Extracting prog: 3h58m37.458893011s
Minimizing prog: 36m32.414457286s
Simplifying prog options: 0s
Extracting C: 1m9.801436385s
Simplifying C: 12m3.620015225s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH-socket$nl_generic-mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ppoll$auto-openat$auto_debugfs_devm_entry_ops_file-openat$auto_snd_pcm_oss_f_reg_pcm_oss-read$auto-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_generic-io_uring_setup$auto-mmap$auto-socket$nl_generic-socketpair$auto-adjtimex$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 11, 29, 10, 18, 30, 25, 26, 6, 15, 29, 4, 28, 10, 18, 3, 30, 6, 20, 5, 29, 26, 23, 12]
detailed listing:
executing program 1:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x80044df9, 0x5) (fail_nth: 6)
executing program 1:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22040, 0x75)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, 0x3}, 0x55)
get_robust_list$auto(0x0, 0x0, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
executing program 1:
socket(0x1e, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe0742, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x101401, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="86ad180916cd35e093b9901f03de02ef", 0x5d)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x2, 0x88)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/arch_status\x00', 0x8203, 0x0)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x2a401, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r3, 0x8910, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
close_range$auto(0x2, 0xa, 0x0)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x6c54, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x228000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)
ioctl$auto(0x3, 0x89e0, 0x91)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x4611, 0x0)
executing program 2:
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, r0}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x294}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x62}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xff}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c805}, 0x2004c014)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
open(&(0x7f00000004c0)='./cgroup\x00', 0x181080, 0x118)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x14000000000, 0xf)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0xa, 0x801, 0x106)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
io_uring_setup$auto(0x6, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0)
read$auto_def_blk_fops_fs(r0, &(0x7f0000000140)=""/194, 0xc2)
mmap$auto(0x0, 0x428, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f00000001c0)=0x401)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/stable_node_chains_prune_millisecs\x00', 0x400, 0x0)
read$auto(r2, 0x0, 0x9)
sendmmsg$auto(r1, 0x0, 0xfffffffd, 0xe1d3)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/034/001\x00', 0x181042, 0x0)
ioctl$auto_USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000140)=0x81)
io_uring_setup$auto(0x59, 0x0)
open(0x0, 0x64842, 0x94)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x2)
r4 = socket(0x23, 0x80805, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00'})
r5 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
pread64$auto(r5, 0x0, 0x4, 0x200000000005)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r6)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x40010)
sendmsg$auto_CTRL_CMD_GETPOLICY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r7, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r6)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ec0)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_RXSC_CONFIG={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xa3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
executing program 2:
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28003)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/irq/8/smp_affinity\x00', 0x400000, 0x0)
epoll_create$auto(0x7)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = prctl$auto_PR_SET_MM_ARG_START(0x6, 0x8, 0x0, 0x8001, 0x2)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x20000800)
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x56603, 0x0)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
setregid$auto(0x0, 0x3)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
wait4$auto(0x0, 0xfffffffffffffffc, 0x60000002, 0x0)
ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$auto(0x3, 0xae41, r1)
mmap$auto(0xf4ff, 0x20009, 0xde, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x2b, 0x6, 0x7)
mmap$auto(0x12000000, 0x400008, 0x6, 0x8000000018, 0x2, 0x8000)
executing program 2:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, 0x0, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10007)
r1 = open_tree$auto(r0, 0x0, 0x1001)
r2 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000040)=0x9d)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0)
executing program 3:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x0, 0xfffff004, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = open(0x0, 0x261c2, 0x84)
r1 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0x10)
bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc)
ioctl$auto(0x3, 0x80044df9, 0x5)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, r1, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xaf5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x2000000)
close_range$auto(0x2, 0x8, 0x0)
clock_adjtime$auto(0xffffffff, &(0x7f0000000300)={0x9, 0x0, 0x61, 0x16432c6, 0x3, 0xe08, 0x4, 0x0, 0x8, 0xff, 0x8, {0x7ff, 0x31}, 0x2, 0x1, 0x100000000, 0x1, 0x0, 0xffffffff7fffffff, 0x2, 0x1800, 0x2, 0xfffffffffffffffc, 0x59c})
open(0x0, 0x22240, 0x155)
r2 = socket(0x2, 0x80802, 0x0)
setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8)
setsockopt$auto(0x3, 0x1, 0x3f, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x55)
socket(0x10, 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
ioperm$auto(0x3, 0xe, 0x2000000000000149)
quotactl_fd$auto(0xffffffffffffffff, 0x7, 0x0, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop4/queue/max_integrity_segments\x00', 0x4000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0xa7, 0x0, 0x8000, 0x1}, 0x8}, 0x4, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
write$auto(r3, 0x0, 0x81)
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/suspend_stats/failed_resume_early\x00', 0x181000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/45, 0x2d)
r1 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/stats\x00', 0x90180, 0x0)
ioctl$auto(r1, 0x7, 0xffffffffffffffff)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x7fffffff}, 0x9, 0x20000000)
r1 = io_uring_setup$auto(0x1, 0x0)
socket(0x1f, 0x2, 0x200000)
sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x4008080)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, &(0x7f0000000080)=[0x3, 0x4010])
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0)
ioctl$auto(r3, 0xc0285629, r3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(0x0, 0x6041, 0x0)
socket(0x6, 0x2, 0x6)
semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0)
pidfd_open$auto(0x0, 0x5)
r4 = socket(0x10, 0x3, 0xa)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'})
executing program 3:
r0 = socket(0x2, 0x3, 0x1)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0)
connect$auto(r0, &(0x7f0000000000), 0x55)
sendmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000100)="c9a19b9bd45daf8d1e42325618d266e9b4d29346a538f4501870f63224261ea46d2048306cb48caaa96d8e74944fe4311b40ed00640d041ca43967b3a4f18b86c38c26c9df10a988d1f2c1c69262f1908a4880ba65a9fca956c49dc5990384089f8c005c64f32d9bbba6f289964068a8ced940397118c0aa87e26591cfeead8827333219be3c5524a56ceb46dbe9688b2156", 0x10000, 0x0, 0x2, 0x0, 0x3, 0xfffff2cf}, 0x6}, 0x2319, 0x5)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc001, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0)
executing program 0:
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
clock_nanosleep$auto(0x1, 0x200, 0x0, 0x0)
unshare$auto(0x200)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r0, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0)
landlock_restrict_self$auto(r1, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
pivot_root$auto(&(0x7f0000000300)='.\x00\xaf\xeb)\xae$\xfc\x00\xf8\x05AC\x9f\xbbR\xec\xc6c\x85\xc8\xa7\xe84sF\xe3U\x94\x99\x8fR\xd0\x98\f\xa5\xb1S\x7f\xc3\xa5\xc0\x97\x10qa\r\x02\xd2\xc8\xd2\x8e\xc7\x80\x11\x06#\xf5\x18|\xdc\x81Ai\xb6\x96iaR\xdbA\x04\x10\x99\xe6\xdb\xae`G\x1d9`T\xd8\xc6\xea\xf7\x96\xb5\xe9\x164e\xb1 S\x8f\x12_\x15y\x91F\xc89\xb1\xd24?\x89.,Z\xba,\"v\xde\xc4\xe0\x84\xca|\"\x96V\xd5P\xe4\xb9\xea\x88\x15\xacs\xc6\x83\xd6\x81\xd7\x11\x88\x9c\xdd\x8a\x0e\xea\x19|\x7f\xe3A8x\xce\xc1!q\xbbi\\\xd8\xa9\xe0\xed\x9e\x19\xc0IC9^\xfcJG\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000280)='.\x00')
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x45b, 0x4, 0xffffffff, 0x2}, 0x3e37, 0xfffffff4, 0x8)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x121141, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080))
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r0, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
mmap$auto(0x0, 0xfffffffffffffffd, 0xdf, 0xeb1, r0, 0x8000)
executing program 0:
mmap$auto(0x0, 0xe983, 0x2000000df, 0xeb1, 0x401, 0x8000)
clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
sendmsg$auto_VDPA_CMD_DEV_NEW(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0x8}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x9}, @VDPA_ATTR_DEV_FEATURES={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4000004)
socket(0x2b, 0x1, 0x1)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/17, 0x11)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch0\x00', 0xe0800, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), r1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendto$auto(0xffffffffffffffff, &(0x7f0000000480)="9bb9d4b346d5aaae67fe300fd8c0b0c941bb07fd74c160465854c660d80d1b3678b39749221427f9faedd24c3d3ed6b5850d890493f1ef537be05ec113201a8260e43bdb18ba2637c993ab2b12826b59eff30be9cd6fefa80de4601a420001c1f1c037c4b6109633c4764c019fffb8b29dc54d19fb95bf80e078198173853ea2b6882ac18ec68f9a8fe800c79e17f83831f11848b55e41b37c744fd74b4da03896002060be0a183ce35f73cefc86bf7f7673a30792a933c1aed50d126350777162bc9b1ab151d32d0e1f50f56cf3f516f08170b7c5", 0x7fffffff, 0xa, 0x0, 0x10001)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8000, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000476, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8)
syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000800), r2)
sendmsg$auto_HANDSHAKE_CMD_DONE(r2, 0x0, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003680)={'wlan0\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(r5, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@typed={0x4, 0x6, 0x0, 0x0, @binary}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x474, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xffb3}, @NL80211_ATTR_SAR_SPEC={0x2c, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x86}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}]}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_STA_FLAGS2={0x50, 0x43, "bab3dfe1724c26ce3b77431802dd3e046c34e87bfcd7a94c80137560e44a2a48484eb8f784384f0c1c986c8970edd65ed3d062aeb0b309a8eb4ae2029885453a931f790d6b95607fc392f8b2"}, @NL80211_ATTR_BSS_SELECT={0x3b6, 0xe3, 0x0, 0x1, [@generic="906454d8f03346460dcc09f652ae3c44013bbdde0a2128257fa26cdeb82b696d37666ddbf74b67f562828c73ca59c61a5db3ad5286c61da52ec70d4124b44ca5527d876ebd7f3fdfc340656bc7f5a9e3484554b741263ecae0f7d0f6b1ec1f49c400be9efcff1f80cd6c49deb780017d7c6163e8ec947af78a54da", @nested={0x86, 0xab, 0x0, 0x1, [@nested={0x4, 0x141}, @nested={0x4, 0x113}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x6}, @generic="8d91b63429a596a0cbd75287b65bc9e161c1fa4f1a8352a43cf3afa38976bfcb08e97f728effd850850ef9def0683676b82d94f977b0df1076b7c2f6656d64234dfcd610790a281cf76db2bdf729f75b9a85a0", @generic="c9b85558dffdda924b2400d04ab4b9", @typed={0x8, 0xca, 0x0, 0x0, @u32=0xfe84}, @nested={0x4, 0x8b}, @typed={0x4, 0xb0}]}, @generic="d36166b3066f6dbc2a3f9d26afb7b635b150268f3d81f7e04f4051502b0836c852efa1d9a1279d77d329d6026b60320f4aaefffaf74c4d457e173a246c09489403f23111d16196fbd79d2db7cc711bcfaa5221e1bd87db0c07aab3de819d47bebd25dab9b9733871c28f1aed2e0e79c0b7e3e104baa50faed71fbdb5b93a6c94f92b8b0f78e790ac3a7121a353b4b47bdb4ed45f81441c91b2dd8da183a3edfd209920df45b47e8841fec23ddb1e94f74b0d4b6da6acb7e00dbe9351ee0457c4b29943e3aa3b7cf7ed408b4a41fb6e5bbd3bdefe7f0c7ccc215d05e1", @generic="a7675622937a09df41b4a6bb8b09a529a9a56a095a91e54079719660d37aa490176cb00d1e9e6b80e3d68a69b1112a096f", @typed={0xfa, 0x57, 0x0, 0x0, @binary="fdc401bb47783d79c5f81b0d1f5b72532db56bbfce5a040b94d5dd4004cd4dd3569591d722c954be66abf92b6ac1ea89ae765b103356c61e06e9785e0bea370b51df100fbee8d6676b23525c62f505c06828b68d1c8ca5d9bcfd72812e16ec4d8e462d01c19884bb238b0f3a08aa493431f7e9d38295fb7170099e487306cbfeb191ac8ea316456f129eb22edfbe56c8b89e6aa2806a6e944852e3356b7f3b6fbd4408571f9efb3863ec0ab255341dc657df7b0d6324446c35cc1270922f8634aa12e433faaa07688cee5a203656668ac90f98d08c994ca79ed8b96485cc02c1681f0f13ce2ca78dbb51f27bbe7ccbe8574e0e95a769"}, @typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@multicast2}, @generic="b781e7725e1d13299e4ce79860fbf51da88a7e58faac0cc260f28051eccdc8218dc670c75cccbac1671c55133ccbff9095e8aa9c18c16682d7c2c33ac533da30291585bba2ee41022f369efb6ace47ba64a3ac8dfd3b88ba185767bdb34350902648849a771f5cd9f42cfcb8e5d201a2a34a5e74b391c935e91be553f6916c47a6cb004077e7ce5ce4cd70609e217c1a48660c615c9e8775c4445b3adda7"]}, @NL80211_ATTR_SSID={0x1c, 0x34, "b42f7427e95bd9440ae73a0cc7670e6e895b500a071ddb0c"}]}, 0x474}}, 0x28814)
