Extracting prog: 2h40m8.823713433s
Minimizing prog: 15m16.578139583s
Simplifying prog options: 9m47.260957496s
Extracting C: 2m43.770982943s
Simplifying C: 0s


extracting reproducer from 31 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-accept$auto-mmap$auto-openat$auto_mon_fops_text_t_mon_text-openat$auto_def_blk_fops_fs-mmap$auto-socketpair$auto-syz_genetlink_get_family_id$auto_ovs_meter-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-read$auto-ioperm$auto-openat$auto_tty_fops_tty_io-unshare$auto-openat$auto_cachefiles_daemon_fops_internal-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-openat$auto_tty_fops_tty_io-write$auto_tty_fops_tty_io-setpriority$auto_PRIO_USER-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-bpf$auto-sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019761b5538a6868b07bb9da31631f6e1f6331ec2db23b6c056c62b9fc9f13fb45b09ded4ad3ee82d358891077529106b0b38aa7fd752484c7c46903d7ff7e932ee1f4aeefd8470e6c946990ee8343f0347b3de40620583d4779247ad2d7b278260866acec29d0f486e7f600e21fd04250a1f73ac3801f559ab9fcc704caa07a80a5100aafd437433b4fae716803a6db78b9e1d0b587ca53ca22a50880947c3e89102aa1c6b584f284a154f53f3332d2b5e154969cbe589472f42da3412e9cdd5c51ae096a6ad5ff5774c6276d59c83548b57bb63f88166905e2734992701971e037e0bffb114c62db1a6ebb05f6c455df2ed9bade7a85b0e2efe9cd78d80249ec133247b5fc04c0fe37eac88a1691bf50f2bdbed0c9a93595d104a1fb10390d02af3c9cfb7ff6ae6152cd3547e481651ee55d71fe213bc1c7f99cf65005e01e3518f6d910d1d50c56d8659d6e307625fe16fd34e7b089192611b8cfabb489aea19937440bd3b841cde573f182597c57cd39d38caafe132c8fab3bf4c4ab2d16abba32035f4fb6ea7cd52a411f49ddd9c357c14a613db70178590c403dc43427db435e02f245e04d004ab78969a50f426a63e5ed2098074b47bc26daf2cb0a2bda0670568e7a8104db4b2b5995b39e8e48bbe8fff6ef58bd6add50d747d50c5c456305d9e5565d3a695ad6f3cc6ad2052ead94b17aa4139455f8e18a55c4f9b49132994dda5955b44b31fa5010100003955241cd3885e860568649aa2900d0fba0d6562819630942add10ec6244487ce02f677e7220013af329c91c3cd2269f8e5ed91a55b7d848fd75775d5d7b8aa7969c71b8e76952bee87cd6fdc50bf50193994efebfa22cb22a911d37554f6474fcdbe309f70809644b2086b172e609980e68518cbb34765b1edca26523f7893d48ebed5d902409ddd0cbbb7f6b122a83c1395d1e9eac371b47893092754334a7327b634c58a512c2d254ac100d20aebf67fbe085260cf4e976ba0a45b5b976a9d56d0d7c9cfc4cc54871566891a654c2e867af8072b9235243492d1c794d077be97738c406590c883ec15f4872d12cf5bdf7848c19a1537f16386161130c1ecea6bd5a7f91628417e8efafbe3c3b08a3a997f2a68c7c53bcaab0738fec56086cf9c2c2d62a35ee032c68e18d95e2a8f10bc1934df5a8e9268c5a6b0ecee8e24f37f71ad8aab420b3fc9a4e7a33373cd7b77a1b1d4188d36db3f7a8b2ead1a5885af1aa981ebd87bc835484e7070c4ecf5a1107b75d765120b63a755dd154f9c5b58d0220f2bb93783f6f6b10f73115da02b5714734742c6b3db13a8fcee61abc152255ea185af5d106611ca4d3337fb9c410d3a2647e3cd73fa5f1e5dbbd01e18761ae9fd271bec553315d2b7caab5e550a2c0b28d919a2a627eee6b0ea481c4d96df774834efd65d0f77e0e4b9eac0c4cee22b05ba1a900aee500be5a21f0b956e2106f84fef2036be842e2d6c888e13c55e90a224f02eb1c50d657cf89f0ba5843f32b8e7108114ba91e691ac204dd7a6d40129bee8c1e61cabe46613c7755604787406e4793c271a405ad4713477167dc546a74f3c74948da40e4d577eb5c7cfb90c2d47adef789877f0639f0490a23fc82b8858acaed1e04ebb47b31ea5fbbbd554f343da5b99f295b7797c57ec2e2f16029c080196c929567438c81d9ac77746e59b1863214e714af009ac4e7ae566321158d440d1f62239971f438a77b94a71acaaa6ee388f7c55763cbe4560f4a7ced6ad448cddda2f697812306e7fdd03e0050d7966f6af51efe597d392843fd378b9621bb6a45ee0189f4527f45de88af3a7b566d637b555af50ede09e157b43768377c78e769bd762df89c4c715d4e4ad286076f154b5d73b968fd234bd92108c365e5b1c34b5a79c598b6223dee54b231476ca776cae0c11330178d32354de5d4a1e1c1c7a9fbd30619b966e2ee2ec15ce6ccf80baf39f7997c20de1a95f36fa11c3f283688a8fd166b5c415d33cde5d2acee738ef656ff9181962423f5214e0b4af81d6332130b37295f7a14b5bafcca0adde0331607e10f5a7bc85991279391b0e284f3e60b8fc79ad1404c429f00fc40d214019073e70ba07e4307018d9c5f7840fc8f99c36d2228b8c5aa0b9d4cf9df2567c00d4c0d068eb338e0eab2428634c50402ac1c30adcc4098f53d665321a4f0168c70a60aa55d27d23809ef5b519ff9bac4667eb94ac7e5c1eab56716fe88859344a221463fd1cbe0eb68b963d73aa93b3e3a9a1ba1aaa25131c2000ffd5f17a19978c94bdfc80d7fe72446187c47b4e3169442d9881036632f89dc77628ce815a825b0e07f6e52074789175d54589fd4c432913db6dce142471e4418cc7f36cee327000f4f6805109873d8e79b308d47398231c666312e601fd7a00df76e9b7a92f0c11446f2bd0e79843da98f79928bdfd5d719b87f3ca7eb7b920f663efea42a7bf147c5e5d26624d68cb755662ac07c7d6d8b96008a0c4a6f3f21b981cb9c0120955f9c87d269a3c2bee2ec93b5e6b52ec21ee4baed36888cfdfe75b9603fd453a2735192108de5585e219b38baf819e9c1cb30489028464ca18868aee9fe35ef94407c9a95cf4ecdb10926fc0ddd1b3b6778aa0bb521f03541a7cdab827618e031319cc5b18a4e02000060d5f6860b8e96c8a55d0135c3e55bd2ae9d021e280595ccceda8f7c41b73917f3b8f94c91fd7fa5ee5e78335ffbc07f95d1d1863d81a8bf35522952a09669169fd3ee4b1a409bba774c8b50eaba7b9c4c80e1519294fbf75e1d536b4e748ad2546416114572b1d5455d80f043c66a124a713a5934dba9dd3271e61f951a3deff533370a5463728bc4e5c3edfb18452dd3958e6149247b84f7f341e840175511cea7f55993572027e033abf55ffbffca2de4b01919c939fa47433402ec4289c809539a9356dc34b2cecc5b691e0cebf0d17dbcaede247988650188dd6ae64c9dc83ac3ea8fa9d69fe0fbde9dd0db69108167f89c76dfa98aa163d05f2d8d823a87f313438364ee38c050fe91750144873425d9f83328bf4395e5f5f77229387d779fb38f8ecf", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
single: failed to extract reproducer
bisect: bisecting 31 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 20, 30, 24, 2, 30, 30, 24, 22, 20, 24, 20, 13, 24, 12, 30, 22, 26, 27, 30, 21, 29, 15, 16, 30, 20, 30, 21, 30, 20, 29]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf25010000000600020000000000050007001000000008000900dc781e2108000a000800000014001f00ff090000000000000000000000000001140020"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004)
setreuid$auto(0xffffffffffffffff, 0x0)
socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
bind$auto(0x3, 0x0, 0x68)
socket(0x10, 0x80002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0xf000, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r3, 0x13, 0x70bd26, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
sendmsg$auto_NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x3ac, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0xffff}, @NL80211_ATTR_CSA_IES={0x234, 0xb9, 0x0, 0x1, [@nested={0x188, 0x57, 0x0, 0x1, [@typed={0x4, 0x105}, @nested={0x4, 0xb9}, @nested={0x4, 0xfa}, @nested={0x4, 0x9}, @nested={0x4, 0x83}, @generic="6870e1cce7188311c57a058f98398271103896a2ad1eaa05cfde8801868b2f82439ccadf0057f04eb1bf0b2e22cab477e114da4f7600fcb3167bbe3546c1835c3f9ee9a7bff3d2ca9860c6c563406de32f77317f4c7978aa6b0344b46ac5a76a1124d84db0be9ec949aa8686fb03b8d92ebcab1cb2dea224183944a0bafecc282779c9f9ab289ce37015", @generic="9034c8c8da581565242379913406aa897e0d22105b720959b7c585ed08dff03c6327d7df7603d6b5b85d5d0ab044f313b1f2e43a21a0cf1b7ecd8cd169039f0cf1e9196098f38f2fd6baef484764b63703227d36a2ef0b3bca55ddfc11742da6c5aeff67dc87f71239fe64bc8c00371fe0b0c328987b0fe513fd852558601b9ad77f83e102a543b0f66a7102bed656c8360babbe65ae4807222d1188c8298da4eb6a2fc7434168467e51276901420dfd6047bab12e4b22cf482b48080ba3dfa0782060865ef5078ecf63c2962ee205f9bb496ba7402d1e58bf7499da6b6a8734e959f12515c6"]}, @typed={0x93, 0xc2, 0x0, 0x0, @binary="913ccf55f13b8561f606e4780c2da481ffe83da726817cd16339b560fc889759ded16dc5e6e9f66b9a9f56052e0615309790b5fb520562150e3e40c8dcce8fa2e7091ae83ecc2d805128995d6834af7378e14d45f828104afebf4725d316e56e9acbc8c65b2adc983d7698a34f6b7e80c2d20432ed728a6803148d4fa47efe922f0f5270608d3c86378e53c6288b76"}, @typed={0x14, 0x65, 0x0, 0x0, @ipv6=@mcast1}]}, @NL80211_ATTR_MAC_MASK={0x1e, 0xd7, "ca3fdaf4c8484f926fedb70642110fac5327b9a2697124e65337"}, @NL80211_ATTR_FTM_RESPONDER={0x8c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x85, 0x2, "35dc11c357ac32cb777cb94bc26221f714654a470289d0682bdd2012e0283d9cbd7b3f7c2d59a33ee3da3c03c54478636df112646c9d8deff5c690871755cfa46a30f2619e069cbfde083ccc0908b743973dc867d44bcc8e29bedb0f71bfe14297c67922442c00c9d92a4ae66f52ec3b200464fe6f3f2aed7e484f54c49bb0e89c"}]}, @NL80211_ATTR_AUTH_DATA={0x9e, 0x9c, "e7bc0c570672200b26658690ad796c2309ea29693e7f03e44f7bed9cf13e83fff0ec3fed5ee243c7f4a5c660c7f1891b89cab7da7b69583f78b52783f50168e5c7b0ce6b3d817a4b4045ab62ad1605c18fee44301ef13369d5bca6170300f77f3bb6f36311a3912ccc6accc811dcc2420c67eda8659be6482e1f244e30bf360240e743eddcbbb854bcc1868045adda5c8fb7d1e8ba8212af3cc9"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x8008840}, 0x1)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007a80), 0xffffffffffffffff)
executing program 0:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_FLOW={0x6, 0x6, 0xa}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto_USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
connect$auto(0x3, 0x0, 0x54)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/numa_balancing\x00', 0x2002, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/team_slave_0/rpl_seg_enabled\x00', 0x20202, 0x0)
sendfile$auto(r1, r2, 0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x183042, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0)
read$auto(r3, 0x0, 0x1)
write$auto(0x3, 0x0, 0xfdef)
r4 = socket(0x25, 0x5, 0x0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="cc120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x12cc}, 0x1, 0x0, 0x0, 0x20000895}, 0x1)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
ioctl$auto(0x3, 0x541b, 0x7f)
ioctl$auto_USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0x9)
mmap$auto(0x0, 0x4, 0x4000000000e2, 0x40eb1, 0xffffffffffffffff, 0x10000)
mmap$auto(0x2, 0x5, 0xe1, 0xebf, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
fanotify_mark$auto(0xffffffffffffffff, 0x917, 0x1, 0xffffffffffffffff, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xc, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0x81)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
executing program 0:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
close_range$auto(r0, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
socket(0xa, 0x3, 0x3b)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x5)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket(0xa, 0x801, 0x84)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r6, r6, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mq_notify$auto(r5, &(0x7f0000000240)={@sival_int=0x6, @inferred=r2, 0x7, @_sigev_thread={&(0x7f0000000180)=&(0x7f0000000140)=0x3, &(0x7f00000001c0)="58f3881cad4a2bc87f7894c706159e458a5f7d11ca799b99d7fd0d12cd082402b0012fd5032ed2602d6e6cb9271522dc86d5f4f94645e6218dc1"}})
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
executing program 0:
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, 0x0, 0x8, 0x8)
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 32:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 2:
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r0, 0x0, 0x2, 0x0)
r1 = socket(0x2a, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
read$auto(r2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(0x0, 0x0, 0x227, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)
ioctl$auto_USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000080)={0x81, 0x7fdfff46, 0x8, 0x0})
openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x6800, 0x0)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/lockd/nlm_end_grace\x00', 0x48041, 0x0)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, 0x0, 0x54)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x3, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x81)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 4:
socket(0x22, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8})
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00')
readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgget$auto(0xa, 0x77d9)
msgrcv$auto(0x7, 0x0, 0x2, 0x2, 0xb1)
msgrcv$auto(0xfffffffc, 0x0, 0xffc, 0x1, 0xb1)
msgsnd$auto(0x7, &(0x7f0000000140)={0x6, 0x9}, 0x8001, 0x7)
unshare$auto(0x40000080)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, &(0x7f0000000040)={0x1, 0x5}, 0x7, 0x9)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40004)
executing program 2:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 3:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
close_range$auto(r0, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
socket(0xa, 0x3, 0x3b)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x5)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket(0xa, 0x801, 0x84)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r6, r6, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mq_notify$auto(r5, &(0x7f0000000240)={@sival_int=0x6, @inferred=r2, 0x7, @_sigev_thread={&(0x7f0000000180)=&(0x7f0000000140)=0x3, &(0x7f00000001c0)="58f3881cad4a2bc87f7894c706159e458a5f7d11ca799b99d7fd0d12cd082402b0012fd5032ed2602d6e6cb9271522dc86d5f4f94645e6218dc1613127a9d198ec7d14ed949c34b240055e6a683246f7f9771f429ed31944169822cc71a018bde471160c283a"}})
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
executing program 4:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_FLOW={0x6, 0x6, 0xa}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a37", 0x13)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 3:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffe, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x7, {0x100000000, 0x10000}, 0x8005, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x20000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(r0, 0x8, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$auto(0xffffffffffffffff, 0x4b4a, 0x9)
r2 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r2, 0x29, 0x30, 0x0, 0xd393)
executing program 3:
mmap$auto(0x0, 0x12000a, 0x1000, 0xeb2, 0x401, 0x7fffffffffffffff)
r0 = socket(0x10, 0x2, 0xfffffffc)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x2, 0x4)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
r2 = socket(0x2, 0x3, 0x1)
connect$auto(r2, &(0x7f0000000000), 0x55)
sendmmsg$auto(r2, &(0x7f0000000200)={{&(0x7f0000000100), 0xf, 0x0, 0x2, 0x0, 0x800000000000003, 0xfffff2cf}, 0x6}, 0x2319, 0x5)
r3 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$auto_NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
write$auto_console_fops_tty_io(r1, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b3c", 0x46)
r4 = socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, r4, 0x28000)
pipe2$auto(0x0, 0x80)
socket(0x28, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
pipe$auto(0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0)
executing program 1:
openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000040)={@siginfo_0_0={0x8, 0x57ca, 0x800, @_rt={<r1=>0xffffffffffffffff, 0xee01, @sival_int=0x9}}}, 0x4, &(0x7f00000000c0)={{0x8, 0x9}, {0x4, 0xffffffff80000000}, 0x3, 0x8000, 0x9, 0x0, 0xa3f, 0x7f, 0x881a, 0xa00, 0x2, 0x9, 0xe, 0xfffffffffffffff7, 0x7})
capset$auto(&(0x7f0000000180)={0x7, r1}, &(0x7f00000001c0)={0x2, 0x1, 0x6})
r2 = socket(0x11, 0x3, 0x2)
fcntl$auto(r2, 0xe149, r0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8955, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_SET_SERVICE(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000)
readv$auto(0x3, &(0x7f0000000000)={0x0, 0x9c}, 0x1)
executing program 4:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r1 = socket(0x29, 0x805, 0x0)
sendmsg$auto_NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x8}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffc}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x29, 0x805, 0x0)
mmap$auto(0x4, 0x20006, 0x400000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0xfffffffffffffffe)
r3 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x80, 0x0)
readv$auto(r3, &(0x7f0000000140)={&(0x7f0000000040), 0x2}, 0x5)
sysfs$auto(0x2, 0x6, 0x0)
fsopen$auto(0x0, 0x8)
fsconfig$auto(r2, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
fsconfig$auto(r0, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
ftruncate$auto(0x3, 0x700)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x2002, 0x0)
ioctl$auto_SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000080))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r6=>0x0})
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x26, 0x80805, 0x0)
socket(0xa, 0x3, 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r6, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92)
executing program 1:
socket(0x22, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8})
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00')
readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgget$auto(0xa, 0x77d9)
msgrcv$auto(0x7, 0x0, 0x2, 0x2, 0xb1)
msgrcv$auto(0xfffffffc, 0x0, 0xffc, 0x1, 0xb1)
msgsnd$auto(0x7, &(0x7f0000000140)={0x6, 0x9}, 0x8001, 0x7)
unshare$auto(0x40000080)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, &(0x7f0000000040)={0x1, 0x5}, 0x7, 0x9)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40004)
