Extracting prog: 4m59.013359448s
Minimizing prog: 35m2.072652623s
Simplifying prog options: 0s
Extracting C: 35.848268174s
Simplifying C: 27m5.510035309s


extracting reproducer from 59 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-mmap$auto-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program did not crash
single: failed to extract reproducer
bisect: bisecting 59 programs with base timeout 30s
testing program (duration=44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 20, 27, 26, 30, 5, 30, 29, 14, 29, 23, 30, 30, 30, 30, 19, 26, 29, 30, 29, 29, 3, 29, 14, 30, 14, 30, 29, 10, 30, 30, 12, 30, 26, 26, 29, 21, 21, 27, 24, 21, 28, 30, 26, 29, 11, 19, 30, 21, 16, 11, 20, 29, 27, 24, 29, 23, 11, 30]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
r0 = socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
clone$auto(0x2, 0x81, 0x0, 0x0, 0x3)
syz_clone3(&(0x7f00000004c0)={0x82000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8000, 0x0)
name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001)
setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4)
r1 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x2301, 0x0)
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000480)={&(0x7f0000000240)='L\fX\x00', 0x49}, 0x4, 0x0, 0x5, 0x11}, 0x5}, 0x2, 0x100)
executing program 1:
mmap$auto(0x0, 0x1, 0x8001, 0x1b, 0x2, 0xfe8)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x8a581, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/module/ib_iser/parameters/max_sectors\x00', 0x20a42, 0x0)
sendfile$auto(r0, r0, 0x0, 0x4f64a1d2)
connect$auto(0xffffffffffffffff, 0x0, 0x54)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x4a402, 0x0)
read$auto(r1, 0x0, 0x1f40)
r2 = prctl$auto_PR_SET_MM_START_BRK(0x7fffffff, 0x6, 0xffffffffffffffff, 0xb8, 0x6ad)
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000000c0)={0x400, 0x4, 0xd, 0x8, 0x34, <r3=>0xffffffffffffffff})
fcntl$auto(r2, 0x3, r3)
r4 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x20000, 0x0)
ioctl$auto_XFS_IOC_DIOINFO(r4, 0x800c581e, &(0x7f0000000080)={0xffffffac, 0x0, 0x7})
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x62881, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
setresuid$auto(0x0, 0xffffffffffffffff, 0x200)
mlockall$auto(0x2)
open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x4, 0x0, 0x1)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x8080, 0x4, 0x8, 0xc, 0xffffffffffffffff, 0x4, 0x7ff}, 0xb)
write$auto(0x3, 0x0, 0xfdf3)
executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0)
r2 = socket(0xa, 0x5, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1)
bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={<r3=>r1, 0x81}, 0x96)
bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92)
connect$auto(0x3, 0x0, 0x54)
getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0)
read$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffffff, &(0x7f0000000100)=""/153, 0x99)
getpid()
mincore$auto(0x1000, 0x8001, 0x0)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18)
setresuid$auto(0x0, 0x2, 0x0)
fremovexattr$auto(r4, &(0x7f0000000000)='system.posix_acl_access\x00')
r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x40802, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r6, 0x560d, 0x7)
fspick$auto(r3, &(0x7f0000000200)='./file0\x00', 0x8)
read$auto(r5, 0x0, 0xb4d3)
semget$auto(0x0, 0x13c, 0x1ff)
executing program 2:
prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0xc0d)
epoll_pwait2$auto(0x3, 0x0, 0x4, 0x0, 0x0, 0x7ff6)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2800, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
ioctl$auto_BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(r3, 0x0, 0x40)
r4 = open(0x0, 0x22240, 0x154)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000038, 0x0)
fsopen$auto(0x0, 0x1)
execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
rename$auto(&(0x7f0000000000)='./file0\x00', 0x0)
unshare$auto(0x40000080)
r5 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x608080, 0x0)
dup$auto(r0)
read$auto(r5, &(0x7f0000000140)='\x00', 0x6)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4, 0x0, 0x40eb1, 0x401, 0xfffffffffffffffd)
r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$auto(0xca, &(0x7f00000000c0)='\x04>\x00\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\xf9y\xc7p\xf1w\xbe\xde\xe8\xc3\x01#\xcc\tF\xb6\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1\xd5\x1e\x8f\t\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x85\x00\x00\x00\xe2E\x00\x00-a\xb6n\xbc\xb4=\xf8\xce\x01\x1f]\x85|\xce\xd7\xff\xff\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\x00\x80\x00\x00\xe9e\xe5\x80\x1c\x02\"\xa7&8U\xfd\xdc\x15\xae\xfa5\xb8}\x0e\xb4:\x91\xbb5\xd3{\xb2\xd0\xc0\x93=\xf8E\xceO\x1e\xd5\x8f\xdf\xaa\x1c\xfd\xb0h\xd8\xbc\xecA\xa6\xde\xd1=\xfd)d\x8f\vk\x1c+\xf7, \xf8]\xb3\xe9B\x02\f\'\xcf0\x06', 0x1ff)
ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5)
getsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0)
read$auto(r1, 0x0, 0x7)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x149802, 0x0)
mknod$auto(0x0, 0x20e9, 0x103)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r2 = socket(0x2, 0x1, 0x84)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x800005411, 0x38)
mmap$auto(0x1000, 0x4, 0xdf, 0x100009b72, r2, 0x8000)
io_uring_setup$auto(0x800085, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044010}, 0xc0)
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x40002, 0x0)
setfsuid$auto(0xee00)
setfsuid$auto(0xee01)
executing program 1:
socket(0xa, 0x5, 0x0) (async)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/bridge_slave_1\x00', 0x111800, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
io_uring_setup$auto(0x7, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc)
executing program 1:
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/stat\x00', 0x40802, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0)
writev$auto(r1, 0x0, 0x100)
mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, r0, 0x8000)
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3542, 0x0)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r3, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
ppoll$auto(&(0x7f0000000000)={r2, 0x40}, 0x2, 0x0, 0x0, 0x8)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc)
modify_ldt$auto(0x1, 0x0, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
ioctl$auto_ECCGETSTATS(0xffffffffffffffff, 0x80104d12, &(0x7f0000000280)={0x101, 0x0, 0x800, 0x6})
r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
pread64$auto(r4, 0x0, 0x5, 0x8000400)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$auto_OVS_FLOW_CMD_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01df250100000000000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x2004c080}, 0x4000044)
waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000380)={@siginfo_0_0={0xf58, 0x4, 0x1ff, @_timer={<r6=>0xffffffffffffffff, 0x2, @sival_int=0xfffffffe, 0xc}}}, 0x7, &(0x7f0000000440)={{0x9, 0x32}, {0x0, 0x25c3}, 0x9, 0x7, 0x8, 0x2, 0x6, 0x5, 0x7, 0x2, 0x6, 0x5, 0x5, 0x800, 0x58ae, 0xfffffffffffffffa})
r7 = prctl$auto(0x3e, 0x1, r6, 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r7, 0x0, 0x20000080)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x40, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0)
pread64$auto(r8, 0x0, 0x201, 0xc000)
executing program 2:
open(&(0x7f0000000100)='.\x00', 0x430042, 0x40f)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x40000000000000d, 0x2009, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x19, 0x2, 0x400000000008000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40201, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x2400c080)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_DEL_RXSC(r3, &(0x7f0000007500)={0x0, 0x30, &(0x7f00000074c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf25020000000800010033766f2fd8e39c82180b2a269b74cd028ffb1d4b095240c88443ce6435fccfb62f21e511665424f974011410ff0e9bcc8d98dc1f5129ad09a8a443d4792f4769ffa0ada4f61cb875bf153944de2cdbeebf7e38f7de00434d677a80722c4bf3f66009a79497df9d44efa2", @ANYRES32=0x0, @ANYBLOB="100002800c0001000300000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
write$auto(r2, 0x0, 0xac1)
connect$auto(0x3, 0x0, 0x55)
mmap$auto(0x0, 0x128009, 0xdf, 0x18, r1, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000140)={&(0x7f0000000000)="75069306718961289362e447303b5943cb6da353036498c823d4148aeeec98ef1d3c18058651f24eb225ecce17d85d22e4bae47c749fb6da2f5267c2daeb5eaec03b57c3c82ae241c3c6d0ddd2fd220443ef2cd1bde1726c1c5608763de0c70b8b2c44c6b5ff5be2fc1d7ae88f4c29e4e63f543cdc4e3122dab03c9d8934e1947870dddcfc87a9a65d0a36faa2691a4cb3c04e3e4a38cebcf6ce3ffcea8aea93617c8887bf47345489346803c41c0bac9e55d851388657f48debb807c036e0be4858", 0xd7c9}, 0x200, 0x2, 0xffffffff)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0)
sendfile$auto(r5, r6, 0x0, 0x4)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a400, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
executing program 0:
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
r0 = socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
clone$auto(0x2, 0x81, 0x0, 0x0, 0x3)
syz_clone3(&(0x7f00000004c0)={0x82000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8000, 0x0)
name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001)
setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4)
r1 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x2301, 0x0)
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000480)={&(0x7f0000000240)='L\fX\x00', 0x49}, 0x4, 0x0, 0x5, 0x11}, 0x5}, 0x2, 0x100)
executing program 3:
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
timer_create$auto(0x1, 0x0, 0x0)
timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0)