setsockopt$auto_SO_MAX_PACING_RATE(r2, 0x6, 0x2f, &(0x7f0000000000)='\'%^,-%\x00', 0x1)
executing program 3:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.1/usb11/ep_00/wMaxPacketSize\x00', 0x10040, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
executing program 0:
mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec6\x00', 0x80, 0x0)
close_range$auto(0x2, r0, 0x70)
r1 = socket(0x2, 0x80802, 0x0)
r2 = socket(0x2, 0x1, 0x0)
pipe$auto(&(0x7f0000000200)=r1)
memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d)
fcntl$auto(0x3, 0x4, 0xa553)
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f00000001c0), 0x200480, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
connect$auto(0x3, &(0x7f0000000140), 0x55)
select$auto(0xa, 0x0, 0x0, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_STOP_POLL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
socketpair$auto(0x5, 0x80000001, 0x7, &(0x7f0000000180)=0x9)
shutdown$auto(0x200000003, 0x2)
executing program 3:
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/driver/nvram\x00', 0x40000, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000000)='/proc/threaZ-sml\x01/net/ip6_mr_vif<', 0x205)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/4087, 0xff7)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000400)=""/232, 0xe8)
executing program 2:
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x109482, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x6a1, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
r1 = socket(0x28, 0x1, 0x0)
r2 = socket(0x1, 0x1, 0x1)
open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0xa, 0x0)
r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), r1)
sendmsg$auto_SMC_NETLINK_GET_SYS_INFO(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, "48d0394fbe58c67e31514380c8402da1126e3b4af51da14b8d7c17b4e245d09b812a242643d4956320931a922c3f6aaaa6c2face8187a3b7711f7466d9e06029cc3e206fdf084e3b4c677fe2d4bcd1e8d0f6"}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3)
open(&(0x7f00000000c0)='./bus\x00', 0x12ba7e, 0x45)
close_range$auto(0x2, 0x8, 0x0)
unlink$auto(&(0x7f0000000040)='./bus\x00')
bpf$auto(0x3, 0x0, 0x5)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x149102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x10000800000003)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r5, 0x0, 0x3)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0)
executing program 3:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x10000)
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = geteuid()
r3 = gettid()
ptrace$auto_PTRACE_POKETEXT(0x4, r3, 0x800, 0x9)
msgctl$auto_MSG_STAT(0xf, 0xb, &(0x7f0000000200)={{0x13b, r2, <r4=>0xee01, 0x7, 0xa, 0xe, 0xff}, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x6, 0x9, 0x7, 0xe61d, 0x9, 0x100000001, 0x5, 0x2, 0x9, @inferred=r3, @inferred=r3})
msgctl$auto_IPC_RMID(0x7, 0x0, &(0x7f00000002c0)={{0x40, r2, r4, 0x4, 0xf, 0x5, 0xd}, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x40, 0x55be814, 0x8, 0x8, 0x5, 0x100000000, 0x5, 0x4, 0x4, @raw=0x5})
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf2503000000040008000c0007800800e900", @ANYRES32=r2, @ANYBLOB="07b569e90904a84e10de82ee77115b49f43e36a00f78900d062e53fecf4dc98cf625d5c6fa694267ae70df036ac78e70b42cfc0064776760a861b36ba3b443bfa1fd395b3b044c5b1c0e9466"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r5 = getpgid$auto(0x0)
timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @raw=0x2, 0x4, @_tid=r5}, &(0x7f0000000040)=0x9)
r6 = socket(0x11, 0x80003, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x400000000000003, 0x29, 0x13, 0x0, 0x56b)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000)
socket(0x11, 0x80003, 0x300)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r8, 0x0, 0x20)
writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)
setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x8)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH-socket$nl_generic-mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ppoll$auto-openat$auto_debugfs_devm_entry_ops_file-openat$auto_snd_pcm_oss_f_reg_pcm_oss-read$auto-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_generic-io_uring_setup$auto-mmap$auto-socket$nl_generic-socketpair$auto-adjtimex$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 1m40s
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 11, 29, 10, 18, 30, 25, 26, 6, 15, 29, 4, 28, 10, 18, 3, 30, 6, 20, 5, 29, 26, 23, 12]
detailed listing:
executing program 1:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x80044df9, 0x5) (fail_nth: 6)
executing program 1:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22040, 0x75)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, 0x3}, 0x55)
get_robust_list$auto(0x0, 0x0, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
executing program 1:
socket(0x1e, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe0742, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x101401, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="86ad180916cd35e093b9901f03de02ef", 0x5d)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x2, 0x88)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/arch_status\x00', 0x8203, 0x0)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x2a401, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r3, 0x8910, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
close_range$auto(0x2, 0xa, 0x0)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x6c54, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x228000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)
ioctl$auto(0x3, 0x89e0, 0x91)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x4611, 0x0)
executing program 2:
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, r0}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x294}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x62}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xff}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c805}, 0x2004c014)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
open(&(0x7f00000004c0)='./cgroup\x00', 0x181080, 0x118)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x14000000000, 0xf)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0xa, 0x801, 0x106)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
io_uring_setup$auto(0x6, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0)
read$auto_def_blk_fops_fs(r0, &(0x7f0000000140)=""/194, 0xc2)
mmap$auto(0x0, 0x428, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f00000001c0)=0x401)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/stable_node_chains_prune_millisecs\x00', 0x400, 0x0)
read$auto(r2, 0x0, 0x9)
sendmmsg$auto(r1, 0x0, 0xfffffffd, 0xe1d3)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/034/001\x00', 0x181042, 0x0)
ioctl$auto_USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000140)=0x81)
io_uring_setup$auto(0x59, 0x0)
open(0x0, 0x64842, 0x94)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x2)
r4 = socket(0x23, 0x80805, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00'})
r5 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
pread64$auto(r5, 0x0, 0x4, 0x200000000005)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r6)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x40010)
sendmsg$auto_CTRL_CMD_GETPOLICY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r7, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r6)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ec0)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_RXSC_CONFIG={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xa3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
executing program 2:
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28003)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/irq/8/smp_affinity\x00', 0x400000, 0x0)
epoll_create$auto(0x7)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = prctl$auto_PR_SET_MM_ARG_START(0x6, 0x8, 0x0, 0x8001, 0x2)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x20000800)
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x56603, 0x0)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
setregid$auto(0x0, 0x3)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
wait4$auto(0x0, 0xfffffffffffffffc, 0x60000002, 0x0)
ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$auto(0x3, 0xae41, r1)
mmap$auto(0xf4ff, 0x20009, 0xde, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x2b, 0x6, 0x7)
mmap$auto(0x12000000, 0x400008, 0x6, 0x8000000018, 0x2, 0x8000)
executing program 2:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, 0x0, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10007)
r1 = open_tree$auto(r0, 0x0, 0x1001)
r2 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000040)=0x9d)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0)
executing program 3:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x0, 0xfffff004, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = open(0x0, 0x261c2, 0x84)
r1 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0x10)
bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc)
ioctl$auto(0x3, 0x80044df9, 0x5)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, r1, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xaf5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x2000000)
close_range$auto(0x2, 0x8, 0x0)
clock_adjtime$auto(0xffffffff, &(0x7f0000000300)={0x9, 0x0, 0x61, 0x16432c6, 0x3, 0xe08, 0x4, 0x0, 0x8, 0xff, 0x8, {0x7ff, 0x31}, 0x2, 0x1, 0x100000000, 0x1, 0x0, 0xffffffff7fffffff, 0x2, 0x1800, 0x2, 0xfffffffffffffffc, 0x59c})
open(0x0, 0x22240, 0x155)
r2 = socket(0x2, 0x80802, 0x0)
setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8)
setsockopt$auto(0x3, 0x1, 0x3f, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x55)
socket(0x10, 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
ioperm$auto(0x3, 0xe, 0x2000000000000149)
quotactl_fd$auto(0xffffffffffffffff, 0x7, 0x0, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop4/queue/max_integrity_segments\x00', 0x4000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0xa7, 0x0, 0x8000, 0x1}, 0x8}, 0x4, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
write$auto(r3, 0x0, 0x81)
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/suspend_stats/failed_resume_early\x00', 0x181000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/45, 0x2d)
r1 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/stats\x00', 0x90180, 0x0)
ioctl$auto(r1, 0x7, 0xffffffffffffffff)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x7fffffff}, 0x9, 0x20000000)
r1 = io_uring_setup$auto(0x1, 0x0)
socket(0x1f, 0x2, 0x200000)
sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x4008080)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, &(0x7f0000000080)=[0x3, 0x4010])
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0)
ioctl$auto(r3, 0xc0285629, r3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(0x0, 0x6041, 0x0)
socket(0x6, 0x2, 0x6)
semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0)
pidfd_open$auto(0x0, 0x5)
r4 = socket(0x10, 0x3, 0xa)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'})
executing program 3:
r0 = socket(0x2, 0x3, 0x1)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0)
connect$auto(r0, &(0x7f0000000000), 0x55)
sendmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000100)="c9a19b9bd45daf8d1e42325618d266e9b4d29346a538f4501870f63224261ea46d2048306cb48caaa96d8e74944fe4311b40ed00640d041ca43967b3a4f18b86c38c26c9df10a988d1f2c1c69262f1908a4880ba65a9fca956c49dc5990384089f8c005c64f32d9bbba6f289964068a8ced940397118c0aa87e26591cfeead8827333219be3c5524a56ceb46dbe9688b2156", 0x10000, 0x0, 0x2, 0x0, 0x3, 0xfffff2cf}, 0x6}, 0x2319, 0x5)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc001, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0)
executing program 0:
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
clock_nanosleep$auto(0x1, 0x200, 0x0, 0x0)
unshare$auto(0x200)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r0, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0)
landlock_restrict_self$auto(r1, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