executing program 4:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r0 = bpf$auto(0x109, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x8}, 0xc)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), r0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, &(0x7f0000000100)="e3ba2fa74c9c258fa3dc1af994d181fd2da4b1ff2f6ac0f1a4473308c725ada929c13a75c30047abca9e52bd199249343929465bd2fa003836a4d82e715a9c2b738e38c8d2639014556154fc32566e45cf23479f3eb85ef3e870705af07cac843e03e4cb24cbc768b1d03372ce105a001131648bde9cdea4617478495640eb44332d60770ca8d196c20bfb321c59034afa94ccae08d2ba04ff641624d8a3e9ceb11f6aa104d847b7ba1c39685eaa4872328d8a7ff42587726681b5eb80dac58fa2f349d75cf0090b7fc7e9601c8b874f8f60c3f7f2c1d07f4485cb2bab17731c5f06992d")
read$auto(0xffffffffffffffff, 0x0, 0x20)
r1 = socket(0x2, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x55)
timer_create$auto(0xfffffff9, &(0x7f0000000000)={@sival_int=0x3, @inferred=<r2=>0xffffffffffffffff, 0x1, @_tid}, &(0x7f0000000040)=0x200)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio29\x00', 0x0, 0x0)
poll$auto(&(0x7f0000000040)={r3, 0xfffa, 0x6}, 0x1, 0x80000001)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'team_slave_0\x00'})
timer_settime$auto(0x0, 0x101, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_SET(r4, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x400c4)
msgctl$auto_MSG_INFO(0x2, 0xc, &(0x7f0000000300)={{0x1ff, <r6=>0xee01, 0xee01, 0x5, 0x1, 0x40, 0x4}, &(0x7f0000000080)=0x5, &(0x7f0000000280)=0x4, 0xcb, 0x4, 0x6, 0x8, 0xff, 0xa9b, 0x3, 0x3})
sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="8c0300667e561d4677cd90734caa26", @ANYRES16=r5, @ANYBLOB="08002cbd7000fbdbdf2504000000690309803cbd090df1d5f7d70ef707a567003793e89e30dfd4689de34486fa397520b3dd702370ed61f7c5b5c14191a87ee121f35703468acdf16992a4490cbf9400ea33935cfa6c229f6ab8332642e92f25001b3f6b8b7321589fef486cb442ddc0670d7ae609a119275a80e410d716b097f83d2257cba54055b9eb2a732d67ed88eebe811abcde0f9c0de9cffbca5f604251b0dba7809fdbab9bd65e9040add82f3bb24216b9587a6ff8b64a9cd55066245a41bce779f8801d4c438d0799591be077cb1602c980040022800400278008004600e0000001db774976ebc4196d0b3465d9ac4c6eb29a07a42f62825e9c2d842f5a7f1964944810e5c73ee55c330e15054aef6b1845140647255b0f2e50a14a2ef625c54947c75231ce6752c26d1c6a7e038a739ed41e51f422cdc1353903ef904c626ee3f1f0143a357b320e347e923b2064ed25c02491c84d86ef492286d889d4eb5d4351b24c7c445ead439dce411d7b28b591b97c9b01db994f26bd0ffd39b91cf682b527a8eca611b970701ce87644de9171391b42fb11530b68f233a2f9d6c5d290993e0c9f2484126d25fdabf6326009ce942b4dd85093e11449a6003246f22be0787dd7cc93ced63929d0e54314d2ae0553e1342e6273446308e8d30d42ef7bff0f9aa935bc8970e9a24b27ecda62626b14e4ff4fb1fc515460fd28a063eee9d56779cfd87bd613b8e57ad4d9d28f85c826e9b87c18bd9314180f7ef9a3c2f2209b7b609e699b903cf1bbd850bf25017d0a96ade5c30e3be45c6e2f0836e303fc4cb629f2ef5a8b6dccb01faefa222b0a73091d2b8537a3209b810d5e54719cb624d38ea88112fff49f3ab475233ade3b236204de60e99c5c4aa9e8bdc226cfcc03e2cb061cbccdba062915469c2849a07ddc0fdad41b9c86c81cdb80acb0a5a6b51d69f3fbb05fe7e4d6962ddf0a8048adb84cdf925135d4c2a7ca5947f0ebf7f318a64ccd3fbcd4671fcee0ea62933ab6dc2f0400338004009e8008002d00", @ANYRES32, @ANYBLOB="000095e1689682bc4466b52a0593321d630299e82b20add2c2ba433cb0478e870b5f09b82987c471403dc767903fbb096e94790192c7519e974f993510c69778a1e14a9dba88520f0936865ae9e3ad224ad9a4d260f92f94c2601167a6183231d0260f39e19613a679cdabe47474d9d67737c43ee60106a6f1a231fe917f6e5c63730ffb1fc83ab2e5f390023ce6ba0000000c00078008000e", @ANYRES32=r6, @ANYBLOB], 0x38c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000884)
connect$auto(r1, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x7f)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x10000005, 0x10007)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 2:
mmap$auto(0x0, 0x12000a, 0x1000, 0xeb2, 0x401, 0x7fffffffffffffff)
getcwd$auto(&(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/airtime_flags\x00', 0x2)
socket(0x10, 0x2, 0xfffffffc)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r1 = socket(0x2, 0x3, 0x1)
r2 = socket(0xa, 0x2, 0x73)
sendto$auto(r2, 0x0, 0x402, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e2c483400200ff803636166b00"}, 0x1c)
connect$auto(r1, &(0x7f0000000000), 0x55)
sendmmsg$auto(r1, &(0x7f0000000200)={{&(0x7f0000000100), 0xf, 0x0, 0x2, 0x0, 0x800000000000003, 0xfffff2cf}, 0x6}, 0x2319, 0x5)
sendmsg$auto_NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
write$auto_console_fops_tty_io(r0, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b3c", 0x46)
r3 = socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, r3, 0x28000)
pipe2$auto(0x0, 0x80)
socket(0x28, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
pipe$auto(0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0)
executing program 3:
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/fc_info\x00', 0x800, 0x0)
read$auto_fake_panic_fops_(r0, &(0x7f0000000040)=""/246, 0xf6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1942, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x200000001d, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
r1 = socket(0xa, 0x801, 0x84)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0xfffffffd, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0x4})
connect$auto(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @private=0xa010102, 0x2}, 0x10)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
lsm_list_modules$auto(0x0, 0x0, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000001200), 0x8000, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="280200006ab5073ab23b85d7bfb0b460136b2684a977e1bba27182a6d6ce3a1d6a70b4ae9a52c85280ba2028f5819faf3f09949abc", @ANYRES16=0x0, @ANYBLOB="13002ebd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="0400d1000500590008000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x440c0)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, "000f4e278bc6"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x53}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x80)
executing program 1:
socket(0x1e, 0x4, 0x10)
futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5)
futex$auto(&(0x7f0000000080)=0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffa)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth0_to_team/arp_filter\x00', 0x82801, 0x0)
r1 = socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c000180"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804)
write$auto(r2, &(0x7f0000000000)='@\x00', 0xfe)
close_range$auto(0x2, 0x8, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000080)="3880655bea", 0x5)
futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x8, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3)
r5 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$auto_virtual_ncidev_fops_virtual_ncidev(r5, &(0x7f0000000140)=""/98, 0x62)
executing program 3:
madvise$auto(0x110c230000, 0x8031ca, 0x9)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd10/queue/iosched/read_expire\x00', 0x1c2b02, 0x0)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x1}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x803})
writev$auto(0xffffffffffffffff, 0x0, 0xff)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)
bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x68)
r2 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r2, 0x114, 0x2715, 0xfffffffffffffffc, 0x0)
clock_adjtime$auto(0x2, &(0x7f00000000c0)={0x80000000, 0x0, 0x6, 0x6, 0x9, 0x200, 0x400, 0x0, 0x1, 0xa3e1, 0x2, {0x80000001, 0x40}, 0x0, 0x8000000000000001, 0x7f, 0xc, 0x0, 0x4, 0x1a67, 0x3ff, 0x6, 0x4, 0x4})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/platform/dummy_hcd.3/usb4/power/wakeup_last_time_ms\x00', 0x80800, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/net/rxrpc/locals\x00', 0x40080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0)
executing program 1:
r0 = socket(0x2, 0x1, 0x0)
r1 = getsockopt$auto(0xffffffffffffffff, 0x65, 0x2, 0xffffffffffffffff, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
write$auto(0x3, 0x0, 0xfffffdef)
mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0)
openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/1:0:0:0\x00', 0x450000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000000)={0x8000, 0x0, 0xfffffffffffffffb, 0x2})
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x6, 0x0)
epoll_create$auto(0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd$auto(0x1)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
arch_prctl$auto_ARCH_GET_GS(0x1004, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
capset$auto(0x0, 0xfffffffffffffffe)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_tables_targets\x00', 0xa80, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000001040)=""/4088, 0xff8)
epoll_ctl$auto(0x5, 0x3, r0, 0x0)
executing program 4:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/124, 0x7c)
r0 = prctl$auto(0x8, 0x1, 0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x11, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), r2)
sendmsg$auto_HWSIM_CMD_REGISTER(r1, &(0x7f00000003c0)={0x0, 0x3d, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000ed0e8c6f528e3c409776170152aef798ad5762f8c45e553ba5aee33f550c45e5403aa0a1c754b21899be4c11a82e92deecfd5724f2fc8eda62b0f661e9373065aa4397d825f966dd2b6eb70a47ecb4332c76", @ANYRESOCT=r1, @ANYBLOB="010028bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a})
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0)
r5 = prctl$auto_PR_SET_SHADOW_STACK_STATUS(0x4b, 0x100000001, r4, 0xc, 0xd)
r6 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r6, 0x7b9, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000300), r5)
r9 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim2/trap_flow_action_cookie\x00', 0x200, 0x0)
sendmsg$auto_HANDSHAKE_CMD_DONE(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r8, @ANYBLOB="030000000000000086acbd7000fcdbdf2503", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=r0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40c5}, 0x20040000)
mq_getsetattr$auto(r3, &(0x7f0000000080)={0x5, 0x5, 0xfffffffffffffffc, 0x11}, &(0x7f00000000c0)={0x3a3, 0x5, 0xa, 0x4})
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dri/renderD128\x00', 0x260a00, 0x0)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd)
getsockopt$auto_SO_REUSEPORT(0xffffffffffffffff, 0x3, 0xf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
statmount$auto(0x0, 0x0, 0xb, 0x4003)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
socket(0x2, 0x5, 0x0)
bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xd2)
executing program 3:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 1:
bpf$auto(0x0, 0x0, 0x6f4)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x55)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x62081, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty30\x00', 0x62c00, 0x0)
ioctl$auto(r0, 0x4b30, 0x20000009)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x2, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xdff1, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x8, 0x5, 0xfffffffffffffffd, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0x9)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mprotect$auto(0x10000, 0xd4, 0x7ff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_MON_SET(r2, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/dmi/id/modalias\x00', 0x40280, 0x0)
executing program 2:
r0 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r0)
sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082dbd7000fbdbdf250500150006090000000e0000000000e2210b3ffea53ab7f911d580ce1060be1624ae161fad784c7c84aad0799f343490bbba201de44d02a5d4c057b9c50523ff36dd68002f44182df73e5ff24a9b76f9"], 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x4048810)
socket(0x25, 0x1, 0x8cb)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
mmap$auto(0x10000, 0x1, 0x6, 0x8000000008012, 0x3, 0x2)
r2 = clone3$auto(&(0x7f0000000300)={0x5, 0xa9, 0x1, 0x2, 0x8, 0x10000, 0x0, 0x3000000000000, 0x4, 0x7f, 0x2b}, 0x2)
move_pages$auto(r2, 0xe, 0x0, 0x0, 0x0, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/loop5\x00', 0x8040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x7, 0x6, 0x47, 0x8, @multicast}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0)
init_module$auto(0x0, 0xffff9, 0x0)
executing program 4:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r1 = socket(0x29, 0x805, 0x0)
sendmsg$auto_NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x8}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffc}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x29, 0x805, 0x0)
mmap$auto(0x4, 0x20006, 0x400000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0xfffffffffffffffe)
r3 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x80, 0x0)
readv$auto(r3, &(0x7f0000000140)={&(0x7f0000000040), 0x2}, 0x5)
sysfs$auto(0x2, 0x6, 0x0)
fsopen$auto(0x0, 0x8)
fsconfig$auto(r2, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
fsconfig$auto(r0, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
ftruncate$auto(0x3, 0x700)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x2002, 0x0)
ioctl$auto_SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000080))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r6=>0x0})
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x26, 0x80805, 0x0)
socket(0xa, 0x3, 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r6, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92)
executing program 1:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_FLOW={0x6, 0x6, 0xa}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9a", 0x16)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019761b5538a6868b07bb9da31631f6e1f6331ec2db23b6c056c62b9fc9f13fb45b09ded4ad3ee82d358891077529106b0b38aa7fd752484c7c46903d7ff7e932ee1f4aeefd8470e6c946990ee8343f0347b3de40620583d4779247ad2d7b278260866acec29d0f486e7f600e21fd04250a1f73ac3801f559ab9fcc704caa07a80a5100aafd437433b4fae716803a6db78b9e1d0b587ca53ca22a50880947c3e89102aa1c6b584f284a154f53f3332d2b5e154969cbe589472f42da3412e9cdd5c51ae096a6ad5ff5774c6276d59c83548b57bb63f88166905e2734992701971e037e0bffb114c62db1a6ebb05f6c455df2ed9bade7a85b0e2efe9cd78d80249ec133247b5fc04c0fe37eac88a1691bf50f2bdbed0c9a93595d104a1fb10390d02af3c9cfb7ff6ae6152cd3547e481651ee55d71fe213bc1c7f99cf65005e01e3518f6d910d1d50c56d8659d6e307625fe16fd34e7b089192611b8cfabb489aea19937440bd3b841cde573f182597c57cd39d38caafe132c8fab3bf4c4ab2d16abba32035f4fb6ea7cd52a411f49ddd9c357c14a613db70178590c403dc43427db435e02f245e04d004ab78969a50f426a63e5ed2098074b47bc26daf2cb0a2bda0670568e7a8104db4b2b5995b39e8e48bbe8fff6ef58bd6add50d747d50c5c456305d9e5565d3a695ad6f3cc6ad2052ead94b17aa4139455f8e18a55c4f9b49132994dda5955b44b31fa5010100003955241cd3885e860568649aa2900d0fba0d6562819630942add10ec6244487ce02f677e7220013af329c91c3cd2269f8e5ed91a55b7d848fd75775d5d7b8aa7969c71b8e76952bee87cd6fdc50bf50193994efebfa22cb22a911d37554f6474fcdbe309f70809644b2086b172e609980e68518cbb34765b1edca26523f7893d48ebed5d902409ddd0cbbb7f6b122a83c1395d1e9eac371b47893092754334a7327b634c58a512c2d254ac100d20aebf67fbe085260cf4e976ba0a45b5b976a9d56d0d7c9cfc4cc54871566891a654c2e867af8072b9235243492d1c794d077be97738c406590c883ec15f4872d12cf5bdf7848c19a1537f16386161130c1ecea6bd5a7f91628417e8efafbe3c3b08a3a997f2a68c7c53bcaab0738fec56086cf9c2c2d62a35ee032c68e18d95e2a8f10bc1934df5a8e9268c5a6b0ecee8e24f37f71ad8aab420b3fc9a4e7a33373cd7b77a1b1d4188d36db3f7a8b2ead1a5885af1aa981ebd87bc835484e7070c4ecf5a1107b75d765120b63a755dd154f9c5b58d0220f2bb93783f6f6b10f73115da02b5714734742c6b3db13a8fcee61abc152255ea185af5d106611ca4d3337fb9c410d3a2647e3cd73fa5f1e5dbbd01e18761ae9fd271bec553315d2b7caab5e550a2c0b28d919a2a627eee6b0ea481c4d96df774834efd65d0f77e0e4b9eac0c4cee22b05ba1a900aee500be5a21f0b956e2106f84fef2036be842e2d6c888e13c55e90a224f02eb1c50d657cf89f0ba5843f32b8e7108114ba91e691ac204dd7a6d40129bee8c1e61cabe46613c7755604787406e4793c271a405ad4713477167dc546a74f3c74948da40e4d577eb5c7cfb90c2d47adef789877f0639f0490a23fc82b8858acaed1e04ebb47b31ea5fbbbd554f343da5b99f295b7797c57ec2e2f16029c080196c929567438c81d9ac77746e59b1863214e714af009ac4e7ae566321158d440d1f62239971f438a77b94a71acaaa6ee388f7c55763cbe4560f4a7ced6ad448cddda2f697812306e7fdd03e0050d7966f6af51efe597d392843fd378b9621bb6a45ee0189f4527f45de88af3a7b566d637b555af50ede09e157b43768377c78e769bd762df89c4c715d4e4ad286076f154b5d73b968fd234bd92108c365e5b1c34b5a79c598b6223dee54b231476ca776cae0c11330178d32354de5d4a1e1c1c7a9fbd30619b966e2ee2ec15ce6ccf80baf39f7997c20de1a95f36fa11c3f283688a8fd166b5c415d33cde5d2acee738ef656ff9181962423f5214e0b4af81d6332130b37295f7a14b5bafcca0adde0331607e10f5a7bc85991279391b0e284f3e60b8fc79ad1404c429f00fc40d214019073e70ba07e4307018d9c5f7840fc8f99c36d2228b8c5aa0b9d4cf9df2567c00d4c0d068eb338e0eab2428634c50402ac1c30adcc4098f53d665321a4f0168c70a60aa55d27d23809ef5b519ff9bac4667eb94ac7e5c1eab56716fe88859344a221463fd1cbe0eb68b963d73aa93b3e3a9a1ba1aaa25131c2000ffd5f17a19978c94bdfc80d7fe72446187c47b4e3169442d9881036632f89dc77628ce815a825b0e07f6e52074789175d54589fd4c432913db6dce142471e4418cc7f36cee327000f4f6805109873d8e79b308d47398231c666312e601fd7a00df76e9b7a92f0c11446f2bd0e79843da98f79928bdfd5d719b87f3ca7eb7b920f663efea42a7bf147c5e5d26624d68cb755662ac07c7d6d8b96008a0c4a6f3f21b981cb9c0120955f9c87d269a3c2bee2ec93b5e6b52ec21ee4baed36888cfdfe75b9603fd453a2735192108de5585e219b38baf819e9c1cb30489028464ca18868aee9fe35ef94407c9a95cf4ecdb10926fc0ddd1b3b6778aa0bb521f03541a7cdab827618e031319cc5b18a4e02000060d5f6860b8e96c8a55d0135c3e55bd2ae9d021e280595ccceda8f7c41b73917f3b8f94c91fd7fa5ee5e78335ffbc07f95d1d1863d81a8bf35522952a09669169fd3ee4b1a409bba774c8b50eaba7b9c4c80e1519294fbf75e1d536b4e748ad2546416114572b1d5455d80f043c66a124a713a5934dba9dd3271e61f951a3deff533370a5463728bc4e5c3edfb18452dd3958e6149247b84f7f341e840175511cea7f55993572027e033abf55ffbffca2de4b01919c939fa47433402ec4289c809539a9356dc34b2cecc5b691e0cebf0d17dbcaede247988650188dd6ae64c9dc83ac3ea8fa9d69fe0fbde9dd0db69108167f89c76dfa98aa163d05f2d8d823a87f313438364ee38c050fe91750144873425d9f83328bf4395e5f5f77229387d779fb38f8ecf", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-accept$auto-mmap$auto-openat$auto_mon_fops_text_t_mon_text-openat$auto_def_blk_fops_fs-mmap$auto-socketpair$auto-syz_genetlink_get_family_id$auto_ovs_meter-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-read$auto-ioperm$auto-openat$auto_tty_fops_tty_io-unshare$auto-openat$auto_cachefiles_daemon_fops_internal-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-openat$auto_tty_fops_tty_io-write$auto_tty_fops_tty_io-setpriority$auto_PRIO_USER-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-bpf$auto-sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