timer_gettime$auto(0x0, 0x0)
ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x189160, 0x0)
ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200008, 0x19)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x1, 0x0)
setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x3)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0)
sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001980)=ANY=[@ANYBLOB="000428bd7000fddbdf2572000000d5074801df1af0ebe5aff861f90fef1cd29caf556101167b1ccb2741bde9cc96d71b7295da0b178f3145eaa4a00a4fa9fcb281c65c30c1430b48e6f91275f00ee96d06f7e6bd05c1af7b9c0ee013ca8dc3e82a4f7efb413a0b9cd35763b92ded7ee1b9336e0bc7d12d0f26083a168c6a2ee064b2d0f1ae837a4f045fc61d947670f450a56dcff9232275db4c9bdfa9497da2c52e0bf4761f0c22b4a637f951ae926928aa18a8b30cc0c74aecb71862892bac4bf26d65323f9a420a2b0a08b7ae78d2b6c8ab635ddc019192eecf0609683042ca1b7f925fb94234d9a499ac22ca7fb11491478430dfcd6d86fff6598161d76b7688b3af1608daa3de12cffc0dfbfc732073ffd2d967b6a291a471822d0b8c681a370cbb192ac9c7e8f7b2b4119a6549a60dfb08b96f50b9b4143460618f0747ce7330fd6cdc4f79bd47e9420972292f97e72501e07fbf574ddb144caf67a5105d344c669dfa56ee1fd9d0b3c98c72eb8c6c942f9aab5830f2c719947168f101b599369e682da9ba5d3c6019ed6c6c6c376e41e3357455077aa8c321e40f034c6f81eb69767672c53adbfe236c5a49a15ddea8a657a818a8e8ea921fdc11d6034e40ab2afc5e2919de79af646f82d79ca078372f3f1328b25e0718e7f64be83d58a4cbe12ffe3505307434554c96d7095051a6704101a23fb2baf5b81401da72b5213552a7cb54ee801d26f6efb25c3d20c03768e9ffb6b50546735f5d1b553f73d5f8c36a5aa5ab5a5d4e08b910e6f29a52e77d53e27c4827b5bc154c11e8f2625d0c5d8e15a138a0fd72c9458d72bd8be57afa648a003f5d909c0a7aa1062546407f019695df71228ee704c4fe870bca3c4f3d5183aa4f4f19e9bfcf9b282241ee6eabaab6777f72b0b1e52a498464978fa44e2d9a73935efe46b0c3e91fee32949f032740bd3b018c1eb330ce7d0a44553ff12a25f20ed41aefc8b12f4374f1dcdaeae16345ec004ba3bf0d5bf39037bd4b73fb2a6d5022198f3bcf9d623c4f706ae5b3ba632c112424ad5d673f38e3c673c50552731151cb53dd9ec9699d375b451d8f4e2457e5eab34766a66b031dcdcae85e67939edb373588801a5ea82f8d266aa78341c0e1104f2b0dd5ee0c081f3855a06bec389a29645871ea53b10e19e44737951756ecc062dedfccc3fd84aae13d3c5c8328379756f42b1cf8e9453e9491033f2ede522c8daa0577152799451358694c3771169411150f5066a243d6f869671a4a924602cdfa5a35e4cf303cf7271afb702c93a6101275319153d7c88c112b7d1331db47415023ec18b7d558967f82e7970b1616d8cd1bd5deda3f90bcddec801412e8a4ceb854241bcfe0850c7495399338b41ae01528fe5da8296d5cb4a0a5e4ca8c82327da83c0999ab91549f5a08c1ded5d54509bc60b3afbace2fea3c7817aeed4fefc038e86bc77be0029dc5a8f70d41770990583da9b943c9f7c646888171188a9ca40b58b7ff2066bc657dcf369fc8faf74576f61347b0d4016854d5701cacce7eb0ee48f3a302b5892649dad4c910e27976e0ba3f781fb9fc8908904b03455d8d45a6875a18a97da67e91b9f43424c58ceac55ab788fd91097db30ef891cf659dca25f64300f52b544b4be462724803171a0c4328472c3c9a863dbb331029066f55a0e8ef1c3852c3f19c2bbd71c17852bcf22a125ff854592c146258ba99fe1a9dcca3e1a9178ecd0d6096d0642bd1639d547d475dbe4e30b62a0db806e865000b5fac63f537cebc8a4f133843c9d333f566c82a3b2e4a947be01743c36af38975d7396bf804fabf5a102e86ebc9dc18a0f07b5c5ca355cae4000b95f759e53717ec4ccee0778f3cf3f1b3d8a38aa7c56b416d94066f8a4c6f1fe1fc48c4eda755adb52ef60d249a07bac8e7c2e800ac1c7a57e52aff48d219746d31bab3c429e01c4bbd5d46e9a15af19b2f263b7ae60e60052f89a6d0e74e02d27ad64474f19abfb467bfa835e7a9e89f4792bb33bd0eb478a7521ad9728ce1623a4f32aae2f7e7cf41acf10d79d7e2c0e36ba780fa9a7299d1355bcde4c630cb0a0e9e4e2257330751aba40badc2784cd46e4fab142aee3346248010f83527ab291667f9ccbed3394c7799b5764bb29b394c"], 0x7ec}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'pimreg0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', <r5=>0x0})
sendmsg$auto_NET_SHAPER_CMD_GROUP(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000240)={0x14, r4, 0x300, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x14)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)={0xdc, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xa}, @ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1737}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xba6c}, @ETHTOOL_A_HEADER_FLAGS={0x7, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xfc}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x8}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0xd9}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0xdc}}, 0x8000)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
write$auto_tty_fops_tty_io(r6, &(0x7f0000000580)="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", 0xfdef)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = fanotify_init$auto(0x5, 0x0)
r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event2\x00', 0xc0200, 0x0)
ioctl$auto_EVIOCGKEYCODE(r1, 0x80084504, 0x0)
shmctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x55, 0xffffffffffffffff, 0x0, 0x29, 0xa, 0xffff0001, 0xb84b}, 0x5, 0x511, 0x2, 0x4, @inferred=0xffffffffffffffff, @inferred, 0xc0, 0x0, 0x0, 0x0})
setuid$auto(0x1f)
fanotify_mark$auto(r0, 0x205, 0xa, r0, 0x0)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000380)={{&(0x7f00000001c0)="a36d3fa58cc14c483eaeefbda25ed11e6584b0e06b6f7d2a0920bb3dac705aa384572b6a4be4e53907a7b258", 0x7fff, 0x0, 0x9, 0x0, 0x2, 0x9}, 0x2}, 0xfffffffd, 0x3, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8)
mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0))
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/loginuid\x00', 0x0, 0x0)
write$auto_proc_pid_attr_operations_base(0xffffffffffffffff, &(0x7f0000000280)="e6eec9f1147ef5a4e8", 0x9)
r2 = socket(0xa, 0x3, 0x2f)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x4000013)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44884)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'})
sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x1)
r5 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 2:
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
socket(0x10, 0x0, 0x65)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/gid_map\x00', 0x40000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@hci={0x1f, 0x4, 0x2}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r1 = socket(0x2b, 0x1, 0x1)
socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0)
ioctl$auto(r1, 0x89a0, 0x4)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x3ff)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8)
unshare$auto(0x40000080)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000280)="978693dc87b1c1fd2f1eb908a830a927544df29604e114be47d79b044b1020", 0x1f)
mmap$auto(0x0, 0x2020009, 0x800000003, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0xfffffffb, 0x837, 0x0, 0x8001)
sendto$auto(0x3, 0x0, 0x100000000, 0x8, 0x0, 0x1c)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x5)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
r0 = socket(0x11, 0x80003, 0x300)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2)
close_range$auto(0x2, 0xa, 0x0)
r1 = socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x178, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x13}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x4}]}, @NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@nested={0x8, 0xd2, 0x0, 0x1, [@nested={0x4, 0x139}]}, @generic="9bd01e807acdbc43189ec46814b73041a3cbd8ff7005fe200e7c112e613c8657c1022d38d1c9da59229f476a452a9290f8ea297fa9a681a4bb19260dd3969242d3acf669df83d1de991e3576a22d63fc0366d55175d6535fb833b4f32b84c31fcacd216b2b1a26777b565ab5", @generic="693e89ca59872cff7a2bde3c77e952fb749fb487ad0b27332ffbe729bfad2873eb0919a0d19feff916e655c4c035e570c9b954d7d539b828603e1af583ecbfaee9af948954fd2211ab0eb8f5f111cac7a044e27131746ee83a5a33cf421db4973013ba24aed59ba7dc9da4c7f5e12cfd4f76d379a0b30d07ec60d66147dd101e6cd7e94799a4827624219e578e86db8135afa5523db7f29ce4a87a049f1eb128d1b508ba7034fcd30355df77f2123129efd03f6bc5aa482332d35c366e5c1d344714b30b"]}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x178}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000)
epoll_wait$auto(r1, &(0x7f0000000400)={0x1, 0xa}, 0x17a285d3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004)
r3 = socket(0x10, 0x2, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000)
write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb)
pkey_mprotect$auto(0x6, 0x8001, 0x8, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0xa, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
r0 = socket(0x11, 0x80003, 0x300)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2)
close_range$auto(0x2, 0xa, 0x0)
r1 = socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x178, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x13}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x4}]}, @NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@nested={0x8, 0xd2, 0x0, 0x1, [@nested={0x4, 0x139}]}, @generic="9bd01e807acdbc43189ec46814b73041a3cbd8ff7005fe200e7c112e613c8657c1022d38d1c9da59229f476a452a9290f8ea297fa9a681a4bb19260dd3969242d3acf669df83d1de991e3576a22d63fc0366d55175d6535fb833b4f32b84c31fcacd216b2b1a26777b565ab5", @generic="693e89ca59872cff7a2bde3c77e952fb749fb487ad0b27332ffbe729bfad2873eb0919a0d19feff916e655c4c035e570c9b954d7d539b828603e1af583ecbfaee9af948954fd2211ab0eb8f5f111cac7a044e27131746ee83a5a33cf421db4973013ba24aed59ba7dc9da4c7f5e12cfd4f76d379a0b30d07ec60d66147dd101e6cd7e94799a4827624219e578e86db8135afa5523db7f29ce4a87a049f1eb128d1b508ba7034fcd30355df77f2123129efd03f6bc5aa482332d35c366e5c1d344714b30b"]}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x178}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000)
epoll_wait$auto(r1, &(0x7f0000000400)={0x1, 0xa}, 0x17a285d3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004)
r3 = socket(0x10, 0x2, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000)
write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb)
pkey_mprotect$auto(0x6, 0x8001, 0x8, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0xa, 0x0)