pivot_root$auto(&(0x7f0000000300)='.\x00\xaf\xeb)\xae$\xfc\x00\xf8\x05AC\x9f\xbbR\xec\xc6c\x85\xc8\xa7\xe84sF\xe3U\x94\x99\x8fR\xd0\x98\f\xa5\xb1S\x7f\xc3\xa5\xc0\x97\x10qa\r\x02\xd2\xc8\xd2\x8e\xc7\x80\x11\x06#\xf5\x18|\xdc\x81Ai\xb6\x96iaR\xdbA\x04\x10\x99\xe6\xdb\xae`G\x1d9`T\xd8\xc6\xea\xf7\x96\xb5\xe9\x164e\xb1 S\x8f\x12_\x15y\x91F\xc89\xb1\xd24?\x89.,Z\xba,\"v\xde\xc4\xe0\x84\xca|\"\x96V\xd5P\xe4\xb9\xea\x88\x15\xacs\xc6\x83\xd6\x81\xd7\x11\x88\x9c\xdd\x8a\x0e\xea\x19|\x7f\xe3A8x\xce\xc1!q\xbbi\\\xd8\xa9\xe0\xed\x9e\x19\xc0IC9^\xfcJG\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000280)='.\x00')
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x45b, 0x4, 0xffffffff, 0x2}, 0x3e37, 0xfffffff4, 0x8)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x121141, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080))
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r0, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
mmap$auto(0x0, 0xfffffffffffffffd, 0xdf, 0xeb1, r0, 0x8000)
executing program 0:
mmap$auto(0x0, 0xe983, 0x2000000df, 0xeb1, 0x401, 0x8000)
clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
sendmsg$auto_VDPA_CMD_DEV_NEW(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0x8}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x9}, @VDPA_ATTR_DEV_FEATURES={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4000004)
socket(0x2b, 0x1, 0x1)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/17, 0x11)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch0\x00', 0xe0800, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), r1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendto$auto(0xffffffffffffffff, &(0x7f0000000480)="9bb9d4b346d5aaae67fe300fd8c0b0c941bb07fd74c160465854c660d80d1b3678b39749221427f9faedd24c3d3ed6b5850d890493f1ef537be05ec113201a8260e43bdb18ba2637c993ab2b12826b59eff30be9cd6fefa80de4601a420001c1f1c037c4b6109633c4764c019fffb8b29dc54d19fb95bf80e078198173853ea2b6882ac18ec68f9a8fe800c79e17f83831f11848b55e41b37c744fd74b4da03896002060be0a183ce35f73cefc86bf7f7673a30792a933c1aed50d126350777162bc9b1ab151d32d0e1f50f56cf3f516f08170b7c5", 0x7fffffff, 0xa, 0x0, 0x10001)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8000, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000476, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8)
syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000800), r2)
sendmsg$auto_HANDSHAKE_CMD_DONE(r2, 0x0, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003680)={'wlan0\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(r5, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@typed={0x4, 0x6, 0x0, 0x0, @binary}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x474, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xffb3}, @NL80211_ATTR_SAR_SPEC={0x2c, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x86}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}]}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_STA_FLAGS2={0x50, 0x43, "bab3dfe1724c26ce3b77431802dd3e046c34e87bfcd7a94c80137560e44a2a48484eb8f784384f0c1c986c8970edd65ed3d062aeb0b309a8eb4ae2029885453a931f790d6b95607fc392f8b2"}, @NL80211_ATTR_BSS_SELECT={0x3b6, 0xe3, 0x0, 0x1, [@generic="906454d8f03346460dcc09f652ae3c44013bbdde0a2128257fa26cdeb82b696d37666ddbf74b67f562828c73ca59c61a5db3ad5286c61da52ec70d4124b44ca5527d876ebd7f3fdfc340656bc7f5a9e3484554b741263ecae0f7d0f6b1ec1f49c400be9efcff1f80cd6c49deb780017d7c6163e8ec947af78a54da", @nested={0x86, 0xab, 0x0, 0x1, [@nested={0x4, 0x141}, @nested={0x4, 0x113}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x6}, @generic="8d91b63429a596a0cbd75287b65bc9e161c1fa4f1a8352a43cf3afa38976bfcb08e97f728effd850850ef9def0683676b82d94f977b0df1076b7c2f6656d64234dfcd610790a281cf76db2bdf729f75b9a85a0", @generic="c9b85558dffdda924b2400d04ab4b9", @typed={0x8, 0xca, 0x0, 0x0, @u32=0xfe84}, @nested={0x4, 0x8b}, @typed={0x4, 0xb0}]}, @generic="d36166b3066f6dbc2a3f9d26afb7b635b150268f3d81f7e04f4051502b0836c852efa1d9a1279d77d329d6026b60320f4aaefffaf74c4d457e173a246c09489403f23111d16196fbd79d2db7cc711bcfaa5221e1bd87db0c07aab3de819d47bebd25dab9b9733871c28f1aed2e0e79c0b7e3e104baa50faed71fbdb5b93a6c94f92b8b0f78e790ac3a7121a353b4b47bdb4ed45f81441c91b2dd8da183a3edfd209920df45b47e8841fec23ddb1e94f74b0d4b6da6acb7e00dbe9351ee0457c4b29943e3aa3b7cf7ed408b4a41fb6e5bbd3bdefe7f0c7ccc215d05e1", @generic="a7675622937a09df41b4a6bb8b09a529a9a56a095a91e54079719660d37aa490176cb00d1e9e6b80e3d68a69b1112a096f", @typed={0xfa, 0x57, 0x0, 0x0, @binary="fdc401bb47783d79c5f81b0d1f5b72532db56bbfce5a040b94d5dd4004cd4dd3569591d722c954be66abf92b6ac1ea89ae765b103356c61e06e9785e0bea370b51df100fbee8d6676b23525c62f505c06828b68d1c8ca5d9bcfd72812e16ec4d8e462d01c19884bb238b0f3a08aa493431f7e9d38295fb7170099e487306cbfeb191ac8ea316456f129eb22edfbe56c8b89e6aa2806a6e944852e3356b7f3b6fbd4408571f9efb3863ec0ab255341dc657df7b0d6324446c35cc1270922f8634aa12e433faaa07688cee5a203656668ac90f98d08c994ca79ed8b96485cc02c1681f0f13ce2ca78dbb51f27bbe7ccbe8574e0e95a769"}, @typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@multicast2}, @generic="b781e7725e1d13299e4ce79860fbf51da88a7e58faac0cc260f28051eccdc8218dc670c75cccbac1671c55133ccbff9095e8aa9c18c16682d7c2c33ac533da30291585bba2ee41022f369efb6ace47ba64a3ac8dfd3b88ba185767bdb34350902648849a771f5cd9f42cfcb8e5d201a2a34a5e74b391c935e91be553f6916c47a6cb004077e7ce5ce4cd70609e217c1a48660c615c9e8775c4445b3adda7"]}, @NL80211_ATTR_SSID={0x1c, 0x34, "b42f7427e95bd9440ae73a0cc7670e6e895b500a071ddb0c"}]}, 0x474}}, 0x28814)
setsockopt$auto_SO_MAX_PACING_RATE(r2, 0x6, 0x2f, &(0x7f0000000000)='\'%^,-%\x00', 0x1)
executing program 3:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.1/usb11/ep_00/wMaxPacketSize\x00', 0x10040, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
executing program 0:
mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec6\x00', 0x80, 0x0)
close_range$auto(0x2, r0, 0x70)
r1 = socket(0x2, 0x80802, 0x0)
r2 = socket(0x2, 0x1, 0x0)
pipe$auto(&(0x7f0000000200)=r1)
memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d)
fcntl$auto(0x3, 0x4, 0xa553)
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f00000001c0), 0x200480, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
connect$auto(0x3, &(0x7f0000000140), 0x55)
select$auto(0xa, 0x0, 0x0, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_STOP_POLL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
socketpair$auto(0x5, 0x80000001, 0x7, &(0x7f0000000180)=0x9)
shutdown$auto(0x200000003, 0x2)
executing program 3:
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/driver/nvram\x00', 0x40000, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000000)='/proc/threaZ-sml\x01/net/ip6_mr_vif<', 0x205)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/4087, 0xff7)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000400)=""/232, 0xe8)
executing program 2:
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x109482, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x6a1, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
r1 = socket(0x28, 0x1, 0x0)
r2 = socket(0x1, 0x1, 0x1)
open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0xa, 0x0)
r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), r1)
sendmsg$auto_SMC_NETLINK_GET_SYS_INFO(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, "48d0394fbe58c67e31514380c8402da1126e3b4af51da14b8d7c17b4e245d09b812a242643d4956320931a922c3f6aaaa6c2face8187a3b7711f7466d9e06029cc3e206fdf084e3b4c677fe2d4bcd1e8d0f6"}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3)
open(&(0x7f00000000c0)='./bus\x00', 0x12ba7e, 0x45)
close_range$auto(0x2, 0x8, 0x0)
unlink$auto(&(0x7f0000000040)='./bus\x00')
bpf$auto(0x3, 0x0, 0x5)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x149102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x10000800000003)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r5, 0x0, 0x3)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0)
executing program 3:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x10000)
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = geteuid()
r3 = gettid()
ptrace$auto_PTRACE_POKETEXT(0x4, r3, 0x800, 0x9)
msgctl$auto_MSG_STAT(0xf, 0xb, &(0x7f0000000200)={{0x13b, r2, <r4=>0xee01, 0x7, 0xa, 0xe, 0xff}, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x6, 0x9, 0x7, 0xe61d, 0x9, 0x100000001, 0x5, 0x2, 0x9, @inferred=r3, @inferred=r3})
msgctl$auto_IPC_RMID(0x7, 0x0, &(0x7f00000002c0)={{0x40, r2, r4, 0x4, 0xf, 0x5, 0xd}, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x40, 0x55be814, 0x8, 0x8, 0x5, 0x100000000, 0x5, 0x4, 0x4, @raw=0x5})
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf2503000000040008000c0007800800e900", @ANYRES32=r2, @ANYBLOB="07b569e90904a84e10de82ee77115b49f43e36a00f78900d062e53fecf4dc98cf625d5c6fa694267ae70df036ac78e70b42cfc0064776760a861b36ba3b443bfa1fd395b3b044c5b1c0e9466"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r5 = getpgid$auto(0x0)
timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @raw=0x2, 0x4, @_tid=r5}, &(0x7f0000000040)=0x9)
r6 = socket(0x11, 0x80003, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x400000000000003, 0x29, 0x13, 0x0, 0x56b)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000)
socket(0x11, 0x80003, 0x300)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r8, 0x0, 0x20)
writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)
setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x8)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH-socket$nl_generic-mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ppoll$auto-openat$auto_debugfs_devm_entry_ops_file-openat$auto_snd_pcm_oss_f_reg_pcm_oss-read$auto-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_generic-io_uring_setup$auto-mmap$auto-socket$nl_generic-socketpair$auto-adjtimex$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 6m0s
testing program (duration=6m6s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 11, 29, 10, 18, 30, 25, 26, 6, 15, 29, 4, 28, 10, 18, 3, 30, 6, 20, 5, 29, 26, 23, 12]
detailed listing:
executing program 1:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x80044df9, 0x5) (fail_nth: 6)
executing program 1:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22040, 0x75)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, 0x3}, 0x55)
get_robust_list$auto(0x0, 0x0, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
executing program 1:
socket(0x1e, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe0742, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x101401, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="86ad180916cd35e093b9901f03de02ef", 0x5d)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x2, 0x88)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/arch_status\x00', 0x8203, 0x0)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x2a401, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r3, 0x8910, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
close_range$auto(0x2, 0xa, 0x0)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x6c54, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x228000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)
ioctl$auto(0x3, 0x89e0, 0x91)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x4611, 0x0)
executing program 2:
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, r0}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x294}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x62}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xff}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c805}, 0x2004c014)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
open(&(0x7f00000004c0)='./cgroup\x00', 0x181080, 0x118)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x14000000000, 0xf)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0xa, 0x801, 0x106)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
io_uring_setup$auto(0x6, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0)
read$auto_def_blk_fops_fs(r0, &(0x7f0000000140)=""/194, 0xc2)
mmap$auto(0x0, 0x428, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f00000001c0)=0x401)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/stable_node_chains_prune_millisecs\x00', 0x400, 0x0)
read$auto(r2, 0x0, 0x9)
sendmmsg$auto(r1, 0x0, 0xfffffffd, 0xe1d3)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/034/001\x00', 0x181042, 0x0)
ioctl$auto_USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000140)=0x81)
io_uring_setup$auto(0x59, 0x0)
open(0x0, 0x64842, 0x94)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x2)
r4 = socket(0x23, 0x80805, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00'})
r5 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
pread64$auto(r5, 0x0, 0x4, 0x200000000005)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r6)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x40010)
sendmsg$auto_CTRL_CMD_GETPOLICY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r7, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r6)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ec0)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_RXSC_CONFIG={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xa3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
executing program 2:
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28003)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/irq/8/smp_affinity\x00', 0x400000, 0x0)
epoll_create$auto(0x7)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = prctl$auto_PR_SET_MM_ARG_START(0x6, 0x8, 0x0, 0x8001, 0x2)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x20000800)
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x56603, 0x0)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
setregid$auto(0x0, 0x3)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
wait4$auto(0x0, 0xfffffffffffffffc, 0x60000002, 0x0)
ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$auto(0x3, 0xae41, r1)
mmap$auto(0xf4ff, 0x20009, 0xde, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x2b, 0x6, 0x7)
mmap$auto(0x12000000, 0x400008, 0x6, 0x8000000018, 0x2, 0x8000)
executing program 2:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, 0x0, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10007)
r1 = open_tree$auto(r0, 0x0, 0x1001)
r2 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000040)=0x9d)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0)
executing program 3:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x0, 0xfffff004, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = open(0x0, 0x261c2, 0x84)
r1 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0x10)
bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc)
ioctl$auto(0x3, 0x80044df9, 0x5)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, r1, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xaf5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x2000000)
close_range$auto(0x2, 0x8, 0x0)
clock_adjtime$auto(0xffffffff, &(0x7f0000000300)={0x9, 0x0, 0x61, 0x16432c6, 0x3, 0xe08, 0x4, 0x0, 0x8, 0xff, 0x8, {0x7ff, 0x31}, 0x2, 0x1, 0x100000000, 0x1, 0x0, 0xffffffff7fffffff, 0x2, 0x1800, 0x2, 0xfffffffffffffffc, 0x59c})
open(0x0, 0x22240, 0x155)
r2 = socket(0x2, 0x80802, 0x0)
setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8)
setsockopt$auto(0x3, 0x1, 0x3f, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x55)
socket(0x10, 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
ioperm$auto(0x3, 0xe, 0x2000000000000149)
quotactl_fd$auto(0xffffffffffffffff, 0x7, 0x0, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop4/queue/max_integrity_segments\x00', 0x4000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0xa7, 0x0, 0x8000, 0x1}, 0x8}, 0x4, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
write$auto(r3, 0x0, 0x81)
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/suspend_stats/failed_resume_early\x00', 0x181000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/45, 0x2d)
r1 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/stats\x00', 0x90180, 0x0)
ioctl$auto(r1, 0x7, 0xffffffffffffffff)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x7fffffff}, 0x9, 0x20000000)
r1 = io_uring_setup$auto(0x1, 0x0)
socket(0x1f, 0x2, 0x200000)
sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x4008080)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, &(0x7f0000000080)=[0x3, 0x4010])
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0)
ioctl$auto(r3, 0xc0285629, r3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(0x0, 0x6041, 0x0)
socket(0x6, 0x2, 0x6)
semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0)
pidfd_open$auto(0x0, 0x5)
r4 = socket(0x10, 0x3, 0xa)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'})
executing program 3:
r0 = socket(0x2, 0x3, 0x1)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0)
connect$auto(r0, &(0x7f0000000000), 0x55)
sendmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000100)="c9a19b9bd45daf8d1e42325618d266e9b4d29346a538f4501870f63224261ea46d2048306cb48caaa96d8e74944fe4311b40ed00640d041ca43967b3a4f18b86c38c26c9df10a988d1f2c1c69262f1908a4880ba65a9fca956c49dc5990384089f8c005c64f32d9bbba6f289964068a8ced940397118c0aa87e26591cfeead8827333219be3c5524a56ceb46dbe9688b2156", 0x10000, 0x0, 0x2, 0x0, 0x3, 0xfffff2cf}, 0x6}, 0x2319, 0x5)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc001, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0)
executing program 0:
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
clock_nanosleep$auto(0x1, 0x200, 0x0, 0x0)
unshare$auto(0x200)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r0, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0)
landlock_restrict_self$auto(r1, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
pivot_root$auto(&(0x7f0000000300)='.\x00\xaf\xeb)\xae$\xfc\x00\xf8\x05AC\x9f\xbbR\xec\xc6c\x85\xc8\xa7\xe84sF\xe3U\x94\x99\x8fR\xd0\x98\f\xa5\xb1S\x7f\xc3\xa5\xc0\x97\x10qa\r\x02\xd2\xc8\xd2\x8e\xc7\x80\x11\x06#\xf5\x18|\xdc\x81Ai\xb6\x96iaR\xdbA\x04\x10\x99\xe6\xdb\xae`G\x1d9`T\xd8\xc6\xea\xf7\x96\xb5\xe9\x164e\xb1 S\x8f\x12_\x15y\x91F\xc89\xb1\xd24?\x89.,Z\xba,\"v\xde\xc4\xe0\x84\xca|\"\x96V\xd5P\xe4\xb9\xea\x88\x15\xacs\xc6\x83\xd6\x81\xd7\x11\x88\x9c\xdd\x8a\x0e\xea\x19|\x7f\xe3A8x\xce\xc1!q\xbbi\\\xd8\xa9\xe0\xed\x9e\x19\xc0IC9^\xfcJG\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000280)='.\x00')
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x45b, 0x4, 0xffffffff, 0x2}, 0x3e37, 0xfffffff4, 0x8)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x121141, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080))
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r0, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
mmap$auto(0x0, 0xfffffffffffffffd, 0xdf, 0xeb1, r0, 0x8000)
executing program 0:
mmap$auto(0x0, 0xe983, 0x2000000df, 0xeb1, 0x401, 0x8000)
clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
sendmsg$auto_VDPA_CMD_DEV_NEW(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0x8}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x9}, @VDPA_ATTR_DEV_FEATURES={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4000004)
socket(0x2b, 0x1, 0x1)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/17, 0x11)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch0\x00', 0xe0800, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), r1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendto$auto(0xffffffffffffffff, &(0x7f0000000480)="9bb9d4b346d5aaae67fe300fd8c0b0c941bb07fd74c160465854c660d80d1b3678b39749221427f9faedd24c3d3ed6b5850d890493f1ef537be05ec113201a8260e43bdb18ba2637c993ab2b12826b59eff30be9cd6fefa80de4601a420001c1f1c037c4b6109633c4764c019fffb8b29dc54d19fb95bf80e078198173853ea2b6882ac18ec68f9a8fe800c79e17f83831f11848b55e41b37c744fd74b4da03896002060be0a183ce35f73cefc86bf7f7673a30792a933c1aed50d126350777162bc9b1ab151d32d0e1f50f56cf3f516f08170b7c5", 0x7fffffff, 0xa, 0x0, 0x10001)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8000, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000476, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8)
syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000800), r2)
sendmsg$auto_HANDSHAKE_CMD_DONE(r2, 0x0, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003680)={'wlan0\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(r5, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@typed={0x4, 0x6, 0x0, 0x0, @binary}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x474, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xffb3}, @NL80211_ATTR_SAR_SPEC={0x2c, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x86}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}]}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_STA_FLAGS2={0x50, 0x43, "bab3dfe1724c26ce3b77431802dd3e046c34e87bfcd7a94c80137560e44a2a48484eb8f784384f0c1c986c8970edd65ed3d062aeb0b309a8eb4ae2029885453a931f790d6b95607fc392f8b2"}, @NL80211_ATTR_BSS_SELECT={0x3b6, 0xe3, 0x0, 0x1, [@generic="906454d8f03346460dcc09f652ae3c44013bbdde0a2128257fa26cdeb82b696d37666ddbf74b67f562828c73ca59c61a5db3ad5286c61da52ec70d4124b44ca5527d876ebd7f3fdfc340656bc7f5a9e3484554b741263ecae0f7d0f6b1ec1f49c400be9efcff1f80cd6c49deb780017d7c6163e8ec947af78a54da", @nested={0x86, 0xab, 0x0, 0x1, [@nested={0x4, 0x141}, @nested={0x4, 0x113}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x6}, @generic="8d91b63429a596a0cbd75287b65bc9e161c1fa4f1a8352a43cf3afa38976bfcb08e97f728effd850850ef9def0683676b82d94f977b0df1076b7c2f6656d64234dfcd610790a281cf76db2bdf729f75b9a85a0", @generic="c9b85558dffdda924b2400d04ab4b9", @typed={0x8, 0xca, 0x0, 0x0, @u32=0xfe84}, @nested={0x4, 0x8b}, @typed={0x4, 0xb0}]}, @generic="d36166b3066f6dbc2a3f9d26afb7b635b150268f3d81f7e04f4051502b0836c852efa1d9a1279d77d329d6026b60320f4aaefffaf74c4d457e173a246c09489403f23111d16196fbd79d2db7cc711bcfaa5221e1bd87db0c07aab3de819d47bebd25dab9b9733871c28f1aed2e0e79c0b7e3e104baa50faed71fbdb5b93a6c94f92b8b0f78e790ac3a7121a353b4b47bdb4ed45f81441c91b2dd8da183a3edfd209920df45b47e8841fec23ddb1e94f74b0d4b6da6acb7e00dbe9351ee0457c4b29943e3aa3b7cf7ed408b4a41fb6e5bbd3bdefe7f0c7ccc215d05e1", @generic="a7675622937a09df41b4a6bb8b09a529a9a56a095a91e54079719660d37aa490176cb00d1e9e6b80e3d68a69b1112a096f", @typed={0xfa, 0x57, 0x0, 0x0, @binary="fdc401bb47783d79c5f81b0d1f5b72532db56bbfce5a040b94d5dd4004cd4dd3569591d722c954be66abf92b6ac1ea89ae765b103356c61e06e9785e0bea370b51df100fbee8d6676b23525c62f505c06828b68d1c8ca5d9bcfd72812e16ec4d8e462d01c19884bb238b0f3a08aa493431f7e9d38295fb7170099e487306cbfeb191ac8ea316456f129eb22edfbe56c8b89e6aa2806a6e944852e3356b7f3b6fbd4408571f9efb3863ec0ab255341dc657df7b0d6324446c35cc1270922f8634aa12e433faaa07688cee5a203656668ac90f98d08c994ca79ed8b96485cc02c1681f0f13ce2ca78dbb51f27bbe7ccbe8574e0e95a769"}, @typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@multicast2}, @generic="b781e7725e1d13299e4ce79860fbf51da88a7e58faac0cc260f28051eccdc8218dc670c75cccbac1671c55133ccbff9095e8aa9c18c16682d7c2c33ac533da30291585bba2ee41022f369efb6ace47ba64a3ac8dfd3b88ba185767bdb34350902648849a771f5cd9f42cfcb8e5d201a2a34a5e74b391c935e91be553f6916c47a6cb004077e7ce5ce4cd70609e217c1a48660c615c9e8775c4445b3adda7"]}, @NL80211_ATTR_SSID={0x1c, 0x34, "b42f7427e95bd9440ae73a0cc7670e6e895b500a071ddb0c"}]}, 0x474}}, 0x28814)
setsockopt$auto_SO_MAX_PACING_RATE(r2, 0x6, 0x2f, &(0x7f0000000000)='\'%^,-%\x00', 0x1)
executing program 3:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.1/usb11/ep_00/wMaxPacketSize\x00', 0x10040, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
executing program 0:
mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec6\x00', 0x80, 0x0)
close_range$auto(0x2, r0, 0x70)
r1 = socket(0x2, 0x80802, 0x0)
r2 = socket(0x2, 0x1, 0x0)
pipe$auto(&(0x7f0000000200)=r1)
memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d)
fcntl$auto(0x3, 0x4, 0xa553)
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f00000001c0), 0x200480, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
connect$auto(0x3, &(0x7f0000000140), 0x55)
select$auto(0xa, 0x0, 0x0, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_STOP_POLL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
socketpair$auto(0x5, 0x80000001, 0x7, &(0x7f0000000180)=0x9)
shutdown$auto(0x200000003, 0x2)
executing program 3:
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/driver/nvram\x00', 0x40000, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000000)='/proc/threaZ-sml\x01/net/ip6_mr_vif<', 0x205)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/4087, 0xff7)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000400)=""/232, 0xe8)
executing program 2:
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x109482, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x6a1, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
r1 = socket(0x28, 0x1, 0x0)
r2 = socket(0x1, 0x1, 0x1)
open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0xa, 0x0)
r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), r1)
sendmsg$auto_SMC_NETLINK_GET_SYS_INFO(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, "48d0394fbe58c67e31514380c8402da1126e3b4af51da14b8d7c17b4e245d09b812a242643d4956320931a922c3f6aaaa6c2face8187a3b7711f7466d9e06029cc3e206fdf084e3b4c677fe2d4bcd1e8d0f6"}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3)
open(&(0x7f00000000c0)='./bus\x00', 0x12ba7e, 0x45)
close_range$auto(0x2, 0x8, 0x0)
unlink$auto(&(0x7f0000000040)='./bus\x00')
bpf$auto(0x3, 0x0, 0x5)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x149102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x10000800000003)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r5, 0x0, 0x3)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0)
executing program 3:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x10000)
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = geteuid()
r3 = gettid()
ptrace$auto_PTRACE_POKETEXT(0x4, r3, 0x800, 0x9)
msgctl$auto_MSG_STAT(0xf, 0xb, &(0x7f0000000200)={{0x13b, r2, <r4=>0xee01, 0x7, 0xa, 0xe, 0xff}, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x6, 0x9, 0x7, 0xe61d, 0x9, 0x100000001, 0x5, 0x2, 0x9, @inferred=r3, @inferred=r3})
msgctl$auto_IPC_RMID(0x7, 0x0, &(0x7f00000002c0)={{0x40, r2, r4, 0x4, 0xf, 0x5, 0xd}, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x40, 0x55be814, 0x8, 0x8, 0x5, 0x100000000, 0x5, 0x4, 0x4, @raw=0x5})