single: failed to extract reproducer
bisect: bisecting 31 programs with base timeout 1m40s
testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 20, 30, 24, 2, 30, 30, 24, 22, 20, 24, 20, 13, 24, 12, 30, 22, 26, 27, 30, 21, 29, 15, 16, 30, 20, 30, 21, 30, 20, 29]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf25010000000600020000000000050007001000000008000900dc781e2108000a000800000014001f00ff090000000000000000000000000001140020"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004)
setreuid$auto(0xffffffffffffffff, 0x0)
socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
bind$auto(0x3, 0x0, 0x68)
socket(0x10, 0x80002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0xf000, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r3, 0x13, 0x70bd26, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
sendmsg$auto_NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x3ac, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0xffff}, @NL80211_ATTR_CSA_IES={0x234, 0xb9, 0x0, 0x1, [@nested={0x188, 0x57, 0x0, 0x1, [@typed={0x4, 0x105}, @nested={0x4, 0xb9}, @nested={0x4, 0xfa}, @nested={0x4, 0x9}, @nested={0x4, 0x83}, @generic="6870e1cce7188311c57a058f98398271103896a2ad1eaa05cfde8801868b2f82439ccadf0057f04eb1bf0b2e22cab477e114da4f7600fcb3167bbe3546c1835c3f9ee9a7bff3d2ca9860c6c563406de32f77317f4c7978aa6b0344b46ac5a76a1124d84db0be9ec949aa8686fb03b8d92ebcab1cb2dea224183944a0bafecc282779c9f9ab289ce37015", @generic="9034c8c8da581565242379913406aa897e0d22105b720959b7c585ed08dff03c6327d7df7603d6b5b85d5d0ab044f313b1f2e43a21a0cf1b7ecd8cd169039f0cf1e9196098f38f2fd6baef484764b63703227d36a2ef0b3bca55ddfc11742da6c5aeff67dc87f71239fe64bc8c00371fe0b0c328987b0fe513fd852558601b9ad77f83e102a543b0f66a7102bed656c8360babbe65ae4807222d1188c8298da4eb6a2fc7434168467e51276901420dfd6047bab12e4b22cf482b48080ba3dfa0782060865ef5078ecf63c2962ee205f9bb496ba7402d1e58bf7499da6b6a8734e959f12515c6"]}, @typed={0x93, 0xc2, 0x0, 0x0, @binary="913ccf55f13b8561f606e4780c2da481ffe83da726817cd16339b560fc889759ded16dc5e6e9f66b9a9f56052e0615309790b5fb520562150e3e40c8dcce8fa2e7091ae83ecc2d805128995d6834af7378e14d45f828104afebf4725d316e56e9acbc8c65b2adc983d7698a34f6b7e80c2d20432ed728a6803148d4fa47efe922f0f5270608d3c86378e53c6288b76"}, @typed={0x14, 0x65, 0x0, 0x0, @ipv6=@mcast1}]}, @NL80211_ATTR_MAC_MASK={0x1e, 0xd7, "ca3fdaf4c8484f926fedb70642110fac5327b9a2697124e65337"}, @NL80211_ATTR_FTM_RESPONDER={0x8c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x85, 0x2, "35dc11c357ac32cb777cb94bc26221f714654a470289d0682bdd2012e0283d9cbd7b3f7c2d59a33ee3da3c03c54478636df112646c9d8deff5c690871755cfa46a30f2619e069cbfde083ccc0908b743973dc867d44bcc8e29bedb0f71bfe14297c67922442c00c9d92a4ae66f52ec3b200464fe6f3f2aed7e484f54c49bb0e89c"}]}, @NL80211_ATTR_AUTH_DATA={0x9e, 0x9c, "e7bc0c570672200b26658690ad796c2309ea29693e7f03e44f7bed9cf13e83fff0ec3fed5ee243c7f4a5c660c7f1891b89cab7da7b69583f78b52783f50168e5c7b0ce6b3d817a4b4045ab62ad1605c18fee44301ef13369d5bca6170300f77f3bb6f36311a3912ccc6accc811dcc2420c67eda8659be6482e1f244e30bf360240e743eddcbbb854bcc1868045adda5c8fb7d1e8ba8212af3cc9"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x8008840}, 0x1)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007a80), 0xffffffffffffffff)
executing program 0:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_FLOW={0x6, 0x6, 0xa}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto_USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
connect$auto(0x3, 0x0, 0x54)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/numa_balancing\x00', 0x2002, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/team_slave_0/rpl_seg_enabled\x00', 0x20202, 0x0)
sendfile$auto(r1, r2, 0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x183042, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0)
read$auto(r3, 0x0, 0x1)
write$auto(0x3, 0x0, 0xfdef)
r4 = socket(0x25, 0x5, 0x0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="cc120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x12cc}, 0x1, 0x0, 0x0, 0x20000895}, 0x1)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
ioctl$auto(0x3, 0x541b, 0x7f)
ioctl$auto_USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0x9)
mmap$auto(0x0, 0x4, 0x4000000000e2, 0x40eb1, 0xffffffffffffffff, 0x10000)
mmap$auto(0x2, 0x5, 0xe1, 0xebf, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
fanotify_mark$auto(0xffffffffffffffff, 0x917, 0x1, 0xffffffffffffffff, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xc, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0x81)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
executing program 0:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
close_range$auto(r0, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
socket(0xa, 0x3, 0x3b)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x5)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket(0xa, 0x801, 0x84)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r6, r6, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mq_notify$auto(r5, &(0x7f0000000240)={@sival_int=0x6, @inferred=r2, 0x7, @_sigev_thread={&(0x7f0000000180)=&(0x7f0000000140)=0x3, &(0x7f00000001c0)="58f3881cad4a2bc87f7894c706159e458a5f7d11ca799b99d7fd0d12cd082402b0012fd5032ed2602d6e6cb9271522dc86d5f4f94645e6218dc1"}})
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
executing program 0:
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, 0x0, 0x8, 0x8)
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 32:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 2:
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r0, 0x0, 0x2, 0x0)
r1 = socket(0x2a, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
read$auto(r2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(0x0, 0x0, 0x227, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)
ioctl$auto_USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000080)={0x81, 0x7fdfff46, 0x8, 0x0})
openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x6800, 0x0)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/lockd/nlm_end_grace\x00', 0x48041, 0x0)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, 0x0, 0x54)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x3, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x81)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 4:
socket(0x22, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8})
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00')
readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgget$auto(0xa, 0x77d9)
msgrcv$auto(0x7, 0x0, 0x2, 0x2, 0xb1)
msgrcv$auto(0xfffffffc, 0x0, 0xffc, 0x1, 0xb1)
msgsnd$auto(0x7, &(0x7f0000000140)={0x6, 0x9}, 0x8001, 0x7)
unshare$auto(0x40000080)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, &(0x7f0000000040)={0x1, 0x5}, 0x7, 0x9)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40004)
executing program 2:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 3:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
close_range$auto(r0, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
socket(0xa, 0x3, 0x3b)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x5)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket(0xa, 0x801, 0x84)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r6, r6, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mq_notify$auto(r5, &(0x7f0000000240)={@sival_int=0x6, @inferred=r2, 0x7, @_sigev_thread={&(0x7f0000000180)=&(0x7f0000000140)=0x3, &(0x7f00000001c0)="58f3881cad4a2bc87f7894c706159e458a5f7d11ca799b99d7fd0d12cd082402b0012fd5032ed2602d6e6cb9271522dc86d5f4f94645e6218dc1613127a9d198ec7d14ed949c34b240055e6a683246f7f9771f429ed31944169822cc71a018bde471160c283a"}})
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
executing program 4:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_FLOW={0x6, 0x6, 0xa}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a37", 0x13)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 3:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffe, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x7, {0x100000000, 0x10000}, 0x8005, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x20000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(r0, 0x8, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$auto(0xffffffffffffffff, 0x4b4a, 0x9)
r2 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r2, 0x29, 0x30, 0x0, 0xd393)
executing program 3:
mmap$auto(0x0, 0x12000a, 0x1000, 0xeb2, 0x401, 0x7fffffffffffffff)
r0 = socket(0x10, 0x2, 0xfffffffc)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x2, 0x4)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
r2 = socket(0x2, 0x3, 0x1)
connect$auto(r2, &(0x7f0000000000), 0x55)
sendmmsg$auto(r2, &(0x7f0000000200)={{&(0x7f0000000100), 0xf, 0x0, 0x2, 0x0, 0x800000000000003, 0xfffff2cf}, 0x6}, 0x2319, 0x5)
r3 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$auto_NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
write$auto_console_fops_tty_io(r1, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b3c", 0x46)
r4 = socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, r4, 0x28000)
pipe2$auto(0x0, 0x80)
socket(0x28, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
pipe$auto(0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0)
executing program 1:
openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000040)={@siginfo_0_0={0x8, 0x57ca, 0x800, @_rt={<r1=>0xffffffffffffffff, 0xee01, @sival_int=0x9}}}, 0x4, &(0x7f00000000c0)={{0x8, 0x9}, {0x4, 0xffffffff80000000}, 0x3, 0x8000, 0x9, 0x0, 0xa3f, 0x7f, 0x881a, 0xa00, 0x2, 0x9, 0xe, 0xfffffffffffffff7, 0x7})
capset$auto(&(0x7f0000000180)={0x7, r1}, &(0x7f00000001c0)={0x2, 0x1, 0x6})
r2 = socket(0x11, 0x3, 0x2)
fcntl$auto(r2, 0xe149, r0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8955, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_SET_SERVICE(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000)
readv$auto(0x3, &(0x7f0000000000)={0x0, 0x9c}, 0x1)
executing program 4:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r1 = socket(0x29, 0x805, 0x0)
sendmsg$auto_NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x8}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffc}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x29, 0x805, 0x0)
mmap$auto(0x4, 0x20006, 0x400000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0xfffffffffffffffe)
r3 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x80, 0x0)
readv$auto(r3, &(0x7f0000000140)={&(0x7f0000000040), 0x2}, 0x5)
sysfs$auto(0x2, 0x6, 0x0)
fsopen$auto(0x0, 0x8)
fsconfig$auto(r2, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
fsconfig$auto(r0, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
ftruncate$auto(0x3, 0x700)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x2002, 0x0)
ioctl$auto_SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000080))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r6=>0x0})
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x26, 0x80805, 0x0)
socket(0xa, 0x3, 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r6, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92)
executing program 1:
socket(0x22, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8})
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00')
readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgget$auto(0xa, 0x77d9)
msgrcv$auto(0x7, 0x0, 0x2, 0x2, 0xb1)
msgrcv$auto(0xfffffffc, 0x0, 0xffc, 0x1, 0xb1)
msgsnd$auto(0x7, &(0x7f0000000140)={0x6, 0x9}, 0x8001, 0x7)
unshare$auto(0x40000080)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, &(0x7f0000000040)={0x1, 0x5}, 0x7, 0x9)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40004)
executing program 4:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r0 = bpf$auto(0x109, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x8}, 0xc)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), r0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, &(0x7f0000000100)="e3ba2fa74c9c258fa3dc1af994d181fd2da4b1ff2f6ac0f1a4473308c725ada929c13a75c30047abca9e52bd199249343929465bd2fa003836a4d82e715a9c2b738e38c8d2639014556154fc32566e45cf23479f3eb85ef3e870705af07cac843e03e4cb24cbc768b1d03372ce105a001131648bde9cdea4617478495640eb44332d60770ca8d196c20bfb321c59034afa94ccae08d2ba04ff641624d8a3e9ceb11f6aa104d847b7ba1c39685eaa4872328d8a7ff42587726681b5eb80dac58fa2f349d75cf0090b7fc7e9601c8b874f8f60c3f7f2c1d07f4485cb2bab17731c5f06992d")
read$auto(0xffffffffffffffff, 0x0, 0x20)
r1 = socket(0x2, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x55)
timer_create$auto(0xfffffff9, &(0x7f0000000000)={@sival_int=0x3, @inferred=<r2=>0xffffffffffffffff, 0x1, @_tid}, &(0x7f0000000040)=0x200)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio29\x00', 0x0, 0x0)
poll$auto(&(0x7f0000000040)={r3, 0xfffa, 0x6}, 0x1, 0x80000001)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'team_slave_0\x00'})
timer_settime$auto(0x0, 0x101, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_SET(r4, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x400c4)
msgctl$auto_MSG_INFO(0x2, 0xc, &(0x7f0000000300)={{0x1ff, <r6=>0xee01, 0xee01, 0x5, 0x1, 0x40, 0x4}, &(0x7f0000000080)=0x5, &(0x7f0000000280)=0x4, 0xcb, 0x4, 0x6, 0x8, 0xff, 0xa9b, 0x3, 0x3})
sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="8c0300667e561d4677cd90734caa26", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000095e1689682bc4466b52a0593321d630299e82b20add2c2ba433cb0478e870b5f09b82987c471403dc767903fbb096e94790192c7519e974f993510c69778a1e14a9dba88520f0936865ae9e3ad224ad9a4d260f92f94c2601167a6183231d0260f39e19613a679cdabe47474d9d67737c43ee60106a6f1a231fe917f6e5c63730ffb1fc83ab2e5f390023ce6ba0000000c00078008000e", @ANYRES32=r6, @ANYBLOB], 0x38c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000884)
connect$auto(r1, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x7f)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x10000005, 0x10007)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 2:
mmap$auto(0x0, 0x12000a, 0x1000, 0xeb2, 0x401, 0x7fffffffffffffff)
getcwd$auto(&(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/airtime_flags\x00', 0x2)
socket(0x10, 0x2, 0xfffffffc)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r1 = socket(0x2, 0x3, 0x1)
r2 = socket(0xa, 0x2, 0x73)
sendto$auto(r2, 0x0, 0x402, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e2c483400200ff803636166b00"}, 0x1c)
connect$auto(r1, &(0x7f0000000000), 0x55)
sendmmsg$auto(r1, &(0x7f0000000200)={{&(0x7f0000000100), 0xf, 0x0, 0x2, 0x0, 0x800000000000003, 0xfffff2cf}, 0x6}, 0x2319, 0x5)
sendmsg$auto_NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
write$auto_console_fops_tty_io(r0, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b3c", 0x46)
r3 = socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, r3, 0x28000)
pipe2$auto(0x0, 0x80)
socket(0x28, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
pipe$auto(0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0)
executing program 3:
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/fc_info\x00', 0x800, 0x0)
read$auto_fake_panic_fops_(r0, &(0x7f0000000040)=""/246, 0xf6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1942, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x200000001d, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
r1 = socket(0xa, 0x801, 0x84)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0xfffffffd, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0x4})
connect$auto(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @private=0xa010102, 0x2}, 0x10)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
lsm_list_modules$auto(0x0, 0x0, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000001200), 0x8000, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="280200006ab5073ab23b85d7bfb0b460136b2684a977e1bba27182a6d6ce3a1d6a70b4ae9a52c85280ba2028f5819faf3f09949abc", @ANYRES16=0x0, @ANYBLOB="13002ebd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="0400d1000500590008000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x440c0)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, "000f4e278bc6"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x53}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x80)
executing program 1:
socket(0x1e, 0x4, 0x10)
futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5)
futex$auto(&(0x7f0000000080)=0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffa)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth0_to_team/arp_filter\x00', 0x82801, 0x0)
r1 = socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c000180"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804)
write$auto(r2, &(0x7f0000000000)='@\x00', 0xfe)
close_range$auto(0x2, 0x8, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000080)="3880655bea", 0x5)
futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x8, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3)
r5 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$auto_virtual_ncidev_fops_virtual_ncidev(r5, &(0x7f0000000140)=""/98, 0x62)
executing program 3:
madvise$auto(0x110c230000, 0x8031ca, 0x9)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd10/queue/iosched/read_expire\x00', 0x1c2b02, 0x0)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x1}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x803})
writev$auto(0xffffffffffffffff, 0x0, 0xff)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)
bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x68)
r2 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r2, 0x114, 0x2715, 0xfffffffffffffffc, 0x0)
clock_adjtime$auto(0x2, &(0x7f00000000c0)={0x80000000, 0x0, 0x6, 0x6, 0x9, 0x200, 0x400, 0x0, 0x1, 0xa3e1, 0x2, {0x80000001, 0x40}, 0x0, 0x8000000000000001, 0x7f, 0xc, 0x0, 0x4, 0x1a67, 0x3ff, 0x6, 0x4, 0x4})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/platform/dummy_hcd.3/usb4/power/wakeup_last_time_ms\x00', 0x80800, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/net/rxrpc/locals\x00', 0x40080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0)
executing program 1:
r0 = socket(0x2, 0x1, 0x0)
r1 = getsockopt$auto(0xffffffffffffffff, 0x65, 0x2, 0xffffffffffffffff, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
write$auto(0x3, 0x0, 0xfffffdef)
mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0)
openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/1:0:0:0\x00', 0x450000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000000)={0x8000, 0x0, 0xfffffffffffffffb, 0x2})
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x6, 0x0)
epoll_create$auto(0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd$auto(0x1)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
arch_prctl$auto_ARCH_GET_GS(0x1004, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
capset$auto(0x0, 0xfffffffffffffffe)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_tables_targets\x00', 0xa80, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000001040)=""/4088, 0xff8)
epoll_ctl$auto(0x5, 0x3, r0, 0x0)
executing program 4:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/124, 0x7c)
r0 = prctl$auto(0x8, 0x1, 0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x11, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), r2)
sendmsg$auto_HWSIM_CMD_REGISTER(r1, &(0x7f00000003c0)={0x0, 0x3d, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000ed0e8c6f528e3c409776170152aef798ad5762f8c45e553ba5aee33f550c45e5403aa0a1c754b21899be4c11a82e92deecfd5724f2fc8eda62b0f661e9373065aa4397d825f966dd2b6eb70a47ecb4332c76", @ANYRESOCT=r1, @ANYBLOB="010028bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a})
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0)
r5 = prctl$auto_PR_SET_SHADOW_STACK_STATUS(0x4b, 0x100000001, r4, 0xc, 0xd)
r6 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r6, 0x7b9, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000300), r5)
r9 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim2/trap_flow_action_cookie\x00', 0x200, 0x0)
sendmsg$auto_HANDSHAKE_CMD_DONE(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r8, @ANYBLOB="030000000000000086acbd7000fcdbdf2503", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=r0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40c5}, 0x20040000)
mq_getsetattr$auto(r3, &(0x7f0000000080)={0x5, 0x5, 0xfffffffffffffffc, 0x11}, &(0x7f00000000c0)={0x3a3, 0x5, 0xa, 0x4})
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dri/renderD128\x00', 0x260a00, 0x0)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd)
getsockopt$auto_SO_REUSEPORT(0xffffffffffffffff, 0x3, 0xf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
statmount$auto(0x0, 0x0, 0xb, 0x4003)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
socket(0x2, 0x5, 0x0)
bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xd2)
executing program 3:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 1:
bpf$auto(0x0, 0x0, 0x6f4)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x55)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x62081, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty30\x00', 0x62c00, 0x0)
ioctl$auto(r0, 0x4b30, 0x20000009)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x2, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xdff1, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x8, 0x5, 0xfffffffffffffffd, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0x9)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mprotect$auto(0x10000, 0xd4, 0x7ff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_MON_SET(r2, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/dmi/id/modalias\x00', 0x40280, 0x0)
executing program 2:
r0 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r0)
sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082dbd7000fbdbdf250500150006090000000e0000000000e2210b3ffea53ab7f911d580ce1060be1624ae161fad784c7c84aad0799f343490bbba201de44d02a5d4c057b9c50523ff36dd68002f44182df73e5ff24a9b76f9"], 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x4048810)
socket(0x25, 0x1, 0x8cb)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
mmap$auto(0x10000, 0x1, 0x6, 0x8000000008012, 0x3, 0x2)
r2 = clone3$auto(&(0x7f0000000300)={0x5, 0xa9, 0x1, 0x2, 0x8, 0x10000, 0x0, 0x3000000000000, 0x4, 0x7f, 0x2b}, 0x2)
move_pages$auto(r2, 0xe, 0x0, 0x0, 0x0, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/loop5\x00', 0x8040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x7, 0x6, 0x47, 0x8, @multicast}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0)
init_module$auto(0x0, 0xffff9, 0x0)
executing program 4:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r1 = socket(0x29, 0x805, 0x0)
sendmsg$auto_NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x8}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffc}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x29, 0x805, 0x0)
mmap$auto(0x4, 0x20006, 0x400000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0xfffffffffffffffe)
r3 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x80, 0x0)
readv$auto(r3, &(0x7f0000000140)={&(0x7f0000000040), 0x2}, 0x5)
sysfs$auto(0x2, 0x6, 0x0)
fsopen$auto(0x0, 0x8)
fsconfig$auto(r2, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
fsconfig$auto(r0, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
ftruncate$auto(0x3, 0x700)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x2002, 0x0)
ioctl$auto_SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000080))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r6=>0x0})
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x26, 0x80805, 0x0)
socket(0xa, 0x3, 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r6, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92)
executing program 1:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_FLOW={0x6, 0x6, 0xa}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9a", 0x16)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: bisecting 31 programs
bisect: split chunks (needed=false): <30>
bisect: split chunk #0 of len 30 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 20, 13, 24, 12, 30, 22, 26, 27, 30, 21, 29, 15, 16, 30, 20, 30, 21, 30, 20, 29]
detailed listing:
executing program 3:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
close_range$auto(r0, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
socket(0xa, 0x3, 0x3b)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x5)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket(0xa, 0x801, 0x84)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r6, r6, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mq_notify$auto(r5, &(0x7f0000000240)={@sival_int=0x6, @inferred=r2, 0x7, @_sigev_thread={&(0x7f0000000180)=&(0x7f0000000140)=0x3, &(0x7f00000001c0)="58f3881cad4a2bc87f7894c706159e458a5f7d11ca799b99d7fd0d12cd082402b0012fd5032ed2602d6e6cb9271522dc86d5f4f94645e6218dc1613127a9d198ec7d14ed949c34b240055e6a683246f7f9771f429ed31944169822cc71a018bde471160c283a"}})
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
executing program 4:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_FLOW={0x6, 0x6, 0xa}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a37", 0x13)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 3:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffe, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x7, {0x100000000, 0x10000}, 0x8005, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x20000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(r0, 0x8, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$auto(0xffffffffffffffff, 0x4b4a, 0x9)
r2 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r2, 0x29, 0x30, 0x0, 0xd393)
executing program 3:
mmap$auto(0x0, 0x12000a, 0x1000, 0xeb2, 0x401, 0x7fffffffffffffff)
r0 = socket(0x10, 0x2, 0xfffffffc)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x2, 0x4)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
r2 = socket(0x2, 0x3, 0x1)
connect$auto(r2, &(0x7f0000000000), 0x55)
sendmmsg$auto(r2, &(0x7f0000000200)={{&(0x7f0000000100), 0xf, 0x0, 0x2, 0x0, 0x800000000000003, 0xfffff2cf}, 0x6}, 0x2319, 0x5)
r3 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$auto_NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
write$auto_console_fops_tty_io(r1, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b3c", 0x46)
r4 = socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, r4, 0x28000)
pipe2$auto(0x0, 0x80)
socket(0x28, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
pipe$auto(0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0)
executing program 1:
openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000040)={@siginfo_0_0={0x8, 0x57ca, 0x800, @_rt={<r1=>0xffffffffffffffff, 0xee01, @sival_int=0x9}}}, 0x4, &(0x7f00000000c0)={{0x8, 0x9}, {0x4, 0xffffffff80000000}, 0x3, 0x8000, 0x9, 0x0, 0xa3f, 0x7f, 0x881a, 0xa00, 0x2, 0x9, 0xe, 0xfffffffffffffff7, 0x7})
capset$auto(&(0x7f0000000180)={0x7, r1}, &(0x7f00000001c0)={0x2, 0x1, 0x6})
r2 = socket(0x11, 0x3, 0x2)
fcntl$auto(r2, 0xe149, r0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8955, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_SET_SERVICE(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000)
readv$auto(0x3, &(0x7f0000000000)={0x0, 0x9c}, 0x1)
executing program 4:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r1 = socket(0x29, 0x805, 0x0)
sendmsg$auto_NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x8}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffc}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x29, 0x805, 0x0)
mmap$auto(0x4, 0x20006, 0x400000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0xfffffffffffffffe)
r3 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x80, 0x0)
readv$auto(r3, &(0x7f0000000140)={&(0x7f0000000040), 0x2}, 0x5)
sysfs$auto(0x2, 0x6, 0x0)
fsopen$auto(0x0, 0x8)
fsconfig$auto(r2, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
fsconfig$auto(r0, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
ftruncate$auto(0x3, 0x700)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x2002, 0x0)
ioctl$auto_SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000080))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r6=>0x0})
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x26, 0x80805, 0x0)
socket(0xa, 0x3, 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r6, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92)
executing program 1:
socket(0x22, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8})
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00')
readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgget$auto(0xa, 0x77d9)
msgrcv$auto(0x7, 0x0, 0x2, 0x2, 0xb1)
msgrcv$auto(0xfffffffc, 0x0, 0xffc, 0x1, 0xb1)
msgsnd$auto(0x7, &(0x7f0000000140)={0x6, 0x9}, 0x8001, 0x7)
unshare$auto(0x40000080)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, &(0x7f0000000040)={0x1, 0x5}, 0x7, 0x9)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40004)
executing program 4:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r0 = bpf$auto(0x109, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x8}, 0xc)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), r0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, &(0x7f0000000100)="e3ba2fa74c9c258fa3dc1af994d181fd2da4b1ff2f6ac0f1a4473308c725ada929c13a75c30047abca9e52bd199249343929465bd2fa003836a4d82e715a9c2b738e38c8d2639014556154fc32566e45cf23479f3eb85ef3e870705af07cac843e03e4cb24cbc768b1d03372ce105a001131648bde9cdea4617478495640eb44332d60770ca8d196c20bfb321c59034afa94ccae08d2ba04ff641624d8a3e9ceb11f6aa104d847b7ba1c39685eaa4872328d8a7ff42587726681b5eb80dac58fa2f349d75cf0090b7fc7e9601c8b874f8f60c3f7f2c1d07f4485cb2bab17731c5f06992d")
read$auto(0xffffffffffffffff, 0x0, 0x20)
r1 = socket(0x2, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x55)
timer_create$auto(0xfffffff9, &(0x7f0000000000)={@sival_int=0x3, @inferred=<r2=>0xffffffffffffffff, 0x1, @_tid}, &(0x7f0000000040)=0x200)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio29\x00', 0x0, 0x0)
poll$auto(&(0x7f0000000040)={r3, 0xfffa, 0x6}, 0x1, 0x80000001)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'team_slave_0\x00'})
timer_settime$auto(0x0, 0x101, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_SET(r4, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x400c4)
msgctl$auto_MSG_INFO(0x2, 0xc, &(0x7f0000000300)={{0x1ff, <r6=>0xee01, 0xee01, 0x5, 0x1, 0x40, 0x4}, &(0x7f0000000080)=0x5, &(0x7f0000000280)=0x4, 0xcb, 0x4, 0x6, 0x8, 0xff, 0xa9b, 0x3, 0x3})
sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="8c0300667e561d4677cd90734caa26", @ANYRES16=r5, @ANYBLOB="08002cbd7000fbdbdf2504000000690309803cbd090df1d5f7d70ef707a567003793e89e30dfd4689de34486fa397520b3dd702370ed61f7c5b5c14191a87ee121f35703468acdf16992a4490cbf9400ea33935cfa6c229f6ab8332642e92f25001b3f6b8b7321589fef486cb442ddc0670d7ae609a119275a80e410d716b097f83d2257cba54055b9eb2a732d67ed88eebe811abcde0f9c0de9cffbca5f604251b0dba7809fdbab9bd65e9040add82f3bb24216b9587a6ff8b64a9cd55066245a41bce779f8801d4c438d0799591be077cb1602c980040022800400278008004600e0000001db774976ebc4196d0b3465d9ac4c6eb29a07a42f62825e9c2d842f5a7f1964944810e5c73ee55c330e15054aef6b1845140647255b0f2e50a14a2ef625c54947c75231ce6752c26d1c6a7e038a739ed41e51f422cdc1353903ef904c626ee3f1f0143a357b320e347e923b2064ed25c02491c84d86ef492286d889d4eb5d4351b24c7c445ead439dce411d7b28b591b97c9b01db994f26bd0ffd39b91cf682b527a8eca611b970701ce87644de9171391b42fb11530b68f233a2f9d6c5d290993e0c9f2484126d25fdabf6326009ce942b4dd85093e11449a6003246f22be0787dd7cc93ced63929d0e54314d2ae0553e1342e6273446308e8d30d42ef7bff0f9aa935bc8970e9a24b27ecda62626b14e4ff4fb1fc515460fd28a063eee9d56779cfd87bd613b8e57ad4d9d28f85c826e9b87c18bd9314180f7ef9a3c2f2209b7b609e699b903cf1bbd850bf25017d0a96ade5c30e3be45c6e2f0836e303fc4cb629f2ef5a8b6dccb01faefa222b0a73091d2b8537a3209b810d5e54719cb624d38ea88112fff49f3ab475233ade3b236204de60e99c5c4aa9e8bdc226cfcc03e2cb061cbccdba062915469c2849a07ddc0fdad41b9c86c81cdb80acb0a5a6b51d69f3fbb05fe7e4d6962ddf0a8048adb84cdf925135d4c2a7ca5947f0ebf7f318a64ccd3fbcd4671fcee0ea62933ab6dc2f0400338004009e8008002d00", @ANYRES32, @ANYBLOB="000095e1689682bc4466b52a0593321d630299e82b20add2c2ba433cb0478e870b5f09b82987c471403dc767903fbb096e94790192c7519e974f993510c69778a1e14a9dba88520f0936865ae9e3ad224ad9a4d260f92f94c2601167a6183231d0260f39e19613a679cdabe47474d9d67737c43ee60106a6f1a231fe917f6e5c63730ffb1fc83ab2e5f390023ce6ba0000000c00078008000e", @ANYRES32=r6, @ANYBLOB], 0x38c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000884)