executing program 3:
r0 = set_tid_address$auto(0x0)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, 0x0, 0x1cb)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x9, 0x400007, 0xdf, 0x40012, 0x2, 0x5)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r2, r3, 0x0, 0x5)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0)
sendfile$auto(r4, r4, 0x0, 0x7ffff000)
kexec_load$auto(0x2000000000000009, 0x7, 0x0, 0x1003e0000)
close_range$auto(0x2, 0x8, 0xfffffffd)
madvise$auto(0x0, 0x2000040080000004, 0xe)
write$auto(0xffffffffffffffff, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3)
r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x30180, 0x0)
epoll_ctl$auto(r3, 0x6, r5, &(0x7f0000000180)={0xef9, 0x3})
connect$auto(0x3, &(0x7f00000000c0)=@llc={0x1a, 0x338, 0x5e, 0x1, 0x6, 0x5, @local}, 0x10)
modify_ldt$auto(0xf, &(0x7f0000000040)="30d5f2e400b6ff4ae6e3a46b4710f7e47d7d332ae0d02eba2e8f0128bbe22386", 0x4)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7)
r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0)
write$auto_v4l2_fops_v4l2_dev(r6, &(0x7f00000004c0)="c9432739b5580773", 0x8)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x4}, 0xb, 0x7)
write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f0000003900)='\t', 0x1)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00')
madvise$auto(0x5, 0xffffffffffff0005, 0x9)
executing program 0:
mmap$auto(0x0, 0x1, 0x8001, 0x1b, 0x2, 0xfe8)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x8a581, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/module/ib_iser/parameters/max_sectors\x00', 0x20a42, 0x0)
sendfile$auto(r0, r0, 0x0, 0x4f64a1d2)
connect$auto(0xffffffffffffffff, 0x0, 0x54)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x4a402, 0x0)
read$auto(r1, 0x0, 0x1f40)
r2 = prctl$auto_PR_SET_MM_START_BRK(0x7fffffff, 0x6, 0xffffffffffffffff, 0xb8, 0x6ad)
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000000c0)={0x400, 0x4, 0xd, 0x8, 0x34, <r3=>0xffffffffffffffff})
fcntl$auto(r2, 0x3, r3)
r4 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x20000, 0x0)
ioctl$auto_XFS_IOC_DIOINFO(r4, 0x800c581e, &(0x7f0000000080)={0xffffffac, 0x0, 0x7})
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x62881, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
setresuid$auto(0x0, 0xffffffffffffffff, 0x200)
mlockall$auto(0x2)
open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x4, 0x0, 0x1)
write$auto(0x3, 0x0, 0xfdf3)
executing program 0:
prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0xc0d)
epoll_pwait2$auto(0x3, 0x0, 0x4, 0x0, 0x0, 0x7ff6)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2800, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
ioctl$auto_BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(r3, 0x0, 0x40)
r4 = open(0x0, 0x22240, 0x154)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000038, 0x0)
fsopen$auto(0x0, 0x1)
execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
rename$auto(&(0x7f0000000000)='./file0\x00', 0x0)
unshare$auto(0x40000080)
r5 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x608080, 0x0)
dup$auto(r0)
read$auto(r5, &(0x7f0000000140)='\x00', 0x6)
executing program 2:
open(&(0x7f0000000100)='.\x00', 0x430042, 0x40f)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x40000000000000d, 0x2009, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x19, 0x2, 0x400000000008000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40201, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x2400c080)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_DEL_RXSC(r3, &(0x7f0000007500)={0x0, 0x30, &(0x7f00000074c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf25020000000800010033766f2fd8e39c82180b2a269b74cd028ffb1d4b095240c88443ce6435fccfb62f21e511665424f974011410ff0e9bcc8d98dc1f5129ad09a8a443d4792f4769ffa0ada4f61cb875bf153944de2cdbeebf7e38f7de00434d677a80722c4bf3f66009a79497df9d44efa2", @ANYRES32=0x0, @ANYBLOB="100002800c0001000300000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
write$auto(r2, 0x0, 0xac1)
connect$auto(0x3, 0x0, 0x55)
mmap$auto(0x0, 0x128009, 0xdf, 0x18, r1, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000140)={&(0x7f0000000000)="75069306718961289362e447303b5943cb6da353036498c823d4148aeeec98ef1d3c18058651f24eb225ecce17d85d22e4bae47c749fb6da2f5267c2daeb5eaec03b57c3c82ae241c3c6d0ddd2fd220443ef2cd1bde1726c1c5608763de0c70b8b2c44c6b5ff5be2fc1d7ae88f4c29e4e63f543cdc4e3122dab03c9d8934e1947870dddcfc87a9a65d0a36faa2691a4cb3c04e3e4a38cebcf6ce3ffcea8aea93617c8887bf47345489346803c41c0bac9e55d851388657f48debb807c036e0be4858", 0xd7c9}, 0x200, 0x2, 0xffffffff)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0)
sendfile$auto(r5, r6, 0x0, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
executing program 32:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
r0 = socket(0x11, 0x80003, 0x300)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2)
close_range$auto(0x2, 0xa, 0x0)
r1 = socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x178, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x13}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x4}]}, @NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@nested={0x8, 0xd2, 0x0, 0x1, [@nested={0x4, 0x139}]}, @generic="9bd01e807acdbc43189ec46814b73041a3cbd8ff7005fe200e7c112e613c8657c1022d38d1c9da59229f476a452a9290f8ea297fa9a681a4bb19260dd3969242d3acf669df83d1de991e3576a22d63fc0366d55175d6535fb833b4f32b84c31fcacd216b2b1a26777b565ab5", @generic="693e89ca59872cff7a2bde3c77e952fb749fb487ad0b27332ffbe729bfad2873eb0919a0d19feff916e655c4c035e570c9b954d7d539b828603e1af583ecbfaee9af948954fd2211ab0eb8f5f111cac7a044e27131746ee83a5a33cf421db4973013ba24aed59ba7dc9da4c7f5e12cfd4f76d379a0b30d07ec60d66147dd101e6cd7e94799a4827624219e578e86db8135afa5523db7f29ce4a87a049f1eb128d1b508ba7034fcd30355df77f2123129efd03f6bc5aa482332d35c366e5c1d344714b30b"]}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x178}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000)
epoll_wait$auto(r1, &(0x7f0000000400)={0x1, 0xa}, 0x17a285d3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004)
r3 = socket(0x10, 0x2, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000)
write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb)
pkey_mprotect$auto(0x6, 0x8001, 0x8, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0xa, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
r1 = socket(0x25, 0x1, 0x5)
socket(0xa, 0x2, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ram14\x00', 0x400, 0x0)
mmap$auto(0x0, 0x0, 0xdf, 0xebe, r0, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto_F_GETOWNER_UIDS(r3, 0x11, 0x5)
ioctl$auto(r2, 0x401870cc, r2)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
mmap$auto(0x1000000, 0x4000100000001, 0x8, 0x40eb3, r1, 0x300000000000)
socketpair$auto(0xb, 0x9, 0x800, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x90)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000140), 0x8a700, 0x0)
ioctl$auto(0x3, 0xc040563e, 0x38)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x86902, 0x0)
fcntl$auto(0x3, 0x402, 0x9ec0000000000000)
r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0xcad00, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r4, 0x40085507, &(0x7f00000000c0)={0x8a38, 0x81, 0x6f7af55d})
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
r1 = socket(0x25, 0x1, 0x5)
socket(0xa, 0x2, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ram14\x00', 0x400, 0x0)
mmap$auto(0x0, 0x0, 0xdf, 0xebe, r0, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto_F_GETOWNER_UIDS(r3, 0x11, 0x5)
ioctl$auto(r2, 0x401870cc, r2)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
mmap$auto(0x1000000, 0x4000100000001, 0x8, 0x40eb3, r1, 0x300000000000)
socketpair$auto(0xb, 0x9, 0x800, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x90)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000140), 0x8a700, 0x0)
ioctl$auto(0x3, 0xc040563e, 0x38)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x86902, 0x0)
r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0xcad00, 0x0)
getsockopt$auto_SO_MARK(r2, 0x3, 0x24, &(0x7f0000000040)='\x01\x80\x1e\x00\x00\x00\x00\x00\x00\x00\xff\xffO3\xbd\xe9\x00\x84\xc8dz)Hn!H\xdc\xb6\xf8\x1b\f6`\xc6\xa4A\xcf\x11?\x00\xf5\xc8\x00\x00\x00\x00', &(0x7f00000001c0)=0x6)
ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r4, 0x40085507, &(0x7f00000000c0)={0x8a38, 0x81, 0x6f7af55d})
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0)
preadv$auto(r0, &(0x7f0000000000)={0x0, 0xffffffff}, 0x6, 0x8, 0x5)
executing program 3:
open(&(0x7f0000000100)='.\x00', 0x430042, 0x40f)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x40000000000000d, 0x2009, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x19, 0x2, 0x400000000008000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40201, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x2400c080)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_DEL_RXSC(r3, &(0x7f0000007500)={0x0, 0x30, &(0x7f00000074c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf25020000000800010033766f2fd8e39c82180b2a269b74cd028ffb1d4b095240c88443ce6435fccfb62f21e511665424f974011410ff0e9bcc8d98dc1f5129ad09a8a443d4792f4769ffa0ada4f61cb875bf153944de2cdbeebf7e38f7de00434d677a80722c4bf3f66009a79497df9d44efa2", @ANYRES32=0x0, @ANYBLOB="100002800c0001000300000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
write$auto(r2, 0x0, 0xac1)
connect$auto(0x3, 0x0, 0x55)
mmap$auto(0x0, 0x128009, 0xdf, 0x18, r1, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000140)={&(0x7f0000000000)="75069306718961289362e447303b5943cb6da353036498c823d4148aeeec98ef1d3c18058651f24eb225ecce17d85d22e4bae47c749fb6da2f5267c2daeb5eaec03b57c3c82ae241c3c6d0ddd2fd220443ef2cd1bde1726c1c5608763de0c70b8b2c44c6b5ff5be2fc1d7ae88f4c29e4e63f543cdc4e3122dab03c9d8934e1947870dddcfc87a9a65d0a36faa2691a4cb3c04e3e4a38cebcf6ce3ffcea8aea93617c8887bf47345489346803c41c0bac9e55d851388657f48debb807c036e0be4858", 0xd7c9}, 0x200, 0x2, 0xffffffff)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0)