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf2503000000040008000c0007800800e900", @ANYRES32=r2, @ANYBLOB="07b569e90904a84e10de82ee77115b49f43e36a00f78900d062e53fecf4dc98cf625d5c6fa694267ae70df036ac78e70b42cfc0064776760a861b36ba3b443bfa1fd395b3b044c5b1c0e9466"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r5 = getpgid$auto(0x0)
timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @raw=0x2, 0x4, @_tid=r5}, &(0x7f0000000040)=0x9)
r6 = socket(0x11, 0x80003, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x400000000000003, 0x29, 0x13, 0x0, 0x56b)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000)
socket(0x11, 0x80003, 0x300)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r8, 0x0, 0x20)
writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)
setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x8)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: KASAN: vmalloc-out-of-bounds Write in snd_pcm_format_set_silence
bisect: bisecting 24 programs
bisect: split chunks (needed=false): <23>
bisect: split chunk #0 of len 23 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=6m4s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 15, 29, 4, 28, 10, 18, 3, 30, 6, 20, 5, 29, 26, 23, 12]
detailed listing:
executing program 1:
openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10007)
r1 = open_tree$auto(r0, 0x0, 0x1001)
r2 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000040)=0x9d)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0)
executing program 3:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x0, 0xfffff004, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = open(0x0, 0x261c2, 0x84)
r1 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0x10)
bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc)
ioctl$auto(0x3, 0x80044df9, 0x5)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, r1, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xaf5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x2000000)
close_range$auto(0x2, 0x8, 0x0)
clock_adjtime$auto(0xffffffff, &(0x7f0000000300)={0x9, 0x0, 0x61, 0x16432c6, 0x3, 0xe08, 0x4, 0x0, 0x8, 0xff, 0x8, {0x7ff, 0x31}, 0x2, 0x1, 0x100000000, 0x1, 0x0, 0xffffffff7fffffff, 0x2, 0x1800, 0x2, 0xfffffffffffffffc, 0x59c})
open(0x0, 0x22240, 0x155)
r2 = socket(0x2, 0x80802, 0x0)
setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8)
setsockopt$auto(0x3, 0x1, 0x3f, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x55)
socket(0x10, 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
ioperm$auto(0x3, 0xe, 0x2000000000000149)
quotactl_fd$auto(0xffffffffffffffff, 0x7, 0x0, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop4/queue/max_integrity_segments\x00', 0x4000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0xa7, 0x0, 0x8000, 0x1}, 0x8}, 0x4, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
write$auto(r3, 0x0, 0x81)
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/suspend_stats/failed_resume_early\x00', 0x181000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/45, 0x2d)
r1 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/stats\x00', 0x90180, 0x0)
ioctl$auto(r1, 0x7, 0xffffffffffffffff)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x7fffffff}, 0x9, 0x20000000)
r1 = io_uring_setup$auto(0x1, 0x0)
socket(0x1f, 0x2, 0x200000)
sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x4008080)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, &(0x7f0000000080)=[0x3, 0x4010])
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0)
ioctl$auto(r3, 0xc0285629, r3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(0x0, 0x6041, 0x0)
socket(0x6, 0x2, 0x6)
semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0)
pidfd_open$auto(0x0, 0x5)
r4 = socket(0x10, 0x3, 0xa)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'})
executing program 3:
r0 = socket(0x2, 0x3, 0x1)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0)
connect$auto(r0, &(0x7f0000000000), 0x55)
sendmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000100)="c9a19b9bd45daf8d1e42325618d266e9b4d29346a538f4501870f63224261ea46d2048306cb48caaa96d8e74944fe4311b40ed00640d041ca43967b3a4f18b86c38c26c9df10a988d1f2c1c69262f1908a4880ba65a9fca956c49dc5990384089f8c005c64f32d9bbba6f289964068a8ced940397118c0aa87e26591cfeead8827333219be3c5524a56ceb46dbe9688b2156", 0x10000, 0x0, 0x2, 0x0, 0x3, 0xfffff2cf}, 0x6}, 0x2319, 0x5)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc001, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0)
executing program 0:
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
clock_nanosleep$auto(0x1, 0x200, 0x0, 0x0)
unshare$auto(0x200)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r0, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0)
landlock_restrict_self$auto(r1, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
pivot_root$auto(&(0x7f0000000300)='.\x00\xaf\xeb)\xae$\xfc\x00\xf8\x05AC\x9f\xbbR\xec\xc6c\x85\xc8\xa7\xe84sF\xe3U\x94\x99\x8fR\xd0\x98\f\xa5\xb1S\x7f\xc3\xa5\xc0\x97\x10qa\r\x02\xd2\xc8\xd2\x8e\xc7\x80\x11\x06#\xf5\x18|\xdc\x81Ai\xb6\x96iaR\xdbA\x04\x10\x99\xe6\xdb\xae`G\x1d9`T\xd8\xc6\xea\xf7\x96\xb5\xe9\x164e\xb1 S\x8f\x12_\x15y\x91F\xc89\xb1\xd24?\x89.,Z\xba,\"v\xde\xc4\xe0\x84\xca|\"\x96V\xd5P\xe4\xb9\xea\x88\x15\xacs\xc6\x83\xd6\x81\xd7\x11\x88\x9c\xdd\x8a\x0e\xea\x19|\x7f\xe3A8x\xce\xc1!q\xbbi\\\xd8\xa9\xe0\xed\x9e\x19\xc0IC9^\xfcJG\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000280)='.\x00')
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x45b, 0x4, 0xffffffff, 0x2}, 0x3e37, 0xfffffff4, 0x8)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x121141, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080))
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r0, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
mmap$auto(0x0, 0xfffffffffffffffd, 0xdf, 0xeb1, r0, 0x8000)
executing program 0:
mmap$auto(0x0, 0xe983, 0x2000000df, 0xeb1, 0x401, 0x8000)
clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
sendmsg$auto_VDPA_CMD_DEV_NEW(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0x8}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x9}, @VDPA_ATTR_DEV_FEATURES={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4000004)
socket(0x2b, 0x1, 0x1)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/17, 0x11)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch0\x00', 0xe0800, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), r1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendto$auto(0xffffffffffffffff, &(0x7f0000000480)="9bb9d4b346d5aaae67fe300fd8c0b0c941bb07fd74c160465854c660d80d1b3678b39749221427f9faedd24c3d3ed6b5850d890493f1ef537be05ec113201a8260e43bdb18ba2637c993ab2b12826b59eff30be9cd6fefa80de4601a420001c1f1c037c4b6109633c4764c019fffb8b29dc54d19fb95bf80e078198173853ea2b6882ac18ec68f9a8fe800c79e17f83831f11848b55e41b37c744fd74b4da03896002060be0a183ce35f73cefc86bf7f7673a30792a933c1aed50d126350777162bc9b1ab151d32d0e1f50f56cf3f516f08170b7c5", 0x7fffffff, 0xa, 0x0, 0x10001)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8000, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000476, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8)
syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000800), r2)
sendmsg$auto_HANDSHAKE_CMD_DONE(r2, 0x0, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003680)={'wlan0\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(r5, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@typed={0x4, 0x6, 0x0, 0x0, @binary}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x474, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xffb3}, @NL80211_ATTR_SAR_SPEC={0x2c, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x86}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}]}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_STA_FLAGS2={0x50, 0x43, "bab3dfe1724c26ce3b77431802dd3e046c34e87bfcd7a94c80137560e44a2a48484eb8f784384f0c1c986c8970edd65ed3d062aeb0b309a8eb4ae2029885453a931f790d6b95607fc392f8b2"}, @NL80211_ATTR_BSS_SELECT={0x3b6, 0xe3, 0x0, 0x1, [@generic="906454d8f03346460dcc09f652ae3c44013bbdde0a2128257fa26cdeb82b696d37666ddbf74b67f562828c73ca59c61a5db3ad5286c61da52ec70d4124b44ca5527d876ebd7f3fdfc340656bc7f5a9e3484554b741263ecae0f7d0f6b1ec1f49c400be9efcff1f80cd6c49deb780017d7c6163e8ec947af78a54da", @nested={0x86, 0xab, 0x0, 0x1, [@nested={0x4, 0x141}, @nested={0x4, 0x113}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x6}, @generic="8d91b63429a596a0cbd75287b65bc9e161c1fa4f1a8352a43cf3afa38976bfcb08e97f728effd850850ef9def0683676b82d94f977b0df1076b7c2f6656d64234dfcd610790a281cf76db2bdf729f75b9a85a0", @generic="c9b85558dffdda924b2400d04ab4b9", @typed={0x8, 0xca, 0x0, 0x0, @u32=0xfe84}, @nested={0x4, 0x8b}, @typed={0x4, 0xb0}]}, @generic="d36166b3066f6dbc2a3f9d26afb7b635b150268f3d81f7e04f4051502b0836c852efa1d9a1279d77d329d6026b60320f4aaefffaf74c4d457e173a246c09489403f23111d16196fbd79d2db7cc711bcfaa5221e1bd87db0c07aab3de819d47bebd25dab9b9733871c28f1aed2e0e79c0b7e3e104baa50faed71fbdb5b93a6c94f92b8b0f78e790ac3a7121a353b4b47bdb4ed45f81441c91b2dd8da183a3edfd209920df45b47e8841fec23ddb1e94f74b0d4b6da6acb7e00dbe9351ee0457c4b29943e3aa3b7cf7ed408b4a41fb6e5bbd3bdefe7f0c7ccc215d05e1", @generic="a7675622937a09df41b4a6bb8b09a529a9a56a095a91e54079719660d37aa490176cb00d1e9e6b80e3d68a69b1112a096f", @typed={0xfa, 0x57, 0x0, 0x0, @binary="fdc401bb47783d79c5f81b0d1f5b72532db56bbfce5a040b94d5dd4004cd4dd3569591d722c954be66abf92b6ac1ea89ae765b103356c61e06e9785e0bea370b51df100fbee8d6676b23525c62f505c06828b68d1c8ca5d9bcfd72812e16ec4d8e462d01c19884bb238b0f3a08aa493431f7e9d38295fb7170099e487306cbfeb191ac8ea316456f129eb22edfbe56c8b89e6aa2806a6e944852e3356b7f3b6fbd4408571f9efb3863ec0ab255341dc657df7b0d6324446c35cc1270922f8634aa12e433faaa07688cee5a203656668ac90f98d08c994ca79ed8b96485cc02c1681f0f13ce2ca78dbb51f27bbe7ccbe8574e0e95a769"}, @typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@multicast2}, @generic="b781e7725e1d13299e4ce79860fbf51da88a7e58faac0cc260f28051eccdc8218dc670c75cccbac1671c55133ccbff9095e8aa9c18c16682d7c2c33ac533da30291585bba2ee41022f369efb6ace47ba64a3ac8dfd3b88ba185767bdb34350902648849a771f5cd9f42cfcb8e5d201a2a34a5e74b391c935e91be553f6916c47a6cb004077e7ce5ce4cd70609e217c1a48660c615c9e8775c4445b3adda7"]}, @NL80211_ATTR_SSID={0x1c, 0x34, "b42f7427e95bd9440ae73a0cc7670e6e895b500a071ddb0c"}]}, 0x474}}, 0x28814)
setsockopt$auto_SO_MAX_PACING_RATE(r2, 0x6, 0x2f, &(0x7f0000000000)='\'%^,-%\x00', 0x1)
executing program 3:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.1/usb11/ep_00/wMaxPacketSize\x00', 0x10040, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
executing program 0:
mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec6\x00', 0x80, 0x0)
close_range$auto(0x2, r0, 0x70)
r1 = socket(0x2, 0x80802, 0x0)
r2 = socket(0x2, 0x1, 0x0)
pipe$auto(&(0x7f0000000200)=r1)
memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d)
fcntl$auto(0x3, 0x4, 0xa553)
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f00000001c0), 0x200480, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
connect$auto(0x3, &(0x7f0000000140), 0x55)
select$auto(0xa, 0x0, 0x0, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_STOP_POLL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
socketpair$auto(0x5, 0x80000001, 0x7, &(0x7f0000000180)=0x9)
shutdown$auto(0x200000003, 0x2)
executing program 3:
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/driver/nvram\x00', 0x40000, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000000)='/proc/threaZ-sml\x01/net/ip6_mr_vif<', 0x205)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/4087, 0xff7)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000400)=""/232, 0xe8)
executing program 2:
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x109482, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x6a1, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
r1 = socket(0x28, 0x1, 0x0)
r2 = socket(0x1, 0x1, 0x1)
open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0xa, 0x0)
r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), r1)
sendmsg$auto_SMC_NETLINK_GET_SYS_INFO(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, "48d0394fbe58c67e31514380c8402da1126e3b4af51da14b8d7c17b4e245d09b812a242643d4956320931a922c3f6aaaa6c2face8187a3b7711f7466d9e06029cc3e206fdf084e3b4c677fe2d4bcd1e8d0f6"}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3)
open(&(0x7f00000000c0)='./bus\x00', 0x12ba7e, 0x45)
close_range$auto(0x2, 0x8, 0x0)
unlink$auto(&(0x7f0000000040)='./bus\x00')
bpf$auto(0x3, 0x0, 0x5)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x149102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x10000800000003)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r5, 0x0, 0x3)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0)
executing program 3:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x10000)
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = geteuid()
r3 = gettid()
ptrace$auto_PTRACE_POKETEXT(0x4, r3, 0x800, 0x9)
msgctl$auto_MSG_STAT(0xf, 0xb, &(0x7f0000000200)={{0x13b, r2, <r4=>0xee01, 0x7, 0xa, 0xe, 0xff}, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x6, 0x9, 0x7, 0xe61d, 0x9, 0x100000001, 0x5, 0x2, 0x9, @inferred=r3, @inferred=r3})