connect$auto(r1, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x7f)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x10000005, 0x10007)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 2:
mmap$auto(0x0, 0x12000a, 0x1000, 0xeb2, 0x401, 0x7fffffffffffffff)
getcwd$auto(&(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/airtime_flags\x00', 0x2)
socket(0x10, 0x2, 0xfffffffc)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r1 = socket(0x2, 0x3, 0x1)
r2 = socket(0xa, 0x2, 0x73)
sendto$auto(r2, 0x0, 0x402, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e2c483400200ff803636166b00"}, 0x1c)
connect$auto(r1, &(0x7f0000000000), 0x55)
sendmmsg$auto(r1, &(0x7f0000000200)={{&(0x7f0000000100), 0xf, 0x0, 0x2, 0x0, 0x800000000000003, 0xfffff2cf}, 0x6}, 0x2319, 0x5)
sendmsg$auto_NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
write$auto_console_fops_tty_io(r0, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b3c", 0x46)
r3 = socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, r3, 0x28000)
pipe2$auto(0x0, 0x80)
socket(0x28, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
pipe$auto(0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0)
executing program 3:
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/fc_info\x00', 0x800, 0x0)
read$auto_fake_panic_fops_(r0, &(0x7f0000000040)=""/246, 0xf6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1942, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x200000001d, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
r1 = socket(0xa, 0x801, 0x84)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0xfffffffd, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0x4})
connect$auto(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @private=0xa010102, 0x2}, 0x10)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
lsm_list_modules$auto(0x0, 0x0, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000001200), 0x8000, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="280200006ab5073ab23b85d7bfb0b460136b2684a977e1bba27182a6d6ce3a1d6a70b4ae9a52c85280ba2028f5819faf3f09949abc", @ANYRES16=0x0, @ANYBLOB="13002ebd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="0400d1000500590008000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x440c0)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, "000f4e278bc6"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x53}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x80)
executing program 1:
socket(0x1e, 0x4, 0x10)
futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5)
futex$auto(&(0x7f0000000080)=0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffa)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth0_to_team/arp_filter\x00', 0x82801, 0x0)
r1 = socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c000180"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804)
write$auto(r2, &(0x7f0000000000)='@\x00', 0xfe)
close_range$auto(0x2, 0x8, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000080)="3880655bea", 0x5)
futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x8, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3)
r5 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$auto_virtual_ncidev_fops_virtual_ncidev(r5, &(0x7f0000000140)=""/98, 0x62)
executing program 3:
madvise$auto(0x110c230000, 0x8031ca, 0x9)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd10/queue/iosched/read_expire\x00', 0x1c2b02, 0x0)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x1}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x803})
writev$auto(0xffffffffffffffff, 0x0, 0xff)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)
bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x68)
r2 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r2, 0x114, 0x2715, 0xfffffffffffffffc, 0x0)
clock_adjtime$auto(0x2, &(0x7f00000000c0)={0x80000000, 0x0, 0x6, 0x6, 0x9, 0x200, 0x400, 0x0, 0x1, 0xa3e1, 0x2, {0x80000001, 0x40}, 0x0, 0x8000000000000001, 0x7f, 0xc, 0x0, 0x4, 0x1a67, 0x3ff, 0x6, 0x4, 0x4})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/platform/dummy_hcd.3/usb4/power/wakeup_last_time_ms\x00', 0x80800, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/net/rxrpc/locals\x00', 0x40080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0)
executing program 1:
r0 = socket(0x2, 0x1, 0x0)
r1 = getsockopt$auto(0xffffffffffffffff, 0x65, 0x2, 0xffffffffffffffff, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
write$auto(0x3, 0x0, 0xfffffdef)
mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0)
openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/1:0:0:0\x00', 0x450000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000000)={0x8000, 0x0, 0xfffffffffffffffb, 0x2})
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x6, 0x0)
epoll_create$auto(0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd$auto(0x1)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
arch_prctl$auto_ARCH_GET_GS(0x1004, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
capset$auto(0x0, 0xfffffffffffffffe)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_tables_targets\x00', 0xa80, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000001040)=""/4088, 0xff8)
epoll_ctl$auto(0x5, 0x3, r0, 0x0)
executing program 4:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/124, 0x7c)
r0 = prctl$auto(0x8, 0x1, 0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x11, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), r2)
sendmsg$auto_HWSIM_CMD_REGISTER(r1, &(0x7f00000003c0)={0x0, 0x3d, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000ed0e8c6f528e3c409776170152aef798ad5762f8c45e553ba5aee33f550c45e5403aa0a1c754b21899be4c11a82e92deecfd5724f2fc8eda62b0f661e9373065aa4397d825f966dd2b6eb70a47ecb4332c76", @ANYRESOCT=r1, @ANYBLOB="010028bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a})
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0)
r5 = prctl$auto_PR_SET_SHADOW_STACK_STATUS(0x4b, 0x100000001, r4, 0xc, 0xd)
r6 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r6, 0x7b9, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000300), r5)
r9 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim2/trap_flow_action_cookie\x00', 0x200, 0x0)
sendmsg$auto_HANDSHAKE_CMD_DONE(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r8, @ANYBLOB="030000000000000086acbd7000fcdbdf2503", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=r0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40c5}, 0x20040000)
mq_getsetattr$auto(r3, &(0x7f0000000080)={0x5, 0x5, 0xfffffffffffffffc, 0x11}, &(0x7f00000000c0)={0x3a3, 0x5, 0xa, 0x4})
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dri/renderD128\x00', 0x260a00, 0x0)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd)
getsockopt$auto_SO_REUSEPORT(0xffffffffffffffff, 0x3, 0xf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
statmount$auto(0x0, 0x0, 0xb, 0x4003)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
socket(0x2, 0x5, 0x0)
bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xd2)
executing program 3:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 1:
bpf$auto(0x0, 0x0, 0x6f4)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x55)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x62081, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty30\x00', 0x62c00, 0x0)
ioctl$auto(r0, 0x4b30, 0x20000009)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x2, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xdff1, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x8, 0x5, 0xfffffffffffffffd, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0x9)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mprotect$auto(0x10000, 0xd4, 0x7ff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_MON_SET(r2, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/dmi/id/modalias\x00', 0x40280, 0x0)
executing program 2:
r0 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r0)
sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082dbd7000fbdbdf250500150006090000000e0000000000e2210b3ffea53ab7f911d580ce1060be1624ae161fad784c7c84aad0799f343490bbba201de44d02a5d4c057b9c50523ff36dd68002f44182df73e5ff24a9b76f9"], 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x4048810)
socket(0x25, 0x1, 0x8cb)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
mmap$auto(0x10000, 0x1, 0x6, 0x8000000008012, 0x3, 0x2)
r2 = clone3$auto(&(0x7f0000000300)={0x5, 0xa9, 0x1, 0x2, 0x8, 0x10000, 0x0, 0x3000000000000, 0x4, 0x7f, 0x2b}, 0x2)
move_pages$auto(r2, 0xe, 0x0, 0x0, 0x0, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/loop5\x00', 0x8040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x7, 0x6, 0x47, 0x8, @multicast}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0)
init_module$auto(0x0, 0xffff9, 0x0)
executing program 4:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r1 = socket(0x29, 0x805, 0x0)
sendmsg$auto_NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x8}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffc}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x29, 0x805, 0x0)
mmap$auto(0x4, 0x20006, 0x400000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0xfffffffffffffffe)
r3 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x80, 0x0)
readv$auto(r3, &(0x7f0000000140)={&(0x7f0000000040), 0x2}, 0x5)
sysfs$auto(0x2, 0x6, 0x0)
fsopen$auto(0x0, 0x8)
fsconfig$auto(r2, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
fsconfig$auto(r0, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
ftruncate$auto(0x3, 0x700)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x2002, 0x0)
ioctl$auto_SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000080))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r6=>0x0})
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x26, 0x80805, 0x0)
socket(0xa, 0x3, 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r6, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92)
executing program 1:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_FLOW={0x6, 0x6, 0xa}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9a", 0x16)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 20, 30, 24, 2, 30, 30, 24, 22, 20, 21, 29, 15, 16, 30, 20, 30, 21, 30, 20, 29]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf25010000000600020000000000050007001000000008000900dc781e2108000a000800000014001f00ff090000000000000000000000000001140020"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004)
setreuid$auto(0xffffffffffffffff, 0x0)
socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
bind$auto(0x3, 0x0, 0x68)
socket(0x10, 0x80002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0xf000, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r3, 0x13, 0x70bd26, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
sendmsg$auto_NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x3ac, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0xffff}, @NL80211_ATTR_CSA_IES={0x234, 0xb9, 0x0, 0x1, [@nested={0x188, 0x57, 0x0, 0x1, [@typed={0x4, 0x105}, @nested={0x4, 0xb9}, @nested={0x4, 0xfa}, @nested={0x4, 0x9}, @nested={0x4, 0x83}, @generic="6870e1cce7188311c57a058f98398271103896a2ad1eaa05cfde8801868b2f82439ccadf0057f04eb1bf0b2e22cab477e114da4f7600fcb3167bbe3546c1835c3f9ee9a7bff3d2ca9860c6c563406de32f77317f4c7978aa6b0344b46ac5a76a1124d84db0be9ec949aa8686fb03b8d92ebcab1cb2dea224183944a0bafecc282779c9f9ab289ce37015", @generic="9034c8c8da581565242379913406aa897e0d22105b720959b7c585ed08dff03c6327d7df7603d6b5b85d5d0ab044f313b1f2e43a21a0cf1b7ecd8cd169039f0cf1e9196098f38f2fd6baef484764b63703227d36a2ef0b3bca55ddfc11742da6c5aeff67dc87f71239fe64bc8c00371fe0b0c328987b0fe513fd852558601b9ad77f83e102a543b0f66a7102bed656c8360babbe65ae4807222d1188c8298da4eb6a2fc7434168467e51276901420dfd6047bab12e4b22cf482b48080ba3dfa0782060865ef5078ecf63c2962ee205f9bb496ba7402d1e58bf7499da6b6a8734e959f12515c6"]}, @typed={0x93, 0xc2, 0x0, 0x0, @binary="913ccf55f13b8561f606e4780c2da481ffe83da726817cd16339b560fc889759ded16dc5e6e9f66b9a9f56052e0615309790b5fb520562150e3e40c8dcce8fa2e7091ae83ecc2d805128995d6834af7378e14d45f828104afebf4725d316e56e9acbc8c65b2adc983d7698a34f6b7e80c2d20432ed728a6803148d4fa47efe922f0f5270608d3c86378e53c6288b76"}, @typed={0x14, 0x65, 0x0, 0x0, @ipv6=@mcast1}]}, @NL80211_ATTR_MAC_MASK={0x1e, 0xd7, "ca3fdaf4c8484f926fedb70642110fac5327b9a2697124e65337"}, @NL80211_ATTR_FTM_RESPONDER={0x8c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x85, 0x2, "35dc11c357ac32cb777cb94bc26221f714654a470289d0682bdd2012e0283d9cbd7b3f7c2d59a33ee3da3c03c54478636df112646c9d8deff5c690871755cfa46a30f2619e069cbfde083ccc0908b743973dc867d44bcc8e29bedb0f71bfe14297c67922442c00c9d92a4ae66f52ec3b200464fe6f3f2aed7e484f54c49bb0e89c"}]}, @NL80211_ATTR_AUTH_DATA={0x9e, 0x9c, "e7bc0c570672200b26658690ad796c2309ea29693e7f03e44f7bed9cf13e83fff0ec3fed5ee243c7f4a5c660c7f1891b89cab7da7b69583f78b52783f50168e5c7b0ce6b3d817a4b4045ab62ad1605c18fee44301ef13369d5bca6170300f77f3bb6f36311a3912ccc6accc811dcc2420c67eda8659be6482e1f244e30bf360240e743eddcbbb854bcc1868045adda5c8fb7d1e8ba8212af3cc9"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x8008840}, 0x1)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007a80), 0xffffffffffffffff)
executing program 0:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_FLOW={0x6, 0x6, 0xa}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto_USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
connect$auto(0x3, 0x0, 0x54)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/numa_balancing\x00', 0x2002, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/team_slave_0/rpl_seg_enabled\x00', 0x20202, 0x0)
sendfile$auto(r1, r2, 0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x183042, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0)
read$auto(r3, 0x0, 0x1)
write$auto(0x3, 0x0, 0xfdef)
r4 = socket(0x25, 0x5, 0x0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="cc120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x12cc}, 0x1, 0x0, 0x0, 0x20000895}, 0x1)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
ioctl$auto(0x3, 0x541b, 0x7f)
ioctl$auto_USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0x9)
mmap$auto(0x0, 0x4, 0x4000000000e2, 0x40eb1, 0xffffffffffffffff, 0x10000)
mmap$auto(0x2, 0x5, 0xe1, 0xebf, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
fanotify_mark$auto(0xffffffffffffffff, 0x917, 0x1, 0xffffffffffffffff, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xc, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0x81)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
executing program 0:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
close_range$auto(r0, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
socket(0xa, 0x3, 0x3b)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x5)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket(0xa, 0x801, 0x84)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r6, r6, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mq_notify$auto(r5, &(0x7f0000000240)={@sival_int=0x6, @inferred=r2, 0x7, @_sigev_thread={&(0x7f0000000180)=&(0x7f0000000140)=0x3, &(0x7f00000001c0)="58f3881cad4a2bc87f7894c706159e458a5f7d11ca799b99d7fd0d12cd082402b0012fd5032ed2602d6e6cb9271522dc86d5f4f94645e6218dc1"}})
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
executing program 0:
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, 0x0, 0x8, 0x8)
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 32:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 2:
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r0, 0x0, 0x2, 0x0)
r1 = socket(0x2a, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
read$auto(r2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(0x0, 0x0, 0x227, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)
ioctl$auto_USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000080)={0x81, 0x7fdfff46, 0x8, 0x0})
openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x6800, 0x0)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/lockd/nlm_end_grace\x00', 0x48041, 0x0)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, 0x0, 0x54)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x3, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x81)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 4:
socket(0x22, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8})
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00')
readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgget$auto(0xa, 0x77d9)
msgrcv$auto(0x7, 0x0, 0x2, 0x2, 0xb1)
msgrcv$auto(0xfffffffc, 0x0, 0xffc, 0x1, 0xb1)
msgsnd$auto(0x7, &(0x7f0000000140)={0x6, 0x9}, 0x8001, 0x7)
unshare$auto(0x40000080)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, &(0x7f0000000040)={0x1, 0x5}, 0x7, 0x9)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40004)
executing program 2:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 1:
socket(0x1e, 0x4, 0x10)
futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5)
futex$auto(&(0x7f0000000080)=0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffa)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth0_to_team/arp_filter\x00', 0x82801, 0x0)
r1 = socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c000180"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804)
write$auto(r2, &(0x7f0000000000)='@\x00', 0xfe)
close_range$auto(0x2, 0x8, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000080)="3880655bea", 0x5)
futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x8, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3)
r5 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$auto_virtual_ncidev_fops_virtual_ncidev(r5, &(0x7f0000000140)=""/98, 0x62)
executing program 3:
madvise$auto(0x110c230000, 0x8031ca, 0x9)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd10/queue/iosched/read_expire\x00', 0x1c2b02, 0x0)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x1}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x803})
writev$auto(0xffffffffffffffff, 0x0, 0xff)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)
bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x68)
r2 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r2, 0x114, 0x2715, 0xfffffffffffffffc, 0x0)
clock_adjtime$auto(0x2, &(0x7f00000000c0)={0x80000000, 0x0, 0x6, 0x6, 0x9, 0x200, 0x400, 0x0, 0x1, 0xa3e1, 0x2, {0x80000001, 0x40}, 0x0, 0x8000000000000001, 0x7f, 0xc, 0x0, 0x4, 0x1a67, 0x3ff, 0x6, 0x4, 0x4})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/platform/dummy_hcd.3/usb4/power/wakeup_last_time_ms\x00', 0x80800, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/net/rxrpc/locals\x00', 0x40080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0)
executing program 1:
r0 = socket(0x2, 0x1, 0x0)
r1 = getsockopt$auto(0xffffffffffffffff, 0x65, 0x2, 0xffffffffffffffff, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
write$auto(0x3, 0x0, 0xfffffdef)
mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0)
openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/1:0:0:0\x00', 0x450000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000000)={0x8000, 0x0, 0xfffffffffffffffb, 0x2})
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x6, 0x0)
epoll_create$auto(0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd$auto(0x1)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
arch_prctl$auto_ARCH_GET_GS(0x1004, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
capset$auto(0x0, 0xfffffffffffffffe)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_tables_targets\x00', 0xa80, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000001040)=""/4088, 0xff8)
epoll_ctl$auto(0x5, 0x3, r0, 0x0)
executing program 4:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/124, 0x7c)
r0 = prctl$auto(0x8, 0x1, 0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x11, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), r2)
sendmsg$auto_HWSIM_CMD_REGISTER(r1, &(0x7f00000003c0)={0x0, 0x3d, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000ed0e8c6f528e3c409776170152aef798ad5762f8c45e553ba5aee33f550c45e5403aa0a1c754b21899be4c11a82e92deecfd5724f2fc8eda62b0f661e9373065aa4397d825f966dd2b6eb70a47ecb4332c76", @ANYRESOCT=r1, @ANYBLOB="010028bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a})
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0)
r5 = prctl$auto_PR_SET_SHADOW_STACK_STATUS(0x4b, 0x100000001, r4, 0xc, 0xd)
r6 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r6, 0x7b9, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000300), r5)
r9 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim2/trap_flow_action_cookie\x00', 0x200, 0x0)
sendmsg$auto_HANDSHAKE_CMD_DONE(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r8, @ANYBLOB="030000000000000086acbd7000fcdbdf2503", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=r0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40c5}, 0x20040000)
mq_getsetattr$auto(r3, &(0x7f0000000080)={0x5, 0x5, 0xfffffffffffffffc, 0x11}, &(0x7f00000000c0)={0x3a3, 0x5, 0xa, 0x4})
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dri/renderD128\x00', 0x260a00, 0x0)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd)
getsockopt$auto_SO_REUSEPORT(0xffffffffffffffff, 0x3, 0xf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
statmount$auto(0x0, 0x0, 0xb, 0x4003)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
socket(0x2, 0x5, 0x0)
bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xd2)
executing program 3:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 1:
bpf$auto(0x0, 0x0, 0x6f4)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x55)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x62081, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty30\x00', 0x62c00, 0x0)
ioctl$auto(r0, 0x4b30, 0x20000009)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x2, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xdff1, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x8, 0x5, 0xfffffffffffffffd, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0x9)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mprotect$auto(0x10000, 0xd4, 0x7ff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_MON_SET(r2, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/dmi/id/modalias\x00', 0x40280, 0x0)
executing program 2:
r0 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r0)
sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082dbd7000fbdbdf250500150006090000000e0000000000e2210b3ffea53ab7f911d580ce1060be1624ae161fad784c7c84aad0799f343490bbba201de44d02a5d4c057b9c50523ff36dd68002f44182df73e5ff24a9b76f9"], 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x4048810)
socket(0x25, 0x1, 0x8cb)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
mmap$auto(0x10000, 0x1, 0x6, 0x8000000008012, 0x3, 0x2)
r2 = clone3$auto(&(0x7f0000000300)={0x5, 0xa9, 0x1, 0x2, 0x8, 0x10000, 0x0, 0x3000000000000, 0x4, 0x7f, 0x2b}, 0x2)
move_pages$auto(r2, 0xe, 0x0, 0x0, 0x0, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/loop5\x00', 0x8040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x7, 0x6, 0x47, 0x8, @multicast}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0)
init_module$auto(0x0, 0xffff9, 0x0)
executing program 4:
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r1 = socket(0x29, 0x805, 0x0)
sendmsg$auto_NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x8}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffc}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x29, 0x805, 0x0)
mmap$auto(0x4, 0x20006, 0x400000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0xfffffffffffffffe)
r3 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x80, 0x0)
readv$auto(r3, &(0x7f0000000140)={&(0x7f0000000040), 0x2}, 0x5)
sysfs$auto(0x2, 0x6, 0x0)
fsopen$auto(0x0, 0x8)
fsconfig$auto(r2, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
fsconfig$auto(r0, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
ftruncate$auto(0x3, 0x700)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x2002, 0x0)
ioctl$auto_SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000080))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r6=>0x0})
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x26, 0x80805, 0x0)
socket(0xa, 0x3, 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r6, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92)
executing program 1:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_FLOW={0x6, 0x6, 0xa}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9a", 0x16)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019761b5538a6868b07bb9da31631f6e1f6331ec2db23b6c056c62b9fc9f13fb45b09ded4ad3ee82d358891077529106b0b38aa7fd752484c7c46903d7ff7e932ee1f4aeefd8470e6c946990ee8343f0347b3de40620583d4779247ad2d7b278260866acec29d0f486e7f600e21fd04250a1f73ac3801f559ab9fcc704caa07a80a5100aafd437433b4fae716803a6db78b9e1d0b587ca53ca22a50880947c3e89102aa1c6b584f284a154f53f3332d2b5e154969cbe589472f42da3412e9cdd5c51ae096a6ad5ff5774c6276d59c83548b57bb63f88166905e2734992701971e037e0bffb114c62db1a6ebb05f6c455df2ed9bade7a85b0e2efe9cd78d80249ec133247b5fc04c0fe37eac88a1691bf50f2bdbed0c9a93595d104a1fb10390d02af3c9cfb7ff6ae6152cd3547e481651ee55d71fe213bc1c7f99cf65005e01e3518f6d910d1d50c56d8659d6e307625fe16fd34e7b089192611b8cfabb489aea19937440bd3b841cde573f182597c57cd39d38caafe132c8fab3bf4c4ab2d16abba32035f4fb6ea7cd52a411f49ddd9c357c14a613db70178590c403dc43427db435e02f245e04d004ab78969a50f426a63e5ed2098074b47bc26daf2cb0a2bda0670568e7a8104db4b2b5995b39e8e48bbe8fff6ef58bd6add50d747d50c5c456305d9e5565d3a695ad6f3cc6ad2052ead94b17aa4139455f8e18a55c4f9b49132994dda5955b44b31fa5010100003955241cd3885e860568649aa2900d0fba0d6562819630942add10ec6244487ce02f677e7220013af329c91c3cd2269f8e5ed91a55b7d848fd75775d5d7b8aa7969c71b8e76952bee87cd6fdc50bf50193994efebfa22cb22a911d37554f6474fcdbe309f70809644b2086b172e609980e68518cbb34765b1edca26523f7893d48ebed5d902409ddd0cbbb7f6b122a83c1395d1e9eac371b47893092754334a7327b634c58a512c2d254ac100d20aebf67fbe085260cf4e976ba0a45b5b976a9d56d0d7c9cfc4cc54871566891a654c2e867af8072b9235243492d1c794d077be97738c406590c883ec15f4872d12cf5bdf7848c19a1537f16386161130c1ecea6bd5a7f91628417e8efafbe3c3b08a3a997f2a68c7c53bcaab0738fec56086cf9c2c2d62a35ee032c68e18d95e2a8f10bc1934df5a8e9268c5a6b0ecee8e24f37f71ad8aab420b3fc9a4e7a33373cd7b77a1b1d4188d36db3f7a8b2ead1a5885af1aa981ebd87bc835484e7070c4ecf5a1107b75d765120b63a755dd154f9c5b58d0220f2bb93783f6f6b10f73115da02b5714734742c6b3db13a8fcee61abc152255ea185af5d106611ca4d3337fb9c410d3a2647e3cd73fa5f1e5dbbd01e18761ae9fd271bec553315d2b7caab5e550a2c0b28d919a2a627eee6b0ea481c4d96df774834efd65d0f77e0e4b9eac0c4cee22b05ba1a900aee500be5a21f0b956e2106f84fef2036be842e2d6c888e13c55e90a224f02eb1c50d657cf89f0ba5843f32b8e7108114ba91e691ac204dd7a6d40129bee8c1e61cabe46613c7755604787406e4793c271a405ad4713477167dc546a74f3c74948da40e4d577eb5c7cfb90c2d47adef789877f0639f0490a23fc82b8858acaed1e04ebb47b31ea5fbbbd554f343da5b99f295b7797c57ec2e2f16029c080196c929567438c81d9ac77746e59b1863214e714af009ac4e7ae566321158d440d1f62239971f438a77b94a71acaaa6ee388f7c55763cbe4560f4a7ced6ad448cddda2f697812306e7fdd03e0050d7966f6af51efe597d392843fd378b9621bb6a45ee0189f4527f45de88af3a7b566d637b555af50ede09e157b43768377c78e769bd762df89c4c715d4e4ad286076f154b5d73b968fd234bd92108c365e5b1c34b5a79c598b6223dee54b231476ca776cae0c11330178d32354de5d4a1e1c1c7a9fbd30619b966e2ee2ec15ce6ccf80baf39f7997c20de1a95f36fa11c3f283688a8fd166b5c415d33cde5d2acee738ef656ff9181962423f5214e0b4af81d6332130b37295f7a14b5bafcca0adde0331607e10f5a7bc85991279391b0e284f3e60b8fc79ad1404c429f00fc40d214019073e70ba07e4307018d9c5f7840fc8f99c36d2228b8c5aa0b9d4cf9df2567c00d4c0d068eb338e0eab2428634c50402ac1c30adcc4098f53d665321a4f0168c70a60aa55d27d23809ef5b519ff9bac4667eb94ac7e5c1eab56716fe88859344a221463fd1cbe0eb68b963d73aa93b3e3a9a1ba1aaa25131c2000ffd5f17a19978c94bdfc80d7fe72446187c47b4e3169442d9881036632f89dc77628ce815a825b0e07f6e52074789175d54589fd4c432913db6dce142471e4418cc7f36cee327000f4f6805109873d8e79b308d47398231c666312e601fd7a00df76e9b7a92f0c11446f2bd0e79843da98f79928bdfd5d719b87f3ca7eb7b920f663efea42a7bf147c5e5d26624d68cb755662ac07c7d6d8b96008a0c4a6f3f21b981cb9c0120955f9c87d269a3c2bee2ec93b5e6b52ec21ee4baed36888cfdfe75b9603fd453a2735192108de5585e219b38baf819e9c1cb30489028464ca18868aee9fe35ef94407c9a95cf4ecdb10926fc0ddd1b3b6778aa0bb521f03541a7cdab827618e031319cc5b18a4e02000060d5f6860b8e96c8a55d0135c3e55bd2ae9d021e280595ccceda8f7c41b73917f3b8f94c91fd7fa5ee5e78335ffbc07f95d1d1863d81a8bf35522952a09669169fd3ee4b1a409bba774c8b50eaba7b9c4c80e1519294fbf75e1d536b4e748ad2546416114572b1d5455d80f043c66a124a713a5934dba9dd3271e61f951a3deff533370a5463728bc4e5c3edfb18452dd3958e6149247b84f7f341e840175511cea7f55993572027e033abf55ffbffca2de4b01919c939fa47433402ec4289c809539a9356dc34b2cecc5b691e0cebf0d17dbcaede247988650188dd6ae64c9dc83ac3ea8fa9d69fe0fbde9dd0db69108167f89c76dfa98aa163d05f2d8d823a87f313438364ee38c050fe91750144873425d9f83328bf4395e5f5f77229387d779fb38f8ecf", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 20, 30, 24, 2, 30, 30, 24, 22, 20, 29]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf25010000000600020000000000050007001000000008000900dc781e2108000a000800000014001f00ff090000000000000000000000000001140020"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004)
setreuid$auto(0xffffffffffffffff, 0x0)
socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
bind$auto(0x3, 0x0, 0x68)
socket(0x10, 0x80002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0xf000, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r3, 0x13, 0x70bd26, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
sendmsg$auto_NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x3ac, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0xffff}, @NL80211_ATTR_CSA_IES={0x234, 0xb9, 0x0, 0x1, [@nested={0x188, 0x57, 0x0, 0x1, [@typed={0x4, 0x105}, @nested={0x4, 0xb9}, @nested={0x4, 0xfa}, @nested={0x4, 0x9}, @nested={0x4, 0x83}, @generic="6870e1cce7188311c57a058f98398271103896a2ad1eaa05cfde8801868b2f82439ccadf0057f04eb1bf0b2e22cab477e114da4f7600fcb3167bbe3546c1835c3f9ee9a7bff3d2ca9860c6c563406de32f77317f4c7978aa6b0344b46ac5a76a1124d84db0be9ec949aa8686fb03b8d92ebcab1cb2dea224183944a0bafecc282779c9f9ab289ce37015", @generic="9034c8c8da581565242379913406aa897e0d22105b720959b7c585ed08dff03c6327d7df7603d6b5b85d5d0ab044f313b1f2e43a21a0cf1b7ecd8cd169039f0cf1e9196098f38f2fd6baef484764b63703227d36a2ef0b3bca55ddfc11742da6c5aeff67dc87f71239fe64bc8c00371fe0b0c328987b0fe513fd852558601b9ad77f83e102a543b0f66a7102bed656c8360babbe65ae4807222d1188c8298da4eb6a2fc7434168467e51276901420dfd6047bab12e4b22cf482b48080ba3dfa0782060865ef5078ecf63c2962ee205f9bb496ba7402d1e58bf7499da6b6a8734e959f12515c6"]}, @typed={0x93, 0xc2, 0x0, 0x0, @binary="913ccf55f13b8561f606e4780c2da481ffe83da726817cd16339b560fc889759ded16dc5e6e9f66b9a9f56052e0615309790b5fb520562150e3e40c8dcce8fa2e7091ae83ecc2d805128995d6834af7378e14d45f828104afebf4725d316e56e9acbc8c65b2adc983d7698a34f6b7e80c2d20432ed728a6803148d4fa47efe922f0f5270608d3c86378e53c6288b76"}, @typed={0x14, 0x65, 0x0, 0x0, @ipv6=@mcast1}]}, @NL80211_ATTR_MAC_MASK={0x1e, 0xd7, "ca3fdaf4c8484f926fedb70642110fac5327b9a2697124e65337"}, @NL80211_ATTR_FTM_RESPONDER={0x8c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x85, 0x2, "35dc11c357ac32cb777cb94bc26221f714654a470289d0682bdd2012e0283d9cbd7b3f7c2d59a33ee3da3c03c54478636df112646c9d8deff5c690871755cfa46a30f2619e069cbfde083ccc0908b743973dc867d44bcc8e29bedb0f71bfe14297c67922442c00c9d92a4ae66f52ec3b200464fe6f3f2aed7e484f54c49bb0e89c"}]}, @NL80211_ATTR_AUTH_DATA={0x9e, 0x9c, "e7bc0c570672200b26658690ad796c2309ea29693e7f03e44f7bed9cf13e83fff0ec3fed5ee243c7f4a5c660c7f1891b89cab7da7b69583f78b52783f50168e5c7b0ce6b3d817a4b4045ab62ad1605c18fee44301ef13369d5bca6170300f77f3bb6f36311a3912ccc6accc811dcc2420c67eda8659be6482e1f244e30bf360240e743eddcbbb854bcc1868045adda5c8fb7d1e8ba8212af3cc9"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x8008840}, 0x1)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007a80), 0xffffffffffffffff)
executing program 0:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_FLOW={0x6, 0x6, 0xa}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto_USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
connect$auto(0x3, 0x0, 0x54)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/numa_balancing\x00', 0x2002, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/team_slave_0/rpl_seg_enabled\x00', 0x20202, 0x0)
sendfile$auto(r1, r2, 0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x183042, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0)
read$auto(r3, 0x0, 0x1)
write$auto(0x3, 0x0, 0xfdef)