sendfile$auto(r5, 0xffffffffffffffff, 0x0, 0x4)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a400, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
executing program 0:
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x46d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x5, 0xfff, 0xf, 0xb0, 0x1, 0x5, 0x7, 0x9, 0x7, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001]}, 0x1fe, 0x10081)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa503}, 0x800}, 0x7, 0x4008)
executing program 2:
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0xff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec31\x00', 0x900, 0x0)
ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0)
ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0)
ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)="edd4a3b5a03ebe1d0a26830c556ebf0be08eebdd7f8d99cf50f68921d54e993b889553abc1b6b5b58c16258f427f620c60ecdd2f87d81b60893ea7b78dff4eb7e547912e79cff9edb38c7d584e7606c4ff560ed22259d9050942bb82e4")
prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0x7ff, 0x8000, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x200, 0xf7ffffffffffffff, 0x3e83)
madvise$auto(0x0, 0x2003f0, 0x15)
open(0x0, 0x261c2, 0x84)
fallocate$auto(0x8000000000000003, 0x8, 0xd, 0x7fffffffffffffff)
madvise$auto(0x0, 0x200007, 0x19)
write$auto(0xffffffffffffffff, 0x0, 0x7)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x1a3780, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0xffffffffffffffff, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x3, 0x80000000, 0x5f, 0x7ffffffd, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x814)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40048004)
executing program 33:
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x46d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x5, 0xfff, 0xf, 0xb0, 0x1, 0x5, 0x7, 0x9, 0x7, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001]}, 0x1fe, 0x10081)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa503}, 0x800}, 0x7, 0x4008)
executing program 34:
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0xff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec31\x00', 0x900, 0x0)
ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0)
ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0)
ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)="edd4a3b5a03ebe1d0a26830c556ebf0be08eebdd7f8d99cf50f68921d54e993b889553abc1b6b5b58c16258f427f620c60ecdd2f87d81b60893ea7b78dff4eb7e547912e79cff9edb38c7d584e7606c4ff560ed22259d9050942bb82e4")
prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0x7ff, 0x8000, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x200, 0xf7ffffffffffffff, 0x3e83)
madvise$auto(0x0, 0x2003f0, 0x15)
open(0x0, 0x261c2, 0x84)
fallocate$auto(0x8000000000000003, 0x8, 0xd, 0x7fffffffffffffff)
madvise$auto(0x0, 0x200007, 0x19)
write$auto(0xffffffffffffffff, 0x0, 0x7)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x1a3780, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0xffffffffffffffff, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x3, 0x80000000, 0x5f, 0x7ffffffd, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x814)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40048004)
executing program 35:
open(&(0x7f0000000100)='.\x00', 0x430042, 0x40f)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x40000000000000d, 0x2009, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x19, 0x2, 0x400000000008000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40201, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x2400c080)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_DEL_RXSC(r3, &(0x7f0000007500)={0x0, 0x30, &(0x7f00000074c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf25020000000800010033766f2fd8e39c82180b2a269b74cd028ffb1d4b095240c88443ce6435fccfb62f21e511665424f974011410ff0e9bcc8d98dc1f5129ad09a8a443d4792f4769ffa0ada4f61cb875bf153944de2cdbeebf7e38f7de00434d677a80722c4bf3f66009a79497df9d44efa2", @ANYRES32=0x0, @ANYBLOB="100002800c0001000300000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
write$auto(r2, 0x0, 0xac1)
connect$auto(0x3, 0x0, 0x55)
mmap$auto(0x0, 0x128009, 0xdf, 0x18, r1, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000140)={&(0x7f0000000000)="75069306718961289362e447303b5943cb6da353036498c823d4148aeeec98ef1d3c18058651f24eb225ecce17d85d22e4bae47c749fb6da2f5267c2daeb5eaec03b57c3c82ae241c3c6d0ddd2fd220443ef2cd1bde1726c1c5608763de0c70b8b2c44c6b5ff5be2fc1d7ae88f4c29e4e63f543cdc4e3122dab03c9d8934e1947870dddcfc87a9a65d0a36faa2691a4cb3c04e3e4a38cebcf6ce3ffcea8aea93617c8887bf47345489346803c41c0bac9e55d851388657f48debb807c036e0be4858", 0xd7c9}, 0x200, 0x2, 0xffffffff)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0)
sendfile$auto(r5, 0xffffffffffffffff, 0x0, 0x4)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a400, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
executing program 5:
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x8a581, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x4a402, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x62881, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
setresuid$auto(0x0, 0xffffffffffffffff, 0x200)
mlockall$auto(0x2)
open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x4, 0x0, 0x1)
write$auto(0x3, 0x0, 0xfdf3) (fail_nth: 5)
executing program 5:
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r0, 0x8000)
socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0)
symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)={0x101000, 0x0, 0x12}, 0x18)
sendmmsg$auto(0x3, 0x0, 0x7878, 0x7000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r1 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x2, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x2, 0x8, 0x0)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r1)
sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="39fa6ec3bf125fa7bcdf53908958627222703b60b12dead59ea5906897336aea1db161696bb46f1aa841f90832185e7d532e35e86c24c0b4f387ad6282ca390dbba8df3e967334901320c4731cc28fbfa81a182ffd04eabbfbed5e97928d1b576995bdbe6f3f9b9589563c5e7edcff9603c56ffb8e08e84876", @ANYRES16=r2, @ANYBLOB="00022dbd7000fcdbdf2512000000fb003080280081800400a28014003800fc02000000000000000000000000000008000800", @ANYRES32=r0, @ANYBLOB="04004e801d2b22032763f79d6b17a20166e5c0d3b432a64747b941eb43392be207c392fa99fdb5df573a0e0dee5073417dbcd731fef85c2d37508360a4c82245a4cdaa314e93116a93d0ba9edb01e808398ec8acc9584d57d570af98fc47cdf274b40f0481e338ebc77c24ebf9513a5af2dc39a9ec61514b8367ee1a203ed7a8a746b4b7bdeef50ee990c3127b17caff18ee5f00d0bd5d60fe261f31cfb9c3af1c3b5ef68fe7bf368eb0b8a864e691dc7c68c26b29d79f26e8e6cd4549341b028aac1be11e48c95a803109538886c388eae713000800160005000000"], 0x118}, 0x1, 0x0, 0x0, 0x5}, 0x4008000)
getpriority$auto_PRIO_PGRP(0x1, 0x0)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe040100"}, 0x1c)
mmap$auto(0x83, 0x2020009, 0x8, 0xebf, 0xfffffffffffffffa, 0x2)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram4\x00', 0x0, 0x0)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4, 0xffd, 0x12, 0x3, 0x0)
ioctl$auto(0x3, 0x4020565a, 0x38)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0)
socket(0x1e, 0x1, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x4004, 0x0)
ioctl$auto_IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
executing program 5:
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/offline\x00', 0x800, 0x0)
read$auto(r1, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.7/usb23/23-0:1.0/ep_81/interval\x00', 0x3)
pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x840)
readahead$auto(r0, 0x4, 0x4)
sysfs$auto(0x1003, 0x401, 0x0)
unshare$auto(0x40000080)
write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7a=v^\x951\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeC\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95\a\xf5e\xfa\x94M\xb8%a\xa53fc\x95\'\xedc\xc5\xad\x7fM\xb4\xf39\x82\xdf8Y)\x8e\xa6\x0e[\xe1\x88\x1d\x0f[j\xe9\x83\x11\x1e\xca2\xba\xdb\xe4\b%\n\xcb\xbar\xf8\x84\xb0\x00$V\xa6`;\xfao\xe6A\x1b\xf2d\xfc\xb4}\xecP\x80h\xfb\x9f3e}\x8edq\x86\x00\xe0bb\x16\xb1kM\xc6GW#-\xf6\x17$BW\x83J\xd7g\xf1\xc0\xbf\x03>\xf2\xeb g\xb7\x14\xc6\xc7\xc9]\xce.\x82Y\x98\tg\v\x11a\v\xb4\xab\x12\xc7', 0x8)
mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="e3b7a7a246aa3ba3df033aca2f80c23e3251bde500fddbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
sendfile$auto(0x2, 0x3, 0x0, 0xc3e0)
mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
write$auto(0x3, 0x0, 0x100082)
r6 = io_uring_setup$auto(0x6, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0)
socket(0xa, 0x3, 0x3a)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0)
read$auto_v4l2_fops_v4l2_dev(r6, &(0x7f0000000180)=""/31, 0x1f)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0)
executing program 5:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
executing program 5:
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x8a581, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000040)=@bpf_attr_7={@btf_id=0x400, 0x10001}, 0xc)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x4a402, 0x0)
read$auto(r0, 0x0, 0x1f40)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0)
sendfile$auto(0x1, r2, 0x0, 0x400007ffff000)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
r3 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x2000000a, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36cf3ce63f", <r4=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
setresuid$auto(0x0, 0xffffffffffffffff, 0x200)
mlockall$auto(0x2)
