 UID: 0 PID: 6644 Comm: syz.0.616 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xc3/0x620 mm/kasan/report.c:489 kasan_report+0xd9/0x110 mm/kasan/report.c:602 force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:398 vfs_write+0x24c/0x1150 fs/read_write.c:677 ksys_write+0x12b/0x250 fs/read_write.c:731 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb5ad98cde9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd111c8e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fb5adba5fa0 RCX: 00007fb5ad98cde9 RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007fb5ada0e2a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fb5adba5fa0 R14: 00007fb5adba5fa0 R15: 0000000000000003 Allocated by task 5957: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394 kmalloc_noprof include/linux/slab.h:901 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634 misc_open+0x35a/0x420 drivers/char/misc.c:179 chrdev_open+0x237/0x6a0 fs/char_dev.c:414 do_dentry_open+0x735/0x1c40 fs/open.c:956 vfs_open+0x82/0x3f0 fs/open.c:1086 do_open fs/namei.c:3830 [inline] path_openat+0x1e88/0x2d80 fs/namei.c:3989 do_filp_open+0x20c/0x470 fs/namei.c:4016 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428 do_sys_open fs/open.c:1443 [inline] __do_sys_openat fs/open.c:1459 [inline] __se_sys_openat fs/open.c:1454 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1454 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 5957: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2353 [inline] slab_free mm/slub.c:4609 [inline] kfree+0x2c4/0x4d0 mm/slub.c:4757 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670 __fput+0x3ff/0xb70 fs/file_table.c:464 task_work_run+0x14e/0x250 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0xad8/0x2d70 kernel/exit.c:938 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087 get_signal+0x2576/0x2610 kernel/signal.c:3036 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff888029c39800 which belongs to the cache kmalloc-1k of size 1024 The buggy address is located 0 bytes inside of freed 1024-byte region [ffff888029c39800, ffff888029c39c00) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29c38 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000003 ffffea0000a70e01 ffffffffffffffff 0000000000000000 head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5634, tgid 5634 (dhcpcd), ts 44612087255, free_ts 44608588668 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551 prep_new_page mm/page_alloc.c:1559 [inline] get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4739 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270 alloc_slab_page mm/slub.c:2423 [inline] allocate_slab mm/slub.c:2587 [inline] new_slab+0x23d/0x330 mm/slub.c:2640 ___slab_alloc+0xbfa/0x1600 mm/slub.c:3826 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916 __slab_alloc_node mm/slub.c:3991 [inline] slab_alloc_node mm/slub.c:4152 [inline] __do_kmalloc_node mm/slub.c:4293 [inline] __kmalloc_noprof+0x2de/0x4f0 mm/slub.c:4306 kmalloc_noprof include/linux/slab.h:905 [inline] load_elf_phdrs+0x103/0x210 fs/binfmt_elf.c:532 load_elf_binary+0x1518/0x4ff0 fs/binfmt_elf.c:961 search_binary_handler fs/exec.c:1775 [inline] exec_binprm fs/exec.c:1807 [inline] bprm_execve fs/exec.c:1859 [inline] bprm_execve+0x8dd/0x16d0 fs/exec.c:1835 do_execveat_common.isra.0+0x4a2/0x610 fs/exec.c:1966 do_execve fs/exec.c:2040 [inline] __do_sys_execve fs/exec.c:2116 [inline] __se_sys_execve fs/exec.c:2111 [inline] __x64_sys_execve+0x8c/0xb0 fs/exec.c:2111 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f page last free pid 5503 tgid 5503 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660 __put_partials+0x14c/0x170 mm/slub.c:3153 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4115 [inline] slab_alloc_node mm/slub.c:4164 [inline] kmem_cache_alloc_node_noprof+0x1ca/0x3b0 mm/slub.c:4216 __alloc_skb+0x2b3/0x380 net/core/skbuff.c:668 alloc_skb include/linux/skbuff.h:1331 [inline] alloc_skb_with_frags+0xe4/0x850 net/core/skbuff.c:6612 sock_alloc_send_pskb+0x7f1/0x980 net/core/sock.c:2897 unix_dgram_sendmsg+0x41f/0x17e0 net/unix/af_unix.c:2017 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:733 [inline] sock_write_iter+0x4fe/0x5b0 net/socket.c:1137 do_iter_readv_writev+0x655/0x950 fs/read_write.c:820 vfs_writev+0x363/0xdd0 fs/read_write.c:1050 do_writev+0x297/0x340 fs/read_write.c:1096 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Memory state around the buggy address: ffff888029c39700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff888029c39780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff888029c39800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff888029c39880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff888029c39900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327 Read of size 8 at addr ffff888029c39800 by task syz.0.616/6644 