msgctl$auto_IPC_RMID(0x7, 0x0, &(0x7f00000002c0)={{0x40, r2, r4, 0x4, 0xf, 0x5, 0xd}, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x40, 0x55be814, 0x8, 0x8, 0x5, 0x100000000, 0x5, 0x4, 0x4, @raw=0x5})
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf2503000000040008000c0007800800e900", @ANYRES32=r2, @ANYBLOB="07b569e90904a84e10de82ee77115b49f43e36a00f78900d062e53fecf4dc98cf625d5c6fa694267ae70df036ac78e70b42cfc0064776760a861b36ba3b443bfa1fd395b3b044c5b1c0e9466"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r5 = getpgid$auto(0x0)
timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @raw=0x2, 0x4, @_tid=r5}, &(0x7f0000000040)=0x9)
r6 = socket(0x11, 0x80003, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x400000000000003, 0x29, 0x13, 0x0, 0x56b)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000)
socket(0x11, 0x80003, 0x300)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r8, 0x0, 0x20)
writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)
setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x8)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 6, 20, 5, 29, 26, 23, 12]
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0x2000000df, 0xeb1, 0x401, 0x8000)
clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
sendmsg$auto_VDPA_CMD_DEV_NEW(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0x8}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x9}, @VDPA_ATTR_DEV_FEATURES={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4000004)
socket(0x2b, 0x1, 0x1)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/17, 0x11)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch0\x00', 0xe0800, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), r1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendto$auto(0xffffffffffffffff, &(0x7f0000000480)="9bb9d4b346d5aaae67fe300fd8c0b0c941bb07fd74c160465854c660d80d1b3678b39749221427f9faedd24c3d3ed6b5850d890493f1ef537be05ec113201a8260e43bdb18ba2637c993ab2b12826b59eff30be9cd6fefa80de4601a420001c1f1c037c4b6109633c4764c019fffb8b29dc54d19fb95bf80e078198173853ea2b6882ac18ec68f9a8fe800c79e17f83831f11848b55e41b37c744fd74b4da03896002060be0a183ce35f73cefc86bf7f7673a30792a933c1aed50d126350777162bc9b1ab151d32d0e1f50f56cf3f516f08170b7c5", 0x7fffffff, 0xa, 0x0, 0x10001)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8000, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000476, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8)
syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000800), r2)
sendmsg$auto_HANDSHAKE_CMD_DONE(r2, 0x0, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003680)={'wlan0\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(r5, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@typed={0x4, 0x6, 0x0, 0x0, @binary}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x474, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xffb3}, @NL80211_ATTR_SAR_SPEC={0x2c, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x86}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}]}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_STA_FLAGS2={0x50, 0x43, "bab3dfe1724c26ce3b77431802dd3e046c34e87bfcd7a94c80137560e44a2a48484eb8f784384f0c1c986c8970edd65ed3d062aeb0b309a8eb4ae2029885453a931f790d6b95607fc392f8b2"}, @NL80211_ATTR_BSS_SELECT={0x3b6, 0xe3, 0x0, 0x1, [@generic="906454d8f03346460dcc09f652ae3c44013bbdde0a2128257fa26cdeb82b696d37666ddbf74b67f562828c73ca59c61a5db3ad5286c61da52ec70d4124b44ca5527d876ebd7f3fdfc340656bc7f5a9e3484554b741263ecae0f7d0f6b1ec1f49c400be9efcff1f80cd6c49deb780017d7c6163e8ec947af78a54da", @nested={0x86, 0xab, 0x0, 0x1, [@nested={0x4, 0x141}, @nested={0x4, 0x113}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x6}, @generic="8d91b63429a596a0cbd75287b65bc9e161c1fa4f1a8352a43cf3afa38976bfcb08e97f728effd850850ef9def0683676b82d94f977b0df1076b7c2f6656d64234dfcd610790a281cf76db2bdf729f75b9a85a0", @generic="c9b85558dffdda924b2400d04ab4b9", @typed={0x8, 0xca, 0x0, 0x0, @u32=0xfe84}, @nested={0x4, 0x8b}, @typed={0x4, 0xb0}]}, @generic="d36166b3066f6dbc2a3f9d26afb7b635b150268f3d81f7e04f4051502b0836c852efa1d9a1279d77d329d6026b60320f4aaefffaf74c4d457e173a246c09489403f23111d16196fbd79d2db7cc711bcfaa5221e1bd87db0c07aab3de819d47bebd25dab9b9733871c28f1aed2e0e79c0b7e3e104baa50faed71fbdb5b93a6c94f92b8b0f78e790ac3a7121a353b4b47bdb4ed45f81441c91b2dd8da183a3edfd209920df45b47e8841fec23ddb1e94f74b0d4b6da6acb7e00dbe9351ee0457c4b29943e3aa3b7cf7ed408b4a41fb6e5bbd3bdefe7f0c7ccc215d05e1", @generic="a7675622937a09df41b4a6bb8b09a529a9a56a095a91e54079719660d37aa490176cb00d1e9e6b80e3d68a69b1112a096f", @typed={0xfa, 0x57, 0x0, 0x0, @binary="fdc401bb47783d79c5f81b0d1f5b72532db56bbfce5a040b94d5dd4004cd4dd3569591d722c954be66abf92b6ac1ea89ae765b103356c61e06e9785e0bea370b51df100fbee8d6676b23525c62f505c06828b68d1c8ca5d9bcfd72812e16ec4d8e462d01c19884bb238b0f3a08aa493431f7e9d38295fb7170099e487306cbfeb191ac8ea316456f129eb22edfbe56c8b89e6aa2806a6e944852e3356b7f3b6fbd4408571f9efb3863ec0ab255341dc657df7b0d6324446c35cc1270922f8634aa12e433faaa07688cee5a203656668ac90f98d08c994ca79ed8b96485cc02c1681f0f13ce2ca78dbb51f27bbe7ccbe8574e0e95a769"}, @typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@multicast2}, @generic="b781e7725e1d13299e4ce79860fbf51da88a7e58faac0cc260f28051eccdc8218dc670c75cccbac1671c55133ccbff9095e8aa9c18c16682d7c2c33ac533da30291585bba2ee41022f369efb6ace47ba64a3ac8dfd3b88ba185767bdb34350902648849a771f5cd9f42cfcb8e5d201a2a34a5e74b391c935e91be553f6916c47a6cb004077e7ce5ce4cd70609e217c1a48660c615c9e8775c4445b3adda7"]}, @NL80211_ATTR_SSID={0x1c, 0x34, "b42f7427e95bd9440ae73a0cc7670e6e895b500a071ddb0c"}]}, 0x474}}, 0x28814)
setsockopt$auto_SO_MAX_PACING_RATE(r2, 0x6, 0x2f, &(0x7f0000000000)='\'%^,-%\x00', 0x1)
executing program 3:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.1/usb11/ep_00/wMaxPacketSize\x00', 0x10040, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
executing program 0:
mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec6\x00', 0x80, 0x0)
close_range$auto(0x2, r0, 0x70)
r1 = socket(0x2, 0x80802, 0x0)
r2 = socket(0x2, 0x1, 0x0)
pipe$auto(&(0x7f0000000200)=r1)
memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d)
fcntl$auto(0x3, 0x4, 0xa553)
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f00000001c0), 0x200480, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
connect$auto(0x3, &(0x7f0000000140), 0x55)
select$auto(0xa, 0x0, 0x0, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_STOP_POLL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
socketpair$auto(0x5, 0x80000001, 0x7, &(0x7f0000000180)=0x9)
shutdown$auto(0x200000003, 0x2)
executing program 3:
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/driver/nvram\x00', 0x40000, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000000)='/proc/threaZ-sml\x01/net/ip6_mr_vif<', 0x205)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/4087, 0xff7)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000400)=""/232, 0xe8)
executing program 2:
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x109482, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x6a1, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
r1 = socket(0x28, 0x1, 0x0)
r2 = socket(0x1, 0x1, 0x1)
open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0xa, 0x0)
r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), r1)
sendmsg$auto_SMC_NETLINK_GET_SYS_INFO(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, "48d0394fbe58c67e31514380c8402da1126e3b4af51da14b8d7c17b4e245d09b812a242643d4956320931a922c3f6aaaa6c2face8187a3b7711f7466d9e06029cc3e206fdf084e3b4c677fe2d4bcd1e8d0f6"}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3)
open(&(0x7f00000000c0)='./bus\x00', 0x12ba7e, 0x45)
close_range$auto(0x2, 0x8, 0x0)
unlink$auto(&(0x7f0000000040)='./bus\x00')
bpf$auto(0x3, 0x0, 0x5)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x149102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x10000800000003)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r5, 0x0, 0x3)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0)
executing program 3:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x10000)
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = geteuid()
r3 = gettid()
ptrace$auto_PTRACE_POKETEXT(0x4, r3, 0x800, 0x9)
msgctl$auto_MSG_STAT(0xf, 0xb, &(0x7f0000000200)={{0x13b, r2, <r4=>0xee01, 0x7, 0xa, 0xe, 0xff}, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x6, 0x9, 0x7, 0xe61d, 0x9, 0x100000001, 0x5, 0x2, 0x9, @inferred=r3, @inferred=r3})
msgctl$auto_IPC_RMID(0x7, 0x0, &(0x7f00000002c0)={{0x40, r2, r4, 0x4, 0xf, 0x5, 0xd}, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x40, 0x55be814, 0x8, 0x8, 0x5, 0x100000000, 0x5, 0x4, 0x4, @raw=0x5})
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf2503000000040008000c0007800800e900", @ANYRES32=r2, @ANYBLOB="07b569e90904a84e10de82ee77115b49f43e36a00f78900d062e53fecf4dc98cf625d5c6fa694267ae70df036ac78e70b42cfc0064776760a861b36ba3b443bfa1fd395b3b044c5b1c0e9466"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r5 = getpgid$auto(0x0)
timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @raw=0x2, 0x4, @_tid=r5}, &(0x7f0000000040)=0x9)
r6 = socket(0x11, 0x80003, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x400000000000003, 0x29, 0x13, 0x0, 0x56b)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000)
socket(0x11, 0x80003, 0x300)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r8, 0x0, 0x20)
writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)
setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x8)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: KASAN: vmalloc-out-of-bounds Write in snd_pcm_format_set_silence
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH-socket$nl_generic-mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ppoll$auto-openat$auto_debugfs_devm_entry_ops_file-openat$auto_snd_pcm_oss_f_reg_pcm_oss-read$auto-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_generic-io_uring_setup$auto-mmap$auto-socket$nl_generic-socketpair$auto-adjtimex$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi
detailed listing:
executing program 3:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
bisect: split chunks (needed=true): <7>
bisect: split chunk #0 of len 7 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 26, 23, 12]
detailed listing:
executing program 2:
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x109482, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x6a1, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
r1 = socket(0x28, 0x1, 0x0)
r2 = socket(0x1, 0x1, 0x1)
open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0xa, 0x0)
r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), r1)
sendmsg$auto_SMC_NETLINK_GET_SYS_INFO(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, "48d0394fbe58c67e31514380c8402da1126e3b4af51da14b8d7c17b4e245d09b812a242643d4956320931a922c3f6aaaa6c2face8187a3b7711f7466d9e06029cc3e206fdf084e3b4c677fe2d4bcd1e8d0f6"}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3)
open(&(0x7f00000000c0)='./bus\x00', 0x12ba7e, 0x45)
close_range$auto(0x2, 0x8, 0x0)
unlink$auto(&(0x7f0000000040)='./bus\x00')
bpf$auto(0x3, 0x0, 0x5)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x149102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x10000800000003)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r5, 0x0, 0x3)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0)
executing program 3:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x10000)
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = geteuid()
r3 = gettid()
ptrace$auto_PTRACE_POKETEXT(0x4, r3, 0x800, 0x9)
msgctl$auto_MSG_STAT(0xf, 0xb, &(0x7f0000000200)={{0x13b, r2, <r4=>0xee01, 0x7, 0xa, 0xe, 0xff}, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x6, 0x9, 0x7, 0xe61d, 0x9, 0x100000001, 0x5, 0x2, 0x9, @inferred=r3, @inferred=r3})
msgctl$auto_IPC_RMID(0x7, 0x0, &(0x7f00000002c0)={{0x40, r2, r4, 0x4, 0xf, 0x5, 0xd}, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x40, 0x55be814, 0x8, 0x8, 0x5, 0x100000000, 0x5, 0x4, 0x4, @raw=0x5})
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf2503000000040008000c0007800800e900", @ANYRES32=r2, @ANYBLOB="07b569e90904a84e10de82ee77115b49f43e36a00f78900d062e53fecf4dc98cf625d5c6fa694267ae70df036ac78e70b42cfc0064776760a861b36ba3b443bfa1fd395b3b044c5b1c0e9466"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r5 = getpgid$auto(0x0)
timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @raw=0x2, 0x4, @_tid=r5}, &(0x7f0000000040)=0x9)
r6 = socket(0x11, 0x80003, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x400000000000003, 0x29, 0x13, 0x0, 0x56b)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000)
socket(0x11, 0x80003, 0x300)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r8, 0x0, 0x20)
writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)
setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x8)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <3>
bisect: split chunk #0 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 12]
detailed listing:
executing program 3:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 2 programs left: 