open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x4, 0x0, 0x1)
write$auto(0x3, 0x0, 0xfdf3)
getgid()
r5 = getegid()
setregid$auto(r5, r5)
shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000000140)={{0xe000001, 0xee01, 0xffffffffffffffff, 0x6b34, 0x6, 0xc, 0x5}, 0x0, 0x8001, 0x2000000000c2, 0x9, @inferred=0xffffffffffffffff, @raw=0x3, 0x7, 0x0, &(0x7f0000000100)="c0d3e0e6255a25e75d0345a39ec32cadb0d9c2d9cbe84477", &(0x7f0000000240)="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"})
executing program 5:
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, r0)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x20009, 0x4000020000df, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
capget$auto(0x0, 0xfffffffffffffffe)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000000)={0x714, 0x8, 0xd, 0xc, 0x8, <r1=>0x0})
r2 = prctl$auto(0x1000000003b, 0x1, r1, 0x5, 0x7)
setsockopt$auto(r2, 0x5, 0x77e3ebeb, &(0x7f0000000180)=',+-\x00', 0x950)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r0)
sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8d5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
lstat$auto(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
eventfd2$auto(0xa0, 0x0)
executing program 36:
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, r0)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x20009, 0x4000020000df, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
capget$auto(0x0, 0xfffffffffffffffe)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000000)={0x714, 0x8, 0xd, 0xc, 0x8, <r1=>0x0})
r2 = prctl$auto(0x1000000003b, 0x1, r1, 0x5, 0x7)
setsockopt$auto(r2, 0x5, 0x77e3ebeb, &(0x7f0000000180)=',+-\x00', 0x950)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r0)
sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8d5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
lstat$auto(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
eventfd2$auto(0xa0, 0x0)
executing program 4:
r0 = inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(r0, 0x0, 0x1000e6e)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x1, 0x8fd6, 0x948b, 0x3, 0x3392, 0x4, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0x200000000eb1, 0x401, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x9, 0x6, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = waitid$auto_P_PIDFD(0x3, r0, &(0x7f0000000340)={@_si_pad}, 0xd, &(0x7f00000003c0)={{0x1000, 0x7ce}, {0x10001}, 0x80000001, 0x9, 0x800, 0x0, 0x99e1, 0x9, 0x3ff, 0x9, 0xbb, 0x8205, 0x3, 0xe, 0x0, 0xe})
msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0x2, 0x287f, 0x2, 0x3}, 0x0, 0x0, 0x7fffffff, 0x9, 0x2, 0xffffffff, 0xfffffffffffffffe, 0x7fff, 0xfc2, 0x27f, @inferred=0xffffffffffffffff, @inferred=r4})
setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, r5)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r3, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r3, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x17, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x5ff4, 0x1)
mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21)
executing program 4:
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0)
sendfile$auto(r1, r1, 0x0, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = open$dir(0x0, 0x42, 0x3)
r3 = open_tree$auto(r2, 0x0, 0x9001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x57, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYRESDEC=r5, @ANYRES16=r5, @ANYRES8=r0, @ANYRES8=r2, @ANYRESHEX=r4, @ANYRES32=r4, @ANYBLOB="45a77efd0a765817a8c4e7ebbae518f6be79321f", @ANYRES64=r5, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="ec2b70c50000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32, @ANYBLOB="04000f808d212b73c10adc1cac942ab8a14129f6b2b9e47000ee6611d53442b33aff9cd4365e0eaf72f5f7ba9d007a180af5e2162d12128b8bcd4a3501bf5f21ec79f03046a0fbb6cdb55dddc8e67c5d9958383367790bd1cbe1645eed969a51b0506f76790d80dda60ee111ca44fddaef79a3bd1dd21e880977481d9ed58e30380e5f804f550d1b68a4e5040036000c002e014000000000000000fb00c700d4eb120fb990f312f6dc1cd1e2fabc17153e9e0bbaa255bfea657b66e5ef6d5c44b7851528115b5080920b3f7a5edb8c5c6ae63c4a8cdf26b60506f9d7c3e977b7c1e05b8754f234b727319ae25f75a8362c0ff160b5f62b0de762efb0f9db7ffec3550c9d534a1176d18e6d6f61566315b529b950f78d46ac1820c550cd6f077c640ec35a5249f5a5aa9df7105aa8c530c3a17f7e1e1990295c5930330f21228ad9a4e30a7223df2f8a594967f607d338a8269c20259a25c9d884f6e6f07412d5c19b28e02d333fef616a1d3bf2edf35e8b6bb815996fca3b386d3ba3f98e2e9116f6422a6f544d72c6ec9f31440c2b49d2df2a61faf400"], 0xbec}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, 0x6e)
prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40)
setitimer$auto(0x7, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
executing program 8:
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0)
sendfile$auto(r1, r1, 0x0, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = open$dir(0x0, 0x42, 0x3)
r3 = open_tree$auto(r2, 0x0, 0x9001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x57, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYRESDEC=r5, @ANYRES16=r5, @ANYRES8=r0, @ANYRES8=r2, @ANYRESHEX=r4, @ANYRES32=r4, @ANYBLOB="45a77efd0a765817a8c4e7ebbae518f6be79321f", @ANYRES64=r5, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="ec2b70c50000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32, @ANYBLOB="04000f808d212b73c10adc1cac942ab8a14129f6b2b9e47000ee6611d53442b33aff9cd4365e0eaf72f5f7ba9d007a180af5e2162d12128b8bcd4a3501bf5f21ec79f03046a0fbb6cdb55dddc8e67c5d9958383367790bd1cbe1645eed969a51b0506f76790d80dda60ee111ca44fddaef79a3bd1dd21e880977481d9ed58e30380e5f804f550d1b68a4e5040036000c002e014000000000000000fb00c700d4eb120fb990f312f6dc1cd1e2fabc17153e9e0bbaa255bfea657b66e5ef6d5c44b7851528115b5080920b3f7a5edb8c5c6ae63c4a8cdf26b60506f9d7c3e977b7c1e05b8754f234b727319ae25f75a8362c0ff160b5f62b0de762efb0f9db7ffec3550c9d534a1176d18e6d6f61566315b529b950f78d46ac1820c550cd6f077c640ec35a5249f5a5aa9df7105aa8c530c3a17f7e1e1990295c5930330f21228ad9a4e30a7223df2f8a594967f607d338a8269c20259a25c9d884f6e6f07412d5c19b28e02d333fef616a1d3bf2edf35e8b6bb815996fca3b386d3ba3f98e2e9116f6422a6f544d72c6ec9f31440c2b49d2df2a61faf400"], 0xbec}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, 0x6e)
prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40)
setitimer$auto(0x7, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
executing program 6:
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c61ec00)
mmap$auto(0x0, 0x20009, 0x8, 0xeb1, 0x401, 0x40008000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x9, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x1)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x200009}, 0x1}, 0x2, 0x0)
socket(0x11, 0x80003, 0x300)
socket(0xb, 0x0, 0x8000)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x400000000008000)
close_range$auto(r1, 0x8, 0x0)
socket(0x2b, 0x1, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
statx$auto(r2, 0x0, 0x6d7, 0x6, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
executing program 4:
socket(0x2, 0x80000, 0x300)
openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0)
unshare$auto(0x40000080)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20c8c2, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x9, 0x24de, 0x16, 0x401, 0xd5be)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x2381, 0x0)
ioctl$auto(0x3, 0xc0585605, 0x38)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a)
sendfile$auto(0x1, 0x3, 0x0, 0x7ff)
ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000180)={0x3, 0x8dd, "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"})
sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c)
shmctl$auto(0x0, 0xd, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0)
executing program 8:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x15, 0x4, 0x18)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1100af"], 0x1ac}, 0x1, 0x0, 0x0, 0x26004814}, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon32\x00', 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x24600, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0)
sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x300, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0)
landlock_create_ruleset$auto(0x0, 0x0, 0x1)
openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/README\x00', 0xc00, 0x0)
process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0)
executing program 7:
set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x5)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async)
openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
r1 = socket$nl_generic(0x11, 0x3, 0x10)
bind$auto(r1, &(0x7f0000000200)=@generic={0x11, "0000000000000000d29e006300"}, 0x80) (async)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x10001, 0x0) (async)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async)
setfsuid$auto(0xee00) (async)
lchown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
socket(0x2, 0x1, 0x0) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/tainted\x00', 0x28002, 0x0) (async)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async, rerun: 64)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) (rerun: 64)
read$auto(r3, 0x0, 0x20)
writev$auto(r2, &(0x7f00000001c0)={0x0, 0x45}, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x6, 0xe, "1c36"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6040000}, 0x20008810) (async, rerun: 32)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptya5\x00', 0x400000, 0x0) (rerun: 32)
r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC1\x00', 0x40001, 0x0)
r8 = semctl$auto_GETPID(0x9, 0x7f, 0xb, 0xffffffff80000000)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000200)={{@raw=0x6, 0x2, 0x4, 0x6, "e94a1ce8e3316c38e2a2538481fc169dc016a9b8b2a8122e3aba2f221fa023c5eac45668513e1c103acc2fd4", @inferred=r8}, 0x0, 0x9, 0xfffffff8, @raw, @integer64={0x200, 0x41, 0x6}, "7dd277fa0c91ab6910e0f77f116a2ce71efd18d49f2407541e9c4098aa06b9362c48ba4a0ecdd2e613433228047172b60231e1f938cd105757a20820e751bc79"}) (async, rerun: 32)