CPU: 1 UID: 0 PID: 6644 Comm: syz.0.616 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xc3/0x620 mm/kasan/report.c:489 kasan_report+0xd9/0x110 mm/kasan/report.c:602 force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:398 vfs_write+0x24c/0x1150 fs/read_write.c:677 ksys_write+0x12b/0x250 fs/read_write.c:731 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb5ad98cde9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd111c8e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fb5adba5fa0 RCX: 00007fb5ad98cde9 RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007fb5ada0e2a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fb5adba5fa0 R14: 00007fb5adba5fa0 R15: 0000000000000003 Allocated by task 5957: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394 kmalloc_noprof include/linux/slab.h:901 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634 misc_open+0x35a/0x420 drivers/char/misc.c:179 chrdev_open+0x237/0x6a0 fs/char_dev.c:414 do_dentry_open+0x735/0x1c40 fs/open.c:956 vfs_open+0x82/0x3f0 fs/open.c:1086 do_open fs/namei.c:3830 [inline] path_openat+0x1e88/0x2d80 fs/namei.c:3989 do_filp_open+0x20c/0x470 fs/namei.c:4016 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428 do_sys_open fs/open.c:1443 [inline] __do_sys_openat fs/open.c:1459 [inline] __se_sys_openat fs/open.c:1454 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1454 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 5957: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2353 [inline] slab_free mm/slub.c:4609 [inline] kfree+0x2c4/0x4d0 mm/slub.c:4757 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670 __fput+0x3ff/0xb70 fs/file_table.c:464 task_work_run+0x14e/0x250 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0xad8/0x2d70 kernel/exit.c:938 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087 get_signal+0x2576/0x2610 kernel/signal.c:3036 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff888029c39800 which belongs to the cache kmalloc-1k of size 1024 The buggy address is located 0 bytes inside of freed 1024-byte region [ffff888029c39800, ffff888029c39c00) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29c38 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000003 ffffea0000a70e01 ffffffffffffffff 0000000000000000 head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5634, tgid 5634 (dhcpcd), ts 44612087255, free_ts 44608588668 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551 prep_new_page mm/page_alloc.c:1559 [inline] get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4739 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270 alloc_slab_page mm/slub.c:2423 [inline] allocate_slab mm/slub.c:2587 [inline] new_slab+0x23d/0x330 mm/slub.c:2640 ___slab_alloc+0xbfa/0x1600 mm/slub.c:3826 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916 __slab_alloc_node mm/slub.c:3991 [inline] slab_alloc_node mm/slub.c:4152 [inline] __do_kmalloc_node mm/slub.c:4293 [inline] __kmalloc_noprof+0x2de/0x4f0 mm/slub.c:4306 kmalloc_noprof include/linux/slab.h:905 [inline] load_elf_phdrs+0x103/0x210 fs/binfmt_elf.c:532 load_elf_binary+0x1518/0x4ff0 fs/binfmt_elf.c:961 search_binary_handler fs/exec.c:1775 [inline] exec_binprm fs/exec.c:1807 [inline] bprm_execve fs/exec.c:1859 [inline] bprm_execve+0x8dd/0x16d0 fs/exec.c:1835 do_execveat_common.isra.0+0x4a2/0x610 fs/exec.c:1966 do_execve fs/exec.c:2040 [inline] __do_sys_execve fs/exec.c:2116 [inline] __se_sys_execve fs/exec.c:2111 [inline] __x64_sys_execve+0x8c/0xb0 fs/exec.c:2111 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f page last free pid 5503 tgid 5503 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660 __put_partials+0x14c/0x170 mm/slub.c:3153 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4115 [inline] slab_alloc_node mm/slub.c:4164 [inline] kmem_cache_alloc_node_noprof+0x1ca/0x3b0 mm/slub.c:4216 __alloc_skb+0x2b3/0x380 net/core/skbuff.c:668 alloc_skb include/linux/skbuff.h:1331 [inline] alloc_skb_with_frags+0xe4/0x850 net/core/skbuff.c:6612 sock_alloc_send_pskb+0x7f1/0x980 net/core/sock.c:2897 unix_dgram_sendmsg+0x41f/0x17e0 net/unix/af_unix.c:2017 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:733 [inline] sock_write_iter+0x4fe/0x5b0 net/socket.c:1137 do_iter_readv_writev+0x655/0x950 fs/read_write.c:820 vfs_writev+0x363/0xdd0 fs/read_write.c:1050 do_writev+0x297/0x340 fs/read_write.c:1096 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Memory state around the buggy address: ffff888029c39700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff888029c39780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff888029c39800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff888029c39880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff888029c39900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ==================================================================