executing program 3:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)


bisect: trying to concatenate
bisect: concatenate 2 entries
minimizing program #0 before concatenation
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x2, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10800}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r3, 0x28000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: lost connection to test machine
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r1, 0x0, 0x9)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4040810)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: KASAN: vmalloc-out-of-bounds Write in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
socket(0x10, 0x3, 0x6)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 12]
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xf)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: KASAN: vmalloc-out-of-bounds Write in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 12]
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 1:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
mmap$auto(0x40fff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
minimized 26 calls -> 14 calls
minimizing program #1 before concatenation
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 11]
detailed listing:
executing program 3:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)

program crashed: lost connection to test machine
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 10]
detailed listing:
executing program 3:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 9]
detailed listing:
executing program 3:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 8]
detailed listing:
executing program 3:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 7]
detailed listing:
executing program 3:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0xe8)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 6]
detailed listing:
executing program 3:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)

program crashed: KASAN: vmalloc-out-of-bounds Write in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 5]
detailed listing:
executing program 3:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 4]
detailed listing:
executing program 3:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 3]
detailed listing:
executing program 3:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 2]
detailed listing:
executing program 3:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
socket(0x1d, 0x2, 0x6)
shutdown$auto(0x200000003, 0x2)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 1]
detailed listing:
executing program 3:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:
socket(0x1d, 0x2, 0x6)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 0]
detailed listing:
executing program 3:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
executing program 0:

program crashed: KASAN: vmalloc-out-of-bounds Write in snd_pcm_format_set_silence
minimized 12 calls -> 0 calls
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_generic-io_uring_setup$auto-socket$nl_generic-socketpair$auto-openat$auto_snd_rawmidi_f_ops_rawmidi
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
bisect: concatenation succeeded
found reproducer with 14 syscalls
minimizing guilty program
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_generic-io_uring_setup$auto-socket$nl_generic-socketpair$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_generic-io_uring_setup$auto-socket$nl_generic
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

program crashed: KASAN: vmalloc-out-of-bounds Write in snd_pcm_format_set_silence
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_generic-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
io_uring_setup$auto(0x6, 0x0)

program crashed: KASAN: vmalloc-out-of-bounds Write in snd_pcm_format_set_silence
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_generic
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2-sendmsg$auto_NL80211_CMD_GET_REG
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)

program did not crash
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})

program did not crash
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})

program did not crash
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})

program did not crash
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})

program did not crash
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})

program did not crash
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})

program did not crash
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
detailed listing:
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})

program did not crash
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})

program did not crash
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})

program did not crash
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000300)={0xd83, [0x7fffffff, 0x358000, 0xff], [{0x5, 0x70c, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0x7, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x2bb, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb}], 0x10001, 0x9, 0x8a, 0x96, 0x43, 0x7fffffff, 0x6, "d65d829c0cf6c8f1b9c057bb939e9062a5d54a5ff9fb928da7641f4f67f846a0d95998eb24b31834ef9d8e0085a481b6ed3aa5766a3e116b0355d75919c4bb0e"})

program did not crash
testing program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0c\x00', 0x28442, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, 0x0)

program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
extracting C reproducer
testing compiled C program (duration=1m57.620534486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
simplifying C reproducer
testing compiled C program (duration=1m57.620534486s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing compiled C program (duration=1m57.620534486s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
program did not crash
testing compiled C program (duration=1m57.620534486s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
program crashed: KASAN: vmalloc-out-of-bounds Write in snd_pcm_format_set_silence
testing compiled C program (duration=1m57.620534486s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing compiled C program (duration=1m57.620534486s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
program crashed: KASAN: vmalloc-out-of-bounds Write in snd_pcm_format_set_silence
testing compiled C program (duration=1m57.620534486s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
testing compiled C program (duration=1m57.620534486s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-close_range$auto-socket-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_snd_pcm_f_ops_pcm1-ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2
program crashed: BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
reproducing took 4h48m23.294822291s
repro crashed as (corrupted=false):
BUG: unable to handle page fault for address: ffffc9000cd2e000
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 1b400067 P4D 1b400067 PUD 1c2ff067 PMD 31ddb067 PTE 0
Oops: Oops: 0002 [#1] SMP KASAN PTI
CPU: 1 UID: 0 PID: 6904 Comm: syz-executor975 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
RIP: 0010:memset_orig+0x33/0xb0 arch/x86/lib/memset_64.S:68
Code: 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47
RSP: 0018:ffffc90003477b28 EFLAGS: 00010216
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000005b3f
RDX: 0000000000200000 RSI: 0000000000000000 RDI: ffffc9000cd2e000
RBP: 0000000000200000 R08: 0000000000000001 R09: 0000000000000000
R10: ffffc9000cc9b000 R11: 0000000000000000 R12: 0000000000100000
R13: ffffc9000cc9b000 R14: ffffffff8cb35e9c R15: 000000000000001c
FS:  000055558204d380(0000) GS:ffff888124aef000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc9000cd2e000 CR3: 00000000309d4000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 snd_pcm_format_set_silence+0x211/0x340 sound/core/pcm_misc.c:441
 snd_pcm_oss_change_params_locked+0x1eb4/0x3b40 sound/core/oss/pcm_oss.c:1078
 snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1105 [inline]
 snd_pcm_oss_make_ready+0xe6/0x1b0 sound/core/oss/pcm_oss.c:1164
 snd_pcm_oss_sync+0x1de/0x840 sound/core/oss/pcm_oss.c:1730
 snd_pcm_oss_release+0x28b/0x310 sound/core/oss/pcm_oss.c:2575
 __fput+0x3ff/0xb70 fs/file_table.c:465
 task_work_run+0x14d/0x240 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x27b/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x230 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa65d3ffbe9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcae655848 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa65d3ffbe9
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
RBP: 00000000000f4240 R08: 0000000000008000 R09: 0000000000008000
R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000016f19
R13: 00007ffcae65586c R14: 00007ffcae655880 R15: 00007ffcae655870
 </TASK>
Modules linked in:
CR2: ffffc9000cd2e000
---[ end trace 0000000000000000 ]---
RIP: 0010:memset_orig+0x33/0xb0 arch/x86/lib/memset_64.S:68
Code: 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47
RSP: 0018:ffffc90003477b28 EFLAGS: 00010216
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000005b3f
RDX: 0000000000200000 RSI: 0000000000000000 RDI: ffffc9000cd2e000
RBP: 0000000000200000 R08: 0000000000000001 R09: 0000000000000000
R10: ffffc9000cc9b000 R11: 0000000000000000 R12: 0000000000100000
R13: ffffc9000cc9b000 R14: ffffffff8cb35e9c R15: 000000000000001c
FS:  000055558204d380(0000) GS:ffff888124aef000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc9000cd2e000 CR3: 00000000309d4000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	01 01                	add    %eax,(%rcx)
   2:	01 01                	add    %eax,(%rcx)
   4:	01 01                	add    %eax,(%rcx)
   6:	01 01                	add    %eax,(%rcx)
   8:	48 0f af c1          	imul   %rcx,%rax
   c:	41 89 f9             	mov    %edi,%r9d
   f:	41 83 e1 07          	and    $0x7,%r9d
  13:	75 74                	jne    0x89
  15:	48 89 d1             	mov    %rdx,%rcx
  18:	48 c1 e9 06          	shr    $0x6,%rcx
  1c:	74 39                	je     0x57
  1e:	66 0f 1f 84 00 00 00 	nopw   0x0(%rax,%rax,1)
  25:	00 00
  27:	48 ff c9             	dec    %rcx
* 2a:	48 89 07             	mov    %rax,(%rdi) <-- trapping instruction
  2d:	48 89 47 08          	mov    %rax,0x8(%rdi)
  31:	48 89 47 10          	mov    %rax,0x10(%rdi)
  35:	48 89 47 18          	mov    %rax,0x18(%rdi)
  39:	48 89 47 20          	mov    %rax,0x20(%rdi)
  3d:	48                   	rex.W
  3e:	89                   	.byte 0x89
  3f:	47                   	rex.RXB

final repro crashed as (corrupted=false):
BUG: unable to handle page fault for address: ffffc9000cd2e000
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 1b400067 P4D 1b400067 PUD 1c2ff067 PMD 31ddb067 PTE 0
Oops: Oops: 0002 [#1] SMP KASAN PTI
CPU: 1 UID: 0 PID: 6904 Comm: syz-executor975 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
RIP: 0010:memset_orig+0x33/0xb0 arch/x86/lib/memset_64.S:68
Code: 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47
RSP: 0018:ffffc90003477b28 EFLAGS: 00010216
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000005b3f
RDX: 0000000000200000 RSI: 0000000000000000 RDI: ffffc9000cd2e000
RBP: 0000000000200000 R08: 0000000000000001 R09: 0000000000000000
R10: ffffc9000cc9b000 R11: 0000000000000000 R12: 0000000000100000
R13: ffffc9000cc9b000 R14: ffffffff8cb35e9c R15: 000000000000001c
FS:  000055558204d380(0000) GS:ffff888124aef000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc9000cd2e000 CR3: 00000000309d4000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 snd_pcm_format_set_silence+0x211/0x340 sound/core/pcm_misc.c:441
 snd_pcm_oss_change_params_locked+0x1eb4/0x3b40 sound/core/oss/pcm_oss.c:1078
 snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1105 [inline]
 snd_pcm_oss_make_ready+0xe6/0x1b0 sound/core/oss/pcm_oss.c:1164
 snd_pcm_oss_sync+0x1de/0x840 sound/core/oss/pcm_oss.c:1730
 snd_pcm_oss_release+0x28b/0x310 sound/core/oss/pcm_oss.c:2575
 __fput+0x3ff/0xb70 fs/file_table.c:465
 task_work_run+0x14d/0x240 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x27b/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x230 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa65d3ffbe9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcae655848 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa65d3ffbe9
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
RBP: 00000000000f4240 R08: 0000000000008000 R09: 0000000000008000
R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000016f19
R13: 00007ffcae65586c R14: 00007ffcae655880 R15: 00007ffcae655870
 </TASK>
Modules linked in:
CR2: ffffc9000cd2e000
---[ end trace 0000000000000000 ]---
RIP: 0010:memset_orig+0x33/0xb0 arch/x86/lib/memset_64.S:68
Code: 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47
RSP: 0018:ffffc90003477b28 EFLAGS: 00010216
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000005b3f
RDX: 0000000000200000 RSI: 0000000000000000 RDI: ffffc9000cd2e000
RBP: 0000000000200000 R08: 0000000000000001 R09: 0000000000000000
R10: ffffc9000cc9b000 R11: 0000000000000000 R12: 0000000000100000
R13: ffffc9000cc9b000 R14: ffffffff8cb35e9c R15: 000000000000001c
FS:  000055558204d380(0000) GS:ffff888124aef000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc9000cd2e000 CR3: 00000000309d4000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	01 01                	add    %eax,(%rcx)
   2:	01 01                	add    %eax,(%rcx)
   4:	01 01                	add    %eax,(%rcx)
   6:	01 01                	add    %eax,(%rcx)
   8:	48 0f af c1          	imul   %rcx,%rax
   c:	41 89 f9             	mov    %edi,%r9d
   f:	41 83 e1 07          	and    $0x7,%r9d
  13:	75 74                	jne    0x89
  15:	48 89 d1             	mov    %rdx,%rcx
  18:	48 c1 e9 06          	shr    $0x6,%rcx
  1c:	74 39                	je     0x57
  1e:	66 0f 1f 84 00 00 00 	nopw   0x0(%rax,%rax,1)
  25:	00 00
  27:	48 ff c9             	dec    %rcx
* 2a:	48 89 07             	mov    %rax,(%rdi) <-- trapping instruction
  2d:	48 89 47 08          	mov    %rax,0x8(%rdi)
  31:	48 89 47 10          	mov    %rax,0x10(%rdi)
  35:	48 89 47 18          	mov    %rax,0x18(%rdi)
  39:	48 89 47 20          	mov    %rax,0x20(%rdi)
  3d:	48                   	rex.W
  3e:	89                   	.byte 0x89
  3f:	47                   	rex.RXB