ioctl$auto_TIOCGSID2(r6, 0x5429, &(0x7f00000000c0)="7f3fb7507d8f1ba1d98dade43cc2c59f9398332e18cccc97788ba0fd0952eab338a624afc27b6376e2364110577576839b04015b436327223899a74cc150231196d1890951eb7d6292437825f0f4c885dbc98acfb0aff9999a4de9795e0e07819b884609b38446b3196be9bea7c95c950c018faec27be156029820f45b66d9c8492f05baad6768709c7f4d6213e896a419be0a2c42d520671864e0febd25dd441c7509918baf1e") (async, rerun: 32)
write$auto(0x3, 0x0, 0xfdf3)
executing program 8:
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0)
preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2a)
write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8d9a5b4cf165c931477ba53f3a80c522fc11555ea", 0x51)
mmap$auto(0x0, 0x0, 0x2, 0x410, 0xffffffffffffffff, 0x3)
ioctl$auto(0xffffffffffffffff, 0x8912, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400)
shutdown$auto(0xffffffffffffffff, 0x2)
r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
mmap$auto(0x0, 0x1, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = fanotify_init$auto(0x3, 0x3)
syz_clone3(&(0x7f0000000180)={0x31466c7a6c56d22f, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000)
read$auto(r3, 0x0, 0x3ff)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x77, 0x400008, 0x8, 0x40000000001a, r2, 0xfffffffeffff208e)
pread64$auto(r1, 0x0, 0x7ff, 0x400)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x1, 0x0, 0x0, 0x0, 0x0)
write$auto(r4, 0x0, 0x100000a3d9)
ustat$auto(0x801, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fsconfig$auto(r0, 0x2, 0x0, 0x0, 0x0)
pidfd_open$auto(0x0, 0xfffffffe)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x6a)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
socket(0xa, 0x5, 0x3)
ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
syz_genetlink_get_family_id$auto_thermal(0x0, 0xffffffffffffffff)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000)
select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sync_file_range$auto(0xffffffffffffffff, 0x0, 0x8, 0xbeb)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x234, 0xdb, 0x2000000000eb1, 0x401, 0x8000)
executing program 6:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0x15)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3f}, 0x1, 0x0, 0x0, 0x400c014}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty36\x00', 0x0, 0x0)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(&(0x7f00000008c0)='/sys/kernel/debug/x86/boot_params/data\x00', 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x280000000)
r2 = set_tid_address$auto(0x0)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r2)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000)
madvise$auto(0x0, 0x2000040080040008, 0xe)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0)
write$auto(r4, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3)
connect$auto(0x3, &(0x7f00000000c0)=@llc={0x1a, 0x338, 0x5e, 0x1, 0x6, 0x5, @local}, 0x10)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
executing program 4:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 8)
executing program 7:
r0 = epoll_create$auto(0x8)
epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0)
ioctl$auto_SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000480)="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")
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{0x40000072, 0x400, 0x1000000000000010}]})
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
read$auto_proc_pid_maps_operations_internal(r0, &(0x7f0000000040)=""/13, 0xd)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00')
executing program 6:
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x201, 0x0)
ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000000))
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/drivers\x00', 0x400, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x2})
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2100, 0x0)
ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000040))
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000001800)='/dev/mtd0ro\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x107, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000001700), r1)
sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x38, r6, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x96}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x187a6d4a3365006f}, 0x40010)
openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff)
msgctl$auto_IPC_STAT(0x3, 0x2, &(0x7f00000002c0)={{0x7, <r9=>0xee00, 0xffffffffffffffff, 0x0, 0x9, 0x9, 0x9c8}, &(0x7f0000000200)=0x7, &(0x7f0000000240)=0x3b, 0x2, 0x141a0, 0xbe20, 0x6, 0x7, 0x3, 0x40, 0xd, @inferred=0xffffffffffffffff})
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x1260, r8, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xc34}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x46}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x101}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_STATS={0x122b, 0x1e, 0x0, 0x1, [@generic="9388bd570c92deb82a77d78a96a9e21fc08b4d23b59e6fda99671ad817d04d38be81a3054558453f100fe41026d62751", @nested={0xeb, 0x10a, 0x0, 0x1, [@nested={0x4, 0x9d}, @generic="7090b6f4f24686cec093e6b7da9f92dd45886d4e65d5f234f322b39e8b2b6d82b90fdcb0381372378249164d880873dc6d086499b7b3c2ef9cc62167e4cacdd0db00950428b3846a11c2362b6e1d71f198fa58f8f6e3042a439e0497c9c783f78005907eca20275b5de61baca05102e4f4e3fadc6de1c2bc4560b23e3326c2b17c34cbd70a96582dded8b144533bf5d4693fe5e9a89566c031765923217360df813327498bd3e8545581716d6cceb1fec3cac318d4908dbddcd245a6001c84fdf74797eff263645ba33acc2261e49e7479790db564af2a14b413345430ceeca98695fd"]}, @typed={0x8, 0x13d, 0x0, 0x0, @uid=r9}, @nested={0x1010, 0x40, 0x0, 0x1, [@typed={0x9, 0x35, 0x0, 0x0, @str='l2tp\x00'}, @generic="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"]}, @generic="fcb5e28ee63840570940d8bb8fcff20db013ae1d28de47af776a59f2a3363ac20e1847304e2458a6d2ee04d9967bd9d0ba29c5f7a11c84038b654bd1351123680a29b115f3d0f353bbd01b62525205b6aec7f67cb66f4dd4bb78ed0ee5f352501c98dafaf4748e315ceddc55fc04fb67594a764e0307d03cba733460637df6b63b00d5c28dd893322edc254a24c1da88b4c50ab5f3a4fffbede4d75025b944f06e079a919a94161c8e17952f2feb836769f1dcc76dab8bf42fcbc2337e7ae00a92f84b9d6f1f8040bf56f5aaa571d94276ca1bf30e1e25edace24209767f6ed7df4120a737f4511c0e474cb163456a003f3f7f"]}]}, 0x1260}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004)
sendmsg$auto_L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000000}, 0x40408d0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0)
executing program 4:
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0)
sendfile$auto(r1, r1, 0x0, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = open$dir(0x0, 0x42, 0x3)
r3 = open_tree$auto(r2, 0x0, 0x9001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x57, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYRESDEC=r5, @ANYRES16=r5, @ANYRES8=r0, @ANYRES8=r2, @ANYRESHEX=r4, @ANYRES32=r4, @ANYBLOB="45a77efd0a765817a8c4e7ebbae518f6be79321f", @ANYRES64=r5, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="ec2b70c50000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0xbec}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, 0x6e)
prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40)
setitimer$auto(0x7, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
executing program 8:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x14)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (fail_nth: 33)
close_range$auto(0x0, 0x5, 0x0)
executing program 7:
statmount$auto(0x0, 0x0, 0x1fe, 0xd)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x540f)
open(0x0, 0x22240, 0x154)
openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0)
execve$auto(0x0, 0x0, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, 0x0, 0x111001, 0x0)
writev$auto(r0, 0x0, 0x8)
tkill$auto(0x0, 0x7)
write$auto(0xca, &(0x7f00000002c0)='\x04>2\x1e!\xe2\x00\x94\xf2\xa2\x00\x00\x8d\xa9p\xcc\xccV\xf9ozi\xb2:\x19\x92r\xcc9\x99f\xc5\xed\x84fe\x8a\x8c\xd3*\xfe\x1dE\xa1W8\x03\xcb\tSK\xb4\x893\xf3Q\x7f\xd1|\xefp\xb1\xb3\xcer8\b=\xa4y\xd4\x88\xbc\xe0\xd1\x03\x108a\x90KG,\xf8\v\x88\xe2+\xcb\xf2v\x8bL\xa6\xaa}\x1b\xa5\xd8\x98\xc9\\f\xccT\xa1\x05\x14\x84\xbb\aF,\xc8\xc7u\x93\xe8?\x92\t\xa9`\xff\x93l\x93\xac\n\xdd\xa4\n\x8e\xec\x14\x02|\xf7\xc4\xa0\x06h\xc0\x8f\xf3g6\xb8\x1a\x18\xf2\x93\t\xe8ips\xa7\x9a\x1cFPi\x13\x89DRSO\x97\xb1\xc3\xb8Q\xa2\xb2\xa8\xc3\xd3\xf9\xd4Y\x8d\x8d\xad\x8f[\xbe\xe5\xf1\x9f\x01s\x8eg\x05\xe8\xf9\x8f\xa6g\v', 0x80)
executing program 6:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon32\x00', 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x24600, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0)
futex$auto(&(0x7f00000000c0)=0x2a08, 0xc, 0x1, 0x0, &(0x7f0000000180)=0x5, 0x2a08)
r0 = getpid()
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="202020d1027e0dc0023af10e9bfa1babfa3a3753ca9a20370a", 0x19)
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xd, 0x10000, 0x7, 0x3, 0x7ffffffd, 0xffffffffffffffff, [], {0x6, 0x1ff, 0x8c48, 0x2a2, 0x100, 0x7ffffffb, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x0, 0x5, 0x3, 0x40, 0x76c5, 0x8, 0x100000000}})
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8300f000)
mmap$auto(0x0, 0x4020009, 0xdf, 0x420000000e31, 0xffffffffffffffff, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/pci0000:00/0000:00:01.3/modalias\x00', 0x22400, 0x0)
read$auto(r2, 0x0, 0x20)
utimes$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x1, 0xfffffffffffffffc})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0)
executing program 7:
mlockall$auto(0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
modify_ldt$auto(0x1, 0x0, 0x10)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
semctl$auto(0x2, 0x9, 0x939, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
syz_clone3(&(0x7f0000000400)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x402, 0x0)
read$auto(r0, 0x0, 0x39b8)
socket(0x2, 0x80002, 0x73)
setsockopt$auto(0x3, 0x6b, 0x800001, 0xffffffffffffffff, 0x211)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0xffffffff)
openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x22c2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
modify_ldt$auto(0x807ff0000000000, 0x0, 0x40100000000aa)
executing program 8:
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c61ec00)
mmap$auto(0x0, 0x20009, 0x8, 0xeb1, 0x401, 0x40008000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x9, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x1)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
close_range$auto(0x0, 0xffffeffe, 0x2)
socket(0x11, 0x80003, 0x300)
socket(0xb, 0x0, 0x8000)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x400000000008000)
close_range$auto(r1, 0x8, 0x0)
socket(0x2b, 0x1, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
statx$auto(r2, 0x0, 0x6d7, 0x6, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
executing program 6:
socket(0x2, 0x80000, 0x300)
openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0)
unshare$auto(0x40000080)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20c8c2, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x9, 0x24de, 0x16, 0x401, 0xd5be)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x2381, 0x0)
ioctl$auto(0x3, 0xc0585605, 0x38)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a)
sendfile$auto(0x1, 0x3, 0x0, 0x7ff)
ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000180)={0x3, 0x8dd, "c52a759bf0234ba2b0937b93b6a79d10c1e30cfad64e47f156c0720013beebd77ef25574a3d8273a18114a6b3b55ad2b677ad3bb306d2645ec93f1fdfdee09a2091725b1a0c450e1325ecf05a4ad7238eb07cf3a682534f44c2bae999035e64eb850a3d728be01fdcecfdb963a5b380f10efa5cad18e9beb17029e812665c4d9238d0c83f0b3e5c15a229964081d71e7d0b7b8c25f203b69d7550b198dc1652edf17b23fe2508525268fae97323ab882162d4fd69f096224f368f429931000c892c982753189fbe214c6c1c97a484a8b843ff1e6769c844575329f672c20e2a67c2208d9caa546b7440f30f403330afb7e96274d791fef7f71d1ec341a2845bf"})
sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c)
shmctl$auto(0x0, 0xd, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0)
executing program 4:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0x15)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3f}, 0x1, 0x0, 0x0, 0x400c014}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty36\x00', 0x0, 0x0)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(&(0x7f00000008c0)='/sys/kernel/debug/x86/boot_params/data\x00', 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x280000000)
r2 = set_tid_address$auto(0x0)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r2)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000)
madvise$auto(0x0, 0x2000040080040008, 0xe)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0)
write$auto(r4, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3)
connect$auto(0x3, &(0x7f00000000c0)=@llc={0x1a, 0x338, 0x5e, 0x1, 0x6, 0x5, @local}, 0x10)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
executing program 6:
socket(0x2, 0x80000, 0x300)
openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0)
unshare$auto(0x40000080)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20c8c2, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x9, 0x24de, 0x16, 0x401, 0xd5be)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x2381, 0x0)
ioctl$auto(0x3, 0xc0585605, 0x38)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ff)
ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000180)={0x3, 0x8dd, "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"})
sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c)
shmctl$auto(0x0, 0xd, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0)
executing program 7:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)
executing program 8:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7)
r0 = prctl$auto(0x3e, 0x9a3f, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xde, 0xeb0, r0, 0x3)
r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(r1, 0x0, 0xb, 0x1)
setitimer$auto(0x2, 0x0, 0x0)
setitimer$auto_ITIMER_VIRTUAL(0x1, 0x0, 0x0)
unshare$auto(0x40000080)
setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000180)={{0x34c, 0x9}, {0xfffffffffffffffd}}, 0x0)
setitimer$auto(0x5, &(0x7f0000000240)={{0xfea07d8, 0x9d}, {0xfffffffffffffffb, 0x9}}, &(0x7f0000000280)={{0x4, 0x200}, {0x2, 0x6}})
r2 = socket(0x6, 0x1, 0x5)
ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f00000000c0)={<r3=>r2, 0xf})
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r3, 0x80184132, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0x10401, 0x0)
prctl$auto(0x3a, 0x7fffffff, 0x0, 0x1, 0x1)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
clone$auto(0x2, 0x81, 0x0, 0x0, 0x3)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0)
read$auto(r5, 0x0, 0x20)
mmap$auto(0xfff, 0x20009, 0xf808, 0xebe, 0x401, 0x8000)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-mmap$auto-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
single: successfully extracted reproducer
found reproducer with 11 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-mmap$auto-io_uring_setup$auto-openat$auto_iommufd_fops_main
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-mmap$auto-io_uring_setup$auto-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto(0xffffffffffffffff, 0x3b8e, r0) (fail_nth: 9)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-mmap$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r0, 0x3b8e, 0xffffffffffffffff) (fail_nth: 9)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-io_uring_setup$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket$nl_generic-openat$auto_proc_pid_set_comm_operations_base-openat$auto_nsim_pp_hold_fops_netdev-io_uring_setup$auto-openat$auto_iommufd_fops_main-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0) (fail_nth: 9)

program crashed: KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
validation run: crashed=true
reproducing took 1h14m8.544332963s
repro crashed as (corrupted=false):
R13: 00007fb44b1d5fa0 R14: 00007fb44b1d5fa0 R15: 0000000000000003
 </TASK>
==================================================================
BUG: KASAN: slab-use-after-free in instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
BUG: KASAN: slab-use-after-free in atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:400 [inline]
BUG: KASAN: slab-use-after-free in __refcount_dec include/linux/refcount.h:455 [inline]
BUG: KASAN: slab-use-after-free in refcount_dec include/linux/refcount.h:476 [inline]
BUG: KASAN: slab-use-after-free in iommufd_eventq_fops_release+0x45/0xc0 drivers/iommu/iommufd/eventq.c:376
Write of size 4 at addr ffff888059c97804 by task syz.0.46/6164

CPU: 0 UID: 0 PID: 6164 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xcd/0x630 mm/kasan/report.c:482
 kasan_report+0xe0/0x110 mm/kasan/report.c:595
 check_region_inline mm/kasan/generic.c:183 [inline]
 kasan_check_range+0x100/0x1b0 mm/kasan/generic.c:189
 instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
 atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:400 [inline]
 __refcount_dec include/linux/refcount.h:455 [inline]
 refcount_dec include/linux/refcount.h:476 [inline]
 iommufd_eventq_fops_release+0x45/0xc0 drivers/iommu/iommufd/eventq.c:376
 __fput+0x402/0xb70 fs/file_table.c:468
 task_work_run+0x14d/0x240 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop+0xeb/0x110 kernel/entry/common.c:43
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x41c/0x4c0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb44af8eba9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc3d692818 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: fffffffffffffff2 RBX: 00007fb44b1d5fa0 RCX: 00007fb44af8eba9
RDX: 0000000000000004 RSI: 0000000000003b8e RDI: 0000000000000006
RBP: 00007ffc3d692870 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fb44b1d5fa0 R14: 00007fb44b1d5fa0 R15: 0000000000000003
 </TASK>

Allocated by task 6164:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:388 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:405
 kasan_kmalloc include/linux/kasan.h:260 [inline]
 __do_kmalloc_node mm/slub.c:4376 [inline]
 __kmalloc_noprof+0x223/0x510 mm/slub.c:4388
 kmalloc_noprof include/linux/slab.h:909 [inline]
 kzalloc_noprof include/linux/slab.h:1039 [inline]
 _iommufd_object_alloc+0x23/0x1a0 drivers/iommu/iommufd/main.c:40
 _iommufd_object_alloc_ucmd+0xb2/0x160 drivers/iommu/iommufd/main.c:84
 iommufd_fault_alloc+0x93/0x420 drivers/iommu/iommufd/eventq.c:430
 iommufd_fops_ioctl+0x34d/0x540 drivers/iommu/iommufd/main.c:508
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:598 [inline]
 __se_sys_ioctl fs/ioctl.c:584 [inline]
 __x64_sys_ioctl+0x18b/0x210 fs/ioctl.c:584
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 6164:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:243 [inline]
 __kasan_slab_free+0x60/0x70 mm/kasan/common.c:275
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2422 [inline]
 slab_free mm/slub.c:4695 [inline]
 kfree+0x2b4/0x4d0 mm/slub.c:4894
 iommufd_object_abort+0x10c/0x170 drivers/iommu/iommufd/main.c:124
 iommufd_fops_ioctl+0x381/0x540 drivers/iommu/iommufd/main.c:512
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:598 [inline]
 __se_sys_ioctl fs/ioctl.c:584 [inline]
 __x64_sys_ioctl+0x18b/0x210 fs/ioctl.c:584
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff888059c97800
 which belongs to the cache kmalloc-cg-512 of size 512
The buggy address is located 4 bytes inside of
 freed 512-byte region [ffff888059c97800, ffff888059c97a00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59c94
head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
memcg:ffff888026413e01
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b84b140 dead000000000122 0000000000000000
raw: 0000000000000000 0000000000100010 00000000f5000000 ffff888026413e01
head: 00fff00000000040 ffff88801b84b140 dead000000000122 0000000000000000
head: 0000000000000000 0000000000100010 00000000f5000000 ffff888026413e01
head: 00fff00000000002 ffffea0001672501 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5224, tgid 5224 (klogd), ts 132635729272, free_ts 132529818110
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1851
 prep_new_page mm/page_alloc.c:1859 [inline]
 get_page_from_freelist+0x132b/0x38e0 mm/page_alloc.c:3858
 __alloc_frozen_pages_noprof+0x261/0x23f0 mm/page_alloc.c:5148
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2416
 alloc_slab_page mm/slub.c:2492 [inline]
 allocate_slab mm/slub.c:2660 [inline]
 new_slab+0x247/0x330 mm/slub.c:2714
 ___slab_alloc+0xcf2/0x1750 mm/slub.c:3901
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3992
 __slab_alloc_node mm/slub.c:4067 [inline]
 slab_alloc_node mm/slub.c:4228 [inline]
 __do_kmalloc_node mm/slub.c:4375 [inline]
 __kmalloc_node_track_caller_noprof+0x2ee/0x510 mm/slub.c:4395
 kmalloc_reserve+0xef/0x2c0 net/core/skbuff.c:600
 __alloc_skb+0x166/0x380 net/core/skbuff.c:669
 alloc_skb include/linux/skbuff.h:1336 [inline]
 alloc_skb_with_frags+0xe0/0x860 net/core/skbuff.c:6665
 sock_alloc_send_pskb+0x7fb/0x990 net/core/sock.c:2958
 unix_dgram_sendmsg+0x3e9/0x17f0 net/unix/af_unix.c:2153
 sock_sendmsg_nosec net/socket.c:714 [inline]
 __sock_sendmsg net/socket.c:729 [inline]
 __sys_sendto+0x4a3/0x520 net/socket.c:2228
 __do_sys_sendto net/socket.c:2235 [inline]
 __se_sys_sendto net/socket.c:2231 [inline]
 __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2231
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
page last free pid 5980 tgid 5980 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1395 [inline]
 __free_frozen_pages+0x7d5/0x10f0 mm/page_alloc.c:2895
 discard_slab mm/slub.c:2758 [inline]
 __put_partials+0x165/0x1c0 mm/slub.c:3223
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:340
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4191 [inline]
 slab_alloc_node mm/slub.c:4240 [inline]
 kmem_cache_alloc_noprof+0x1cb/0x3b0 mm/slub.c:4247
 getname_flags.part.0+0x4c/0x550 fs/namei.c:146
 getname_flags include/linux/audit.h:322 [inline]
 getname include/linux/fs.h:2919 [inline]
 __do_sys_unlink fs/namei.c:4696 [inline]
 __se_sys_unlink fs/namei.c:4694 [inline]
 __x64_sys_unlink+0xb0/0x110 fs/namei.c:4694
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff888059c97700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888059c97780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888059c97800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff888059c97880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888059c97900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
R13: 00007fb44b1d5fa0 R14: 00007fb44b1d5fa0 R15: 0000000000000003
 </TASK>
==================================================================
BUG: KASAN: slab-use-after-free in instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
BUG: KASAN: slab-use-after-free in atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:400 [inline]
BUG: KASAN: slab-use-after-free in __refcount_dec include/linux/refcount.h:455 [inline]
BUG: KASAN: slab-use-after-free in refcount_dec include/linux/refcount.h:476 [inline]
BUG: KASAN: slab-use-after-free in iommufd_eventq_fops_release+0x45/0xc0 drivers/iommu/iommufd/eventq.c:376
Write of size 4 at addr ffff888059c97804 by task syz.0.46/6164

CPU: 0 UID: 0 PID: 6164 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xcd/0x630 mm/kasan/report.c:482
 kasan_report+0xe0/0x110 mm/kasan/report.c:595
 check_region_inline mm/kasan/generic.c:183 [inline]
 kasan_check_range+0x100/0x1b0 mm/kasan/generic.c:189
 instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
 atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:400 [inline]
 __refcount_dec include/linux/refcount.h:455 [inline]
 refcount_dec include/linux/refcount.h:476 [inline]
 iommufd_eventq_fops_release+0x45/0xc0 drivers/iommu/iommufd/eventq.c:376
 __fput+0x402/0xb70 fs/file_table.c:468
 task_work_run+0x14d/0x240 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop+0xeb/0x110 kernel/entry/common.c:43
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x41c/0x4c0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb44af8eba9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc3d692818 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: fffffffffffffff2 RBX: 00007fb44b1d5fa0 RCX: 00007fb44af8eba9
RDX: 0000000000000004 RSI: 0000000000003b8e RDI: 0000000000000006
RBP: 00007ffc3d692870 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fb44b1d5fa0 R14: 00007fb44b1d5fa0 R15: 0000000000000003
 </TASK>

Allocated by task 6164:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:388 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:405
 kasan_kmalloc include/linux/kasan.h:260 [inline]
 __do_kmalloc_node mm/slub.c:4376 [inline]
 __kmalloc_noprof+0x223/0x510 mm/slub.c:4388
 kmalloc_noprof include/linux/slab.h:909 [inline]
 kzalloc_noprof include/linux/slab.h:1039 [inline]
 _iommufd_object_alloc+0x23/0x1a0 drivers/iommu/iommufd/main.c:40
 _iommufd_object_alloc_ucmd+0xb2/0x160 drivers/iommu/iommufd/main.c:84
 iommufd_fault_alloc+0x93/0x420 drivers/iommu/iommufd/eventq.c:430
 iommufd_fops_ioctl+0x34d/0x540 drivers/iommu/iommufd/main.c:508
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:598 [inline]
 __se_sys_ioctl fs/ioctl.c:584 [inline]
 __x64_sys_ioctl+0x18b/0x210 fs/ioctl.c:584
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 6164:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:243 [inline]
 __kasan_slab_free+0x60/0x70 mm/kasan/common.c:275
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2422 [inline]
 slab_free mm/slub.c:4695 [inline]
 kfree+0x2b4/0x4d0 mm/slub.c:4894
 iommufd_object_abort+0x10c/0x170 drivers/iommu/iommufd/main.c:124
 iommufd_fops_ioctl+0x381/0x540 drivers/iommu/iommufd/main.c:512
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:598 [inline]
 __se_sys_ioctl fs/ioctl.c:584 [inline]
 __x64_sys_ioctl+0x18b/0x210 fs/ioctl.c:584
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff888059c97800
 which belongs to the cache kmalloc-cg-512 of size 512
The buggy address is located 4 bytes inside of
 freed 512-byte region [ffff888059c97800, ffff888059c97a00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59c94
head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
memcg:ffff888026413e01
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b84b140 dead000000000122 0000000000000000
raw: 0000000000000000 0000000000100010 00000000f5000000 ffff888026413e01
head: 00fff00000000040 ffff88801b84b140 dead000000000122 0000000000000000
head: 0000000000000000 0000000000100010 00000000f5000000 ffff888026413e01
head: 00fff00000000002 ffffea0001672501 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5224, tgid 5224 (klogd), ts 132635729272, free_ts 132529818110
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1851
 prep_new_page mm/page_alloc.c:1859 [inline]
 get_page_from_freelist+0x132b/0x38e0 mm/page_alloc.c:3858
 __alloc_frozen_pages_noprof+0x261/0x23f0 mm/page_alloc.c:5148
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2416
 alloc_slab_page mm/slub.c:2492 [inline]
 allocate_slab mm/slub.c:2660 [inline]
 new_slab+0x247/0x330 mm/slub.c:2714
 ___slab_alloc+0xcf2/0x1750 mm/slub.c:3901
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3992
 __slab_alloc_node mm/slub.c:4067 [inline]
 slab_alloc_node mm/slub.c:4228 [inline]
 __do_kmalloc_node mm/slub.c:4375 [inline]
 __kmalloc_node_track_caller_noprof+0x2ee/0x510 mm/slub.c:4395
 kmalloc_reserve+0xef/0x2c0 net/core/skbuff.c:600
 __alloc_skb+0x166/0x380 net/core/skbuff.c:669
 alloc_skb include/linux/skbuff.h:1336 [inline]
 alloc_skb_with_frags+0xe0/0x860 net/core/skbuff.c:6665
 sock_alloc_send_pskb+0x7fb/0x990 net/core/sock.c:2958
 unix_dgram_sendmsg+0x3e9/0x17f0 net/unix/af_unix.c:2153
 sock_sendmsg_nosec net/socket.c:714 [inline]
 __sock_sendmsg net/socket.c:729 [inline]
 __sys_sendto+0x4a3/0x520 net/socket.c:2228
 __do_sys_sendto net/socket.c:2235 [inline]
 __se_sys_sendto net/socket.c:2231 [inline]
 __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2231
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
page last free pid 5980 tgid 5980 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1395 [inline]
 __free_frozen_pages+0x7d5/0x10f0 mm/page_alloc.c:2895
 discard_slab mm/slub.c:2758 [inline]
 __put_partials+0x165/0x1c0 mm/slub.c:3223
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:340
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4191 [inline]
 slab_alloc_node mm/slub.c:4240 [inline]
 kmem_cache_alloc_noprof+0x1cb/0x3b0 mm/slub.c:4247
 getname_flags.part.0+0x4c/0x550 fs/namei.c:146
 getname_flags include/linux/audit.h:322 [inline]
 getname include/linux/fs.h:2919 [inline]
 __do_sys_unlink fs/namei.c:4696 [inline]
 __se_sys_unlink fs/namei.c:4694 [inline]
 __x64_sys_unlink+0xb0/0x110 fs/namei.c:4694
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff888059c97700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888059c97780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888059c97800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff888059c97880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888059c97900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================