r4 = socket(0x25, 0x5, 0x0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="cc120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040099806201e9800400aa800400fd808a66cb63196d798290679b183b0610a18c2c28594947be8b71f32c7298dddcebec6fa891048c971e4e9e6184cf18513e9f30ec81a8d6b933fa458f163aac048930c0f190dc4df0e5059e942a278064fb85cc962b331bf5bca201c19c7cf06a481dc22f526dafd5fcb96837535a81487ef1f559fab4f35995117b8279c80a9708c47b1d73d3cb7110da081d06d6bf6f2e6c4be04ccd0d80eb6769a33594634ef8f2750729ae6e50b1d221dc6c22498de19acea1582635bc7a23c58a86a03cb5177f96e5902143c57af95790a4c0b0db58eb6d8690d794821ed17e454b5bebb6493de65bcda0e60c5fd0877433bda49a3ad83f71e75af834f74409d982cd28deceb16bb3e0b9e2b6383f88c780f4412233adcb01094c0c0c7075d8ad5d7558a69422f4fc9122645201b8c9575987171ace5a447232e501dee8c2dc392594a28e134b411f1ebf3cf964b45ccfe1e1dfa705a40019319a43000008101f803f699f569a3cc17f9e5c5c43789958430cb932d48e1e92811ed5328df5d660f4f2bfff0d5925c0e06172f51c46b37609943888210cae51e7bcc129d544aa2121c93c7d1f64be481f05bb068d6bbea34c681f09e3964a31a3a9246ec16547284056ebcbb03aab77733f1d2698e9ab83c3a5ea4c86dc639bd7c6488603ffac52acef5818a15f032b0cbad5b8575c4c0028d4994611c3155a9223046e12dd9ea3d6dbdf1e6875ce1d47588645677b6e1480068eaf7d5edd57a1354e2e671f5861278080d8334c8a755430dce1aa795d7b01d453f8841969d4426d5fe4c4ec822df7dfdc225e03210caf9a06b7a0cb85e9225666de36ec367df91aad15458c465af48d2eb07cd1ccc202da5a0b84227cdb1e4bcb00bea4389d464fb7ae9be2a885daece27366cfd4aea8bbcad9bbbeb5c8f0d140afe413f8b9eb08e2d6f1a21249a1b65659bb3d016af3e87d5ea6c5aef33fe4f88eeacf3aba01873c0e610fb33d9542c2194a3a0365e6a102b9803de7c1f04aedf4902b581f4a3eb02d01a007b15a82d67bf1f60ad0e7b713169383ea14bb5025ec7bf058f6a114e38326a80e1e220441bb8f9fa4b029337b2aa3cf57c1686161805a1d8d4db42de9a7882df6676c11aa4e5f59b7c9c428c626c2e93e29df6ccbdbc4e996c75bb0fd7dc8b7d82d037507109c1f544213b354b9dcf9e4c736d161aa4a3cd1d278637bc09a5604c472ead75b1f581fe449fb24fa2252fdbb33a2eaa3082266efb6fe6c7d6fd72434a576a45317d97393e1b98544d1cec8a963c3aebfac8b64773cbc070cf8d97df1c154859c7ec6f4d760f0ace2ef233c563093a7b63251cc44e72281b46bda53f632a8834e282691ba595ee48086fa68f7494e7597a868cd8583bbd390ae569ddcb4af49fb4db5ec3880bd34cd74b4171045930af8879f47f18ca9e1e95a3ea50bddf8cd4551393877fb5c1b71eee54b5b87410d2552dad048594ea23c8febf79718542d12ba0695018dd154819133b1b90d575d312ac3f48e8f0daeca256f3beb1938846d3ac814a382316855d914b701029dbb18d4b279e665182167967b9cbba216f0ca20185a192bfea8e33b086b84cb019954bafdb0c01a98298b1a7ab4243bb37a1df09297ba1f93e017f6cc532508f96e296d81adb500419e493154fbbf893fe50dc2cd9714124374a8d87dc39f482833bc88b544eef10e06f26f367e30e45f432388ff13ce1f422d05d6e8b67141fea842f361c4d809110d7f622f7f43e32cc1db677c1675414e948f4e631f8dadf45f2e0e456ed7406293266f86feb8c79cecc535890a3bda0a0787af0931e4efd686b7148cf43aff386a7c81a222e09d495a5760553fb6ea5b07227977ade7e20548bd3d1225e03f3eff552298e50c3ce3d24f273593db46a323414d0f84f73b3e24005d92beb6b766b48ffde732da0544594bb77962a31ae043c537ee3d051c04974ae8ad660e4714a631113270d796764ff8ad71c675e9e1beec7559a49391078f3f07865af36b1d10a9cecffa579b10090a48c1c3c16855fa7b42151b3291ebea2f4a94a010778d040effdd4236891f845215a8998de9160828446df1b1d2ce024b46eeefcacd8bbf9cddfa1d5ce7e651c01b66f4a6918e56de4d2ad8e20692eb6d67cbf45332485b8c69cb55e0e23390def4021ccfc7ec458349acdd2f4b6e531f1702cdf25d5bbe736102ff648c7324afdea5464e98e3b8f177e9996b2e13e103c02ddbc371bdecb679165361972c0095722a4ba69d740c730a39a92a9f47db5aef6f272084278c7e80f31b61ef08837639960aba12d3d8a3744842b91b1369ab2588c1bbf1bc1dd3b02e865559491652517daef3e09b953765c3eb7d2ef3a77abca2ff568397abe35bb044bdcc1674ca071c2adc24d472eabd86d0fcf45628debcc2a828d98abd91f6dfd0be4981b50a48a4aecb0e1f713f166a620d3723733e50c569b32513a123a2f8922c654decf3dddda90e5daea3b66930202555550fbf41c81bf5e72fd8873348ea6122ec9fae3affe00697a6f1340a2c6b9e0816ef199338f00edecedfb5b9c7ddc18e8f92db1e2ad1ec358a61945b1873416235b51711a27d5060a6621b20f62c7d98f0ef487fd7a31c12064d3b1a98a40156f65a0fdbe1018b09319a7bfa09f270c78c0d11e4faab012b8cae3b88b1d70b3876bf98022ed009f27d5059459728e003766bc901653eab17f9df964a5e16695ba2075464775eee32e0f1b7d04acf28600142cfaf4f7e45f9a7d9f9f3dfa87ffcf116d15dc5d2e143d9646fd2f060d6404ea1e0571f66c2091c4ff48034e5edc2e0cc9db7aeb3f5dfb55182718641f883871c21af173a5295e4ff177c468c2334f58df37a37d1142b6e5771856388bb365e6058800489844be2aa1b9c4e7b7c4c0c1ce942da0f57949bb5f0114d63f5bd8c6904c12dc6da24e7f62322ab79b09091dad8ca0df49e78f5273e8f78745a27b4f5d07e06490fdfb684b046f9d9320f835d5614732bd5656e92b60670788734e7d44f11f8b1c9784fb5e428d7383ddf1aab2414b1ed085ce9ff103d8716647e5c269d3d497d69ecab6ec742df0257f3e4792cf7dc28b06904b058ad9ebfae955c387a7eb01efc633e53fcf179756f703c5c313ed770036d852559ec0e4197887f6750676780e5b51b7cd9b814a97ceaaaf9c76918db587f26f0002307893f37d9321e1b66a2949074ecb6455d036feb2b02d8c4af6ebee940c85bc7c004593aa8bf940fa414f5e99d5915f756607c115f3c1c1b292d630e0974a1fb6d0dc4fe0217648ef0a51e7705dbcb5a745a9b1831cbb9ca2ae1ecedc60a991cb4d8dffe7d84b7b5731c524d1bab906faf9ec9b03773369999fb303eb83db8f9315bfb1faf319856f47ac27c56a29de3720e819d240068870206909857046eac0599c7cc71f5ca4fe59e2293be7e5b29b0c8789a34743740bb99dd0f4fc68fbd6f5c9b47e22cf9039af83bb6b63fcaf052a016a4ef6b145b803b272dfeba4e05e3e93cfb7d4d402be9d89b8f1cc1ad0bc419790e48186a7f387072620575c270e1f5acf35674fb2ca8c3f2515fbd3a5e3970e5e13e2d97957955d474822cbd01158664702efab22842f56865c239bb3a7040004a51791c5ae28658ce4d0d2b05572ca1cab33f933c81ec37805dfdf4d5e05ad0a4cb9fcf1342e685d4c9874d529b6cde2335537ad1057d76d0eddd86e0a9d80cd48b70feef868848c1a48c30f3f76bd428108ff43b231d4613e9d3d90774ada8083b987473664c0e5e3146b4ea4667cc0e0629c2964ddd2b778e7b271926b52958a749c0d844841617bafd0ed39d0bf02d8f04f23d89ca799394000d8896a16b1ea539406d2f705da9496c463b69d9d4fd793e7d0c0d4ab477e2e2e2263e21c957a6a262f218f235858f2cfe35212998d634e656b3fca25d1ed1ccb8a17338e8916d826bd855582cf702b76ad91ee705411ab8ac47b376b812c77e1e367684f6a0cd603989984562ee8a1c26ca7c07c980b1a1e183dac73b744b26c540aed4174bc47ba9ac17d96b5d705d20fc5f2091a9d6e9ba35b5d677fac07fcdab560b580a250d172a3fc367b69848a547e40213b4932080a2047c71e51bb9848654747c33652dab1d69862c4f888bcf461439acaa1f9f27651985c4133afda12845e280fed9c0f3ed7739cbf1812898dbf206b4a6dc5fff33f497d132c34b6cbd7266bb27a1c69d8c39ba0931d14cf93ee392c11a503d9035e7f2ecb44be74fb84aea77f9fee2c680129de20c7b518fe7bf05ee3a4d71f147903b85f303ea56aefe9ac3cc4a6c26114ddab1ade5608a27fe0e80cbbd668605d0900fe236cda8bc79348cf5ac2e142d83dba3b6cc16840120b37f74ee0d8b236134d57eaf3827eae4f51611981b201af44d2940e90e97a7355bc76dbfc0a7516f0a2bcb1aabbc5a6c4401d0d76e7f348a8a4af9267e80e231bb7c8604d7365a20a8282af054831588e44c642eb07a63285c4bbff346bedcb3f53f3073f9692c09a0078a4d7d60b0a1e4dd7749efb3694b9e598d9b87503c942405b6515492f86aee0ab9cf080841b4fedb3f17db4e86bb3c5876bff33e6428478fcbb79501c0aa80cef305aa536eec8b9bfcb3c4b0f681f5511efb00d1962016f87d22c078145d3e147187a26bb69de95d95840d4935cba65340f011bef3baeec752d13da9b0dcc66e46adf2e821c9692d2505fed3b5752e39584f7c0811964e320634293a227737528699ae3cc222e90a261650ffa41597b965abad6e48137dcb4af8eecf1dbc526cfb0da1b00ae01eec34ef2b98fda99b012d828585da4271851c8983b532aa439d127844b4f766285b49e63e61cf9f8396b346161fff1d5165fe050f34552a64d197e5b9876db0ca4104ac1ca5800675fd77e86e79bfd0338eb4610425693fc3981a0c6933a748ed2e2ac4687fd2bcd1a4a3017450ec44c7b26e5f987e53032d227430437a93d8a57af4f862b36a47d6d0567ed4f168a79835bb9cdb2aca7c45098b1b9c281778a114d23e16aef04d292f96991f7e5dbc518f3af484403ecc9cd9168b5dcf315a751669186ecae36be6f83f92a730cbb38a847d639634bba862e385409f3552fb0d4730e9faaa4dbf5a43ced82896fcc71024579708988fe09b8abd50015c6de2d64916b61f001cf86d00515b97c9ae1960eaaa9b7630698db97e38fb2b41fe0ecf66324a9eb0390e4ef96928fc46d4aae69d4a567261c303750145ec6d0103f43363fd1a262928a354a4baa57d60bdc9773701c4546d148b32401823a4c9e504d2036522e038b0f38abcbf988d4b6562c4733302fac39f7ae4fb95f7858ad9d1912ce01fdafba7b04eec16bbef1f2e8817d6eeed618fbd0a4e601dd3de85934d85107faa4f457668d5d3a5136cd9bd3b7d576626d00f18de58e2fe9fa161335b9791a716430afc7b2512980acac1f878e940cdff1a2f746339d9fdeae6151d574f863842148db5b0f980de8511355669f48b6af1620e088bd4cbcb7143de34e525a5a964e13e633633dc7bce0ef5165baa291a5460cfdce366b3ae4343b892184686f0a96e2ba598c712ceb5033cd74d41d59a5b85c0287160d5921865be68beb50cb39b5517775abddaadf35ab61580c07e5bece944e67b0f4fb15c568740dcb6ab272c5d5117b08d60c39ea87e0b5689ee8de9d813e3f3909c35044c84b28dbe0d5a7164c96222109841ac1784a82a379031f0532f260b81e5d2d0425ccff8ca1c820b93e2963208c6488c4d9e55c6db397284cfb8853901efdf0e461321aa6aa81bcfa6a2cbea83fbe473f08ea6fb0e06f03f94960d299e9943db845d9a9ef2de3830b285774a339057d2db4ebdb68d0a23136cde09fbba849c7bae28aef77dc7c980a0525c31bb6b65ebf0a09b867460992da51f0a000f4968d89e3f4f8b721342891e433ac3dba64655740f6c1d9dc3e986dd2ad4077b4d526dea5538e59571bf9506d28082b52fadbbaf618679e30da3bc33e5f713e57a2aaf50c799ebcad6357aec053c537b60aa492604a1a1c660469d5cc6dfd02fc55beedfa78cdabdbb392b99122132ecfac5314a212f982a0863ccd227cdd8245684afad1b79db8e34aa581a7cd37bb03c8b4f30ff264730cbe1d679a86dc87321eaec5532a327c9415c52bd7fab0ff6c0876d5aab75e51e9dab1692451cb0e618f369fec9603827ef25cb3b3c465c15b45432fbb2e6b275e1cc9abf6f8fc6ab516436576e9b42c60cb47259e247dece5f9708546c642b4fe3ee0400312152668ffa0ea2eff5d03f5955e2326f906873981f6c003a7ef0c928678f7c33db6bb4048d1335cfe397c75e8a7d333af097bf5072f9b2ceb8a8bf306ce8b3a7"], 0x12cc}, 0x1, 0x0, 0x0, 0x20000895}, 0x1)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
ioctl$auto(0x3, 0x541b, 0x7f)
ioctl$auto_USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0x9)
mmap$auto(0x0, 0x4, 0x4000000000e2, 0x40eb1, 0xffffffffffffffff, 0x10000)
mmap$auto(0x2, 0x5, 0xe1, 0xebf, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
fanotify_mark$auto(0xffffffffffffffff, 0x917, 0x1, 0xffffffffffffffff, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xc, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0x81)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
executing program 0:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
close_range$auto(r0, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
socket(0xa, 0x3, 0x3b)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x5)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket(0xa, 0x801, 0x84)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r6, r6, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mq_notify$auto(r5, &(0x7f0000000240)={@sival_int=0x6, @inferred=r2, 0x7, @_sigev_thread={&(0x7f0000000180)=&(0x7f0000000140)=0x3, &(0x7f00000001c0)="58f3881cad4a2bc87f7894c706159e458a5f7d11ca799b99d7fd0d12cd082402b0012fd5032ed2602d6e6cb9271522dc86d5f4f94645e6218dc1"}})
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
executing program 0:
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, 0x0, 0x8, 0x8)
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 32:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 2:
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r0, 0x0, 0x2, 0x0)
r1 = socket(0x2a, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
read$auto(r2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(0x0, 0x0, 0x227, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)
ioctl$auto_USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000080)={0x81, 0x7fdfff46, 0x8, 0x0})
openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x6800, 0x0)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/lockd/nlm_end_grace\x00', 0x48041, 0x0)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, 0x0, 0x54)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x3, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x81)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 4:
socket(0x22, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8})
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00')
readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgget$auto(0xa, 0x77d9)
msgrcv$auto(0x7, 0x0, 0x2, 0x2, 0xb1)
msgrcv$auto(0xfffffffc, 0x0, 0xffc, 0x1, 0xb1)
msgsnd$auto(0x7, &(0x7f0000000140)={0x6, 0x9}, 0x8001, 0x7)
unshare$auto(0x40000080)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, &(0x7f0000000040)={0x1, 0x5}, 0x7, 0x9)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40004)
executing program 2:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <10>
bisect: split chunk #0 of len 10 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 24, 22, 20, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 32:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 2:
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r0, 0x0, 0x2, 0x0)
r1 = socket(0x2a, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
read$auto(r2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(0x0, 0x0, 0x227, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)
ioctl$auto_USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000080)={0x81, 0x7fdfff46, 0x8, 0x0})
openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x6800, 0x0)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/lockd/nlm_end_grace\x00', 0x48041, 0x0)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, 0x0, 0x54)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x3, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x81)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 4:
socket(0x22, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8})
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00')
readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgget$auto(0xa, 0x77d9)
msgrcv$auto(0x7, 0x0, 0x2, 0x2, 0xb1)
msgrcv$auto(0xfffffffc, 0x0, 0xffc, 0x1, 0xb1)
msgsnd$auto(0x7, &(0x7f0000000140)={0x6, 0x9}, 0x8001, 0x7)
unshare$auto(0x40000080)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, &(0x7f0000000040)={0x1, 0x5}, 0x7, 0x9)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40004)
executing program 2:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <5>
bisect: split chunk #0 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 20, 29]
detailed listing:
executing program 4:
socket(0x22, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8})
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00')
readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgget$auto(0xa, 0x77d9)
msgrcv$auto(0x7, 0x0, 0x2, 0x2, 0xb1)
msgrcv$auto(0xfffffffc, 0x0, 0xffc, 0x1, 0xb1)
msgsnd$auto(0x7, &(0x7f0000000140)={0x6, 0x9}, 0x8001, 0x7)
unshare$auto(0x40000080)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, &(0x7f0000000040)={0x1, 0x5}, 0x7, 0x9)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40004)
executing program 2:
mmap$auto(0x4, 0x400009, 0x8000000df, 0x2009b72, 0xffffffffffffffff, 0xfffffffffffffffa)
select$auto(0x0, &(0x7f0000000280)={[0x2, 0x9, 0x5, 0x0, 0x1, 0x7, 0x51ae5273, 0x1, 0x2, 0xfffffffffffffffd, 0x2e, 0x3, 0x25, 0x3b, 0x800, 0x7]}, &(0x7f0000000300)={[0xb75549, 0x6, 0x1, 0x7, 0x3, 0x2, 0x0, 0x6ec, 0xbf47, 0xb, 0x3ff, 0x6, 0x4, 0x1, 0xffffffff00000000, 0x7]}, &(0x7f0000000400)={[0xda10, 0xccc, 0x275a, 0x5, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0xdb7, 0x81, 0x19a5, 0x5, 0x3, 0x7]}, &(0x7f0000000380)={0xc, 0x2e})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x22bc2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19)
write$auto(0x3, 0x0, 0x7fffffff)
syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 24, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 32:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 2:
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r0, 0x0, 0x2, 0x0)
r1 = socket(0x2a, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
read$auto(r2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(0x0, 0x0, 0x227, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)
ioctl$auto_USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000080)={0x81, 0x7fdfff46, 0x8, 0x0})
openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x6800, 0x0)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/lockd/nlm_end_grace\x00', 0x48041, 0x0)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, 0x0, 0x54)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x3, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x81)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <3>
bisect: split chunk #0 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 29]
detailed listing:
executing program 2:
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r0, 0x0, 0x2, 0x0)
r1 = socket(0x2a, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
read$auto(r2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(0x0, 0x0, 0x227, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)
ioctl$auto_USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000080)={0x81, 0x7fdfff46, 0x8, 0x0})
openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x6800, 0x0)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/lockd/nlm_end_grace\x00', 0x48041, 0x0)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, 0x0, 0x54)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x3, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x81)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019761b5538a6868b07bb9da31631f6e1f6331ec2db23b6c056c62b9fc9f13fb45b09ded4ad3ee82d358891077529106b0b38aa7fd752484c7c46903d7ff7e932ee1f4aeefd8470e6c946990ee8343f0347b3de40620583d4779247ad2d7b278260866acec29d0f486e7f600e21fd04250a1f73ac3801f559ab9fcc704caa07a80a5100aafd437433b4fae716803a6db78b9e1d0b587ca53ca22a50880947c3e89102aa1c6b584f284a154f53f3332d2b5e154969cbe589472f42da3412e9cdd5c51ae096a6ad5ff5774c6276d59c83548b57bb63f88166905e2734992701971e037e0bffb114c62db1a6ebb05f6c455df2ed9bade7a85b0e2efe9cd78d80249ec133247b5fc04c0fe37eac88a1691bf50f2bdbed0c9a93595d104a1fb10390d02af3c9cfb7ff6ae6152cd3547e481651ee55d71fe213bc1c7f99cf65005e01e3518f6d910d1d50c56d8659d6e307625fe16fd34e7b089192611b8cfabb489aea19937440bd3b841cde573f182597c57cd39d38caafe132c8fab3bf4c4ab2d16abba32035f4fb6ea7cd52a411f49ddd9c357c14a613db70178590c403dc43427db435e02f245e04d004ab78969a50f426a63e5ed2098074b47bc26daf2cb0a2bda0670568e7a8104db4b2b5995b39e8e48bbe8fff6ef58bd6add50d747d50c5c456305d9e5565d3a695ad6f3cc6ad2052ead94b17aa4139455f8e18a55c4f9b49132994dda5955b44b31fa5010100003955241cd3885e860568649aa2900d0fba0d6562819630942add10ec6244487ce02f677e7220013af329c91c3cd2269f8e5ed91a55b7d848fd75775d5d7b8aa7969c71b8e76952bee87cd6fdc50bf50193994efebfa22cb22a911d37554f6474fcdbe309f70809644b2086b172e609980e68518cbb34765b1edca26523f7893d48ebed5d902409ddd0cbbb7f6b122a83c1395d1e9eac371b47893092754334a7327b634c58a512c2d254ac100d20aebf67fbe085260cf4e976ba0a45b5b976a9d56d0d7c9cfc4cc54871566891a654c2e867af8072b9235243492d1c794d077be97738c406590c883ec15f4872d12cf5bdf7848c19a1537f16386161130c1ecea6bd5a7f91628417e8efafbe3c3b08a3a997f2a68c7c53bcaab0738fec56086cf9c2c2d62a35ee032c68e18d95e2a8f10bc1934df5a8e9268c5a6b0ecee8e24f37f71ad8aab420b3fc9a4e7a33373cd7b77a1b1d4188d36db3f7a8b2ead1a5885af1aa981ebd87bc835484e7070c4ecf5a1107b75d765120b63a755dd154f9c5b58d0220f2bb93783f6f6b10f73115da02b5714734742c6b3db13a8fcee61abc152255ea185af5d106611ca4d3337fb9c410d3a2647e3cd73fa5f1e5dbbd01e18761ae9fd271bec553315d2b7caab5e550a2c0b28d919a2a627eee6b0ea481c4d96df774834efd65d0f77e0e4b9eac0c4cee22b05ba1a900aee500be5a21f0b956e2106f84fef2036be842e2d6c888e13c55e90a224f02eb1c50d657cf89f0ba5843f32b8e7108114ba91e691ac204dd7a6d40129bee8c1e61cabe46613c7755604787406e4793c271a405ad4713477167dc546a74f3c74948da40e4d577eb5c7cfb90c2d47adef789877f0639f0490a23fc82b8858acaed1e04ebb47b31ea5fbbbd554f343da5b99f295b7797c57ec2e2f16029c080196c929567438c81d9ac77746e59b1863214e714af009ac4e7ae566321158d440d1f62239971f438a77b94a71acaaa6ee388f7c55763cbe4560f4a7ced6ad448cddda2f697812306e7fdd03e0050d7966f6af51efe597d392843fd378b9621bb6a45ee0189f4527f45de88af3a7b566d637b555af50ede09e157b43768377c78e769bd762df89c4c715d4e4ad286076f154b5d73b968fd234bd92108c365e5b1c34b5a79c598b6223dee54b231476ca776cae0c11330178d32354de5d4a1e1c1c7a9fbd30619b966e2ee2ec15ce6ccf80baf39f7997c20de1a95f36fa11c3f283688a8fd166b5c415d33cde5d2acee738ef656ff9181962423f5214e0b4af81d6332130b37295f7a14b5bafcca0adde0331607e10f5a7bc85991279391b0e284f3e60b8fc79ad1404c429f00fc40d214019073e70ba07e4307018d9c5f7840fc8f99c36d2228b8c5aa0b9d4cf9df2567c00d4c0d068eb338e0eab2428634c50402ac1c30adcc4098f53d665321a4f0168c70a60aa55d27d23809ef5b519ff9bac4667eb94ac7e5c1eab56716fe88859344a221463fd1cbe0eb68b963d73aa93b3e3a9a1ba1aaa25131c2000ffd5f17a19978c94bdfc80d7fe72446187c47b4e3169442d9881036632f89dc77628ce815a825b0e07f6e52074789175d54589fd4c432913db6dce142471e4418cc7f36cee327000f4f6805109873d8e79b308d47398231c666312e601fd7a00df76e9b7a92f0c11446f2bd0e79843da98f79928bdfd5d719b87f3ca7eb7b920f663efea42a7bf147c5e5d26624d68cb755662ac07c7d6d8b96008a0c4a6f3f21b981cb9c0120955f9c87d269a3c2bee2ec93b5e6b52ec21ee4baed36888cfdfe75b9603fd453a2735192108de5585e219b38baf819e9c1cb30489028464ca18868aee9fe35ef94407c9a95cf4ecdb10926fc0ddd1b3b6778aa0bb521f03541a7cdab827618e031319cc5b18a4e02000060d5f6860b8e96c8a55d0135c3e55bd2ae9d021e280595ccceda8f7c41b73917f3b8f94c91fd7fa5ee5e78335ffbc07f95d1d1863d81a8bf35522952a09669169fd3ee4b1a409bba774c8b50eaba7b9c4c80e1519294fbf75e1d536b4e748ad2546416114572b1d5455d80f043c66a124a713a5934dba9dd3271e61f951a3deff533370a5463728bc4e5c3edfb18452dd3958e6149247b84f7f341e840175511cea7f55993572027e033abf55ffbffca2de4b01919c939fa47433402ec4289c809539a9356dc34b2cecc5b691e0cebf0d17dbcaede247988650188dd6ae64c9dc83ac3ea8fa9d69fe0fbde9dd0db69108167f89c76dfa98aa163d05f2d8d823a87f313438364ee38c050fe91750144873425d9f83328bf4395e5f5f77229387d779fb38f8ecf", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 32:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: WARNING in hci_devcd_register
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 29]
detailed listing:
executing program 32:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019761b5538a6868b07bb9da31631f6e1f6331ec2db23b6c056c62b9fc9f13fb45b09ded4ad3ee82d358891077529106b0b38aa7fd752484c7c46903d7ff7e932ee1f4aeefd8470e6c946990ee8343f0347b3de40620583d4779247ad2d7b278260866acec29d0f486e7f600e21fd04250a1f73ac3801f559ab9fcc704caa07a80a5100aafd437433b4fae716803a6db78b9e1d0b587ca53ca22a50880947c3e89102aa1c6b584f284a154f53f3332d2b5e154969cbe589472f42da3412e9cdd5c51ae096a6ad5ff5774c6276d59c83548b57bb63f88166905e2734992701971e037e0bffb114c62db1a6ebb05f6c455df2ed9bade7a85b0e2efe9cd78d80249ec133247b5fc04c0fe37eac88a1691bf50f2bdbed0c9a93595d104a1fb10390d02af3c9cfb7ff6ae6152cd3547e481651ee55d71fe213bc1c7f99cf65005e01e3518f6d910d1d50c56d8659d6e307625fe16fd34e7b089192611b8cfabb489aea19937440bd3b841cde573f182597c57cd39d38caafe132c8fab3bf4c4ab2d16abba32035f4fb6ea7cd52a411f49ddd9c357c14a613db70178590c403dc43427db435e02f245e04d004ab78969a50f426a63e5ed2098074b47bc26daf2cb0a2bda0670568e7a8104db4b2b5995b39e8e48bbe8fff6ef58bd6add50d747d50c5c456305d9e5565d3a695ad6f3cc6ad2052ead94b17aa4139455f8e18a55c4f9b49132994dda5955b44b31fa5010100003955241cd3885e860568649aa2900d0fba0d6562819630942add10ec6244487ce02f677e7220013af329c91c3cd2269f8e5ed91a55b7d848fd75775d5d7b8aa7969c71b8e76952bee87cd6fdc50bf50193994efebfa22cb22a911d37554f6474fcdbe309f70809644b2086b172e609980e68518cbb34765b1edca26523f7893d48ebed5d902409ddd0cbbb7f6b122a83c1395d1e9eac371b47893092754334a7327b634c58a512c2d254ac100d20aebf67fbe085260cf4e976ba0a45b5b976a9d56d0d7c9cfc4cc54871566891a654c2e867af8072b9235243492d1c794d077be97738c406590c883ec15f4872d12cf5bdf7848c19a1537f16386161130c1ecea6bd5a7f91628417e8efafbe3c3b08a3a997f2a68c7c53bcaab0738fec56086cf9c2c2d62a35ee032c68e18d95e2a8f10bc1934df5a8e9268c5a6b0ecee8e24f37f71ad8aab420b3fc9a4e7a33373cd7b77a1b1d4188d36db3f7a8b2ead1a5885af1aa981ebd87bc835484e7070c4ecf5a1107b75d765120b63a755dd154f9c5b58d0220f2bb93783f6f6b10f73115da02b5714734742c6b3db13a8fcee61abc152255ea185af5d106611ca4d3337fb9c410d3a2647e3cd73fa5f1e5dbbd01e18761ae9fd271bec553315d2b7caab5e550a2c0b28d919a2a627eee6b0ea481c4d96df774834efd65d0f77e0e4b9eac0c4cee22b05ba1a900aee500be5a21f0b956e2106f84fef2036be842e2d6c888e13c55e90a224f02eb1c50d657cf89f0ba5843f32b8e7108114ba91e691ac204dd7a6d40129bee8c1e61cabe46613c7755604787406e4793c271a405ad4713477167dc546a74f3c74948da40e4d577eb5c7cfb90c2d47adef789877f0639f0490a23fc82b8858acaed1e04ebb47b31ea5fbbbd554f343da5b99f295b7797c57ec2e2f16029c080196c929567438c81d9ac77746e59b1863214e714af009ac4e7ae566321158d440d1f62239971f438a77b94a71acaaa6ee388f7c55763cbe4560f4a7ced6ad448cddda2f697812306e7fdd03e0050d7966f6af51efe597d392843fd378b9621bb6a45ee0189f4527f45de88af3a7b566d637b555af50ede09e157b43768377c78e769bd762df89c4c715d4e4ad286076f154b5d73b968fd234bd92108c365e5b1c34b5a79c598b6223dee54b231476ca776cae0c11330178d32354de5d4a1e1c1c7a9fbd30619b966e2ee2ec15ce6ccf80baf39f7997c20de1a95f36fa11c3f283688a8fd166b5c415d33cde5d2acee738ef656ff9181962423f5214e0b4af81d6332130b37295f7a14b5bafcca0adde0331607e10f5a7bc85991279391b0e284f3e60b8fc79ad1404c429f00fc40d214019073e70ba07e4307018d9c5f7840fc8f99c36d2228b8c5aa0b9d4cf9df2567c00d4c0d068eb338e0eab2428634c50402ac1c30adcc4098f53d665321a4f0168c70a60aa55d27d23809ef5b519ff9bac4667eb94ac7e5c1eab56716fe88859344a221463fd1cbe0eb68b963d73aa93b3e3a9a1ba1aaa25131c2000ffd5f17a19978c94bdfc80d7fe72446187c47b4e3169442d9881036632f89dc77628ce815a825b0e07f6e52074789175d54589fd4c432913db6dce142471e4418cc7f36cee327000f4f6805109873d8e79b308d47398231c666312e601fd7a00df76e9b7a92f0c11446f2bd0e79843da98f79928bdfd5d719b87f3ca7eb7b920f663efea42a7bf147c5e5d26624d68cb755662ac07c7d6d8b96008a0c4a6f3f21b981cb9c0120955f9c87d269a3c2bee2ec93b5e6b52ec21ee4baed36888cfdfe75b9603fd453a2735192108de5585e219b38baf819e9c1cb30489028464ca18868aee9fe35ef94407c9a95cf4ecdb10926fc0ddd1b3b6778aa0bb521f03541a7cdab827618e031319cc5b18a4e02000060d5f6860b8e96c8a55d0135c3e55bd2ae9d021e280595ccceda8f7c41b73917f3b8f94c91fd7fa5ee5e78335ffbc07f95d1d1863d81a8bf35522952a09669169fd3ee4b1a409bba774c8b50eaba7b9c4c80e1519294fbf75e1d536b4e748ad2546416114572b1d5455d80f043c66a124a713a5934dba9dd3271e61f951a3deff533370a5463728bc4e5c3edfb18452dd3958e6149247b84f7f341e840175511cea7f55993572027e033abf55ffbffca2de4b01919c939fa47433402ec4289c809539a9356dc34b2cecc5b691e0cebf0d17dbcaede247988650188dd6ae64c9dc83ac3ea8fa9d69fe0fbde9dd0db69108167f89c76dfa98aa163d05f2d8d823a87f313438364ee38c050fe91750144873425d9f83328bf4395e5f5f77229387d779fb38f8ecf", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 2 programs left: 

executing program 32:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})


bisect: trying to concatenate
bisect: concatenate 2 entries
minimizing program #0 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x22240, 0x155)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x0, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket(0x11, 0x3, 0x9)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0x81)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019761b5538a6868b07bb9da31631f6e1f6331ec2db23b6c056c62b9fc9f13fb45b09ded4ad3ee82d358891077529106b0b38aa7fd752484c7c46903d7ff7e932ee1f4aeefd8470e6c946990ee8343f0347b3de40620583d4779247ad2d7b278260866acec29d0f486e7f600e21fd04250a1f73ac3801f559ab9fcc704caa07a80a5100aafd437433b4fae716803a6db78b9e1d0b587ca53ca22a50880947c3e89102aa1c6b584f284a154f53f3332d2b5e154969cbe589472f42da3412e9cdd5c51ae096a6ad5ff5774c6276d59c83548b57bb63f88166905e2734992701971e037e0bffb114c62db1a6ebb05f6c455df2ed9bade7a85b0e2efe9cd78d80249ec133247b5fc04c0fe37eac88a1691bf50f2bdbed0c9a93595d104a1fb10390d02af3c9cfb7ff6ae6152cd3547e481651ee55d71fe213bc1c7f99cf65005e01e3518f6d910d1d50c56d8659d6e307625fe16fd34e7b089192611b8cfabb489aea19937440bd3b841cde573f182597c57cd39d38caafe132c8fab3bf4c4ab2d16abba32035f4fb6ea7cd52a411f49ddd9c357c14a613db70178590c403dc43427db435e02f245e04d004ab78969a50f426a63e5ed2098074b47bc26daf2cb0a2bda0670568e7a8104db4b2b5995b39e8e48bbe8fff6ef58bd6add50d747d50c5c456305d9e5565d3a695ad6f3cc6ad2052ead94b17aa4139455f8e18a55c4f9b49132994dda5955b44b31fa5010100003955241cd3885e860568649aa2900d0fba0d6562819630942add10ec6244487ce02f677e7220013af329c91c3cd2269f8e5ed91a55b7d848fd75775d5d7b8aa7969c71b8e76952bee87cd6fdc50bf50193994efebfa22cb22a911d37554f6474fcdbe309f70809644b2086b172e609980e68518cbb34765b1edca26523f7893d48ebed5d902409ddd0cbbb7f6b122a83c1395d1e9eac371b47893092754334a7327b634c58a512c2d254ac100d20aebf67fbe085260cf4e976ba0a45b5b976a9d56d0d7c9cfc4cc54871566891a654c2e867af8072b9235243492d1c794d077be97738c406590c883ec15f4872d12cf5bdf7848c19a1537f16386161130c1ecea6bd5a7f91628417e8efafbe3c3b08a3a997f2a68c7c53bcaab0738fec56086cf9c2c2d62a35ee032c68e18d95e2a8f10bc1934df5a8e9268c5a6b0ecee8e24f37f71ad8aab420b3fc9a4e7a33373cd7b77a1b1d4188d36db3f7a8b2ead1a5885af1aa981ebd87bc835484e7070c4ecf5a1107b75d765120b63a755dd154f9c5b58d0220f2bb93783f6f6b10f73115da02b5714734742c6b3db13a8fcee61abc152255ea185af5d106611ca4d3337fb9c410d3a2647e3cd73fa5f1e5dbbd01e18761ae9fd271bec553315d2b7caab5e550a2c0b28d919a2a627eee6b0ea481c4d96df774834efd65d0f77e0e4b9eac0c4cee22b05ba1a900aee500be5a21f0b956e2106f84fef2036be842e2d6c888e13c55e90a224f02eb1c50d657cf89f0ba5843f32b8e7108114ba91e691ac204dd7a6d40129bee8c1e61cabe46613c7755604787406e4793c271a405ad4713477167dc546a74f3c74948da40e4d577eb5c7cfb90c2d47adef789877f0639f0490a23fc82b8858acaed1e04ebb47b31ea5fbbbd554f343da5b99f295b7797c57ec2e2f16029c080196c929567438c81d9ac77746e59b1863214e714af009ac4e7ae566321158d440d1f62239971f438a77b94a71acaaa6ee388f7c55763cbe4560f4a7ced6ad448cddda2f697812306e7fdd03e0050d7966f6af51efe597d392843fd378b9621bb6a45ee0189f4527f45de88af3a7b566d637b555af50ede09e157b43768377c78e769bd762df89c4c715d4e4ad286076f154b5d73b968fd234bd92108c365e5b1c34b5a79c598b6223dee54b231476ca776cae0c11330178d32354de5d4a1e1c1c7a9fbd30619b966e2ee2ec15ce6ccf80baf39f7997c20de1a95f36fa11c3f283688a8fd166b5c415d33cde5d2acee738ef656ff9181962423f5214e0b4af81d6332130b37295f7a14b5bafcca0adde0331607e10f5a7bc85991279391b0e284f3e60b8fc79ad1404c429f00fc40d214019073e70ba07e4307018d9c5f7840fc8f99c36d2228b8c5aa0b9d4cf9df2567c00d4c0d068eb338e0eab2428634c50402ac1c30adcc4098f53d665321a4f0168c70a60aa55d27d23809ef5b519ff9bac4667eb94ac7e5c1eab56716fe88859344a221463fd1cbe0eb68b963d73aa93b3e3a9a1ba1aaa25131c2000ffd5f17a19978c94bdfc80d7fe72446187c47b4e3169442d9881036632f89dc77628ce815a825b0e07f6e52074789175d54589fd4c432913db6dce142471e4418cc7f36cee327000f4f6805109873d8e79b308d47398231c666312e601fd7a00df76e9b7a92f0c11446f2bd0e79843da98f79928bdfd5d719b87f3ca7eb7b920f663efea42a7bf147c5e5d26624d68cb755662ac07c7d6d8b96008a0c4a6f3f21b981cb9c0120955f9c87d269a3c2bee2ec93b5e6b52ec21ee4baed36888cfdfe75b9603fd453a2735192108de5585e219b38baf819e9c1cb30489028464ca18868aee9fe35ef94407c9a95cf4ecdb10926fc0ddd1b3b6778aa0bb521f03541a7cdab827618e031319cc5b18a4e02000060d5f6860b8e96c8a55d0135c3e55bd2ae9d021e280595ccceda8f7c41b73917f3b8f94c91fd7fa5ee5e78335ffbc07f95d1d1863d81a8bf35522952a09669169fd3ee4b1a409bba774c8b50eaba7b9c4c80e1519294fbf75e1d536b4e748ad2546416114572b1d5455d80f043c66a124a713a5934dba9dd3271e61f951a3deff533370a5463728bc4e5c3edfb18452dd3958e6149247b84f7f341e840175511cea7f55993572027e033abf55ffbffca2de4b01919c939fa47433402ec4289c809539a9356dc34b2cecc5b691e0cebf0d17dbcaede247988650188dd6ae64c9dc83ac3ea8fa9d69fe0fbde9dd0db69108167f89c76dfa98aa163d05f2d8d823a87f313438364ee38c050fe91750144873425d9f83328bf4395e5f5f77229387d779fb38f8ecf", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b44, 0x1)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019761b5538a6868b07bb9da31631f6e1f6331ec2db23b6c056c62b9fc9f13fb45b09ded4ad3ee82d358891077529106b0b38aa7fd752484c7c46903d7ff7e932ee1f4aeefd8470e6c946990ee8343f0347b3de40620583d4779247ad2d7b278260866acec29d0f486e7f600e21fd04250a1f73ac3801f559ab9fcc704caa07a80a5100aafd437433b4fae716803a6db78b9e1d0b587ca53ca22a50880947c3e89102aa1c6b584f284a154f53f3332d2b5e154969cbe589472f42da3412e9cdd5c51ae096a6ad5ff5774c6276d59c83548b57bb63f88166905e2734992701971e037e0bffb114c62db1a6ebb05f6c455df2ed9bade7a85b0e2efe9cd78d80249ec133247b5fc04c0fe37eac88a1691bf50f2bdbed0c9a93595d104a1fb10390d02af3c9cfb7ff6ae6152cd3547e481651ee55d71fe213bc1c7f99cf65005e01e3518f6d910d1d50c56d8659d6e307625fe16fd34e7b089192611b8cfabb489aea19937440bd3b841cde573f182597c57cd39d38caafe132c8fab3bf4c4ab2d16abba32035f4fb6ea7cd52a411f49ddd9c357c14a613db70178590c403dc43427db435e02f245e04d004ab78969a50f426a63e5ed2098074b47bc26daf2cb0a2bda0670568e7a8104db4b2b5995b39e8e48bbe8fff6ef58bd6add50d747d50c5c456305d9e5565d3a695ad6f3cc6ad2052ead94b17aa4139455f8e18a55c4f9b49132994dda5955b44b31fa5010100003955241cd3885e860568649aa2900d0fba0d6562819630942add10ec6244487ce02f677e7220013af329c91c3cd2269f8e5ed91a55b7d848fd75775d5d7b8aa7969c71b8e76952bee87cd6fdc50bf50193994efebfa22cb22a911d37554f6474fcdbe309f70809644b2086b172e609980e68518cbb34765b1edca26523f7893d48ebed5d902409ddd0cbbb7f6b122a83c1395d1e9eac371b47893092754334a7327b634c58a512c2d254ac100d20aebf67fbe085260cf4e976ba0a45b5b976a9d56d0d7c9cfc4cc54871566891a654c2e867af8072b9235243492d1c794d077be97738c406590c883ec15f4872d12cf5bdf7848c19a1537f16386161130c1ecea6bd5a7f91628417e8efafbe3c3b08a3a997f2a68c7c53bcaab0738fec56086cf9c2c2d62a35ee032c68e18d95e2a8f10bc1934df5a8e9268c5a6b0ecee8e24f37f71ad8aab420b3fc9a4e7a33373cd7b77a1b1d4188d36db3f7a8b2ead1a5885af1aa981ebd87bc835484e7070c4ecf5a1107b75d765120b63a755dd154f9c5b58d0220f2bb93783f6f6b10f73115da02b5714734742c6b3db13a8fcee61abc152255ea185af5d106611ca4d3337fb9c410d3a2647e3cd73fa5f1e5dbbd01e18761ae9fd271bec553315d2b7caab5e550a2c0b28d919a2a627eee6b0ea481c4d96df774834efd65d0f77e0e4b9eac0c4cee22b05ba1a900aee500be5a21f0b956e2106f84fef2036be842e2d6c888e13c55e90a224f02eb1c50d657cf89f0ba5843f32b8e7108114ba91e691ac204dd7a6d40129bee8c1e61cabe46613c7755604787406e4793c271a405ad4713477167dc546a74f3c74948da40e4d577eb5c7cfb90c2d47adef789877f0639f0490a23fc82b8858acaed1e04ebb47b31ea5fbbbd554f343da5b99f295b7797c57ec2e2f16029c080196c929567438c81d9ac77746e59b1863214e714af009ac4e7ae566321158d440d1f62239971f438a77b94a71acaaa6ee388f7c55763cbe4560f4a7ced6ad448cddda2f697812306e7fdd03e0050d7966f6af51efe597d392843fd378b9621bb6a45ee0189f4527f45de88af3a7b566d637b555af50ede09e157b43768377c78e769bd762df89c4c715d4e4ad286076f154b5d73b968fd234bd92108c365e5b1c34b5a79c598b6223dee54b231476ca776cae0c11330178d32354de5d4a1e1c1c7a9fbd30619b966e2ee2ec15ce6ccf80baf39f7997c20de1a95f36fa11c3f283688a8fd166b5c415d33cde5d2acee738ef656ff9181962423f5214e0b4af81d6332130b37295f7a14b5bafcca0adde0331607e10f5a7bc85991279391b0e284f3e60b8fc79ad1404c429f00fc40d214019073e70ba07e4307018d9c5f7840fc8f99c36d2228b8c5aa0b9d4cf9df2567c00d4c0d068eb338e0eab2428634c50402ac1c30adcc4098f53d665321a4f0168c70a60aa55d27d23809ef5b519ff9bac4667eb94ac7e5c1eab56716fe88859344a221463fd1cbe0eb68b963d73aa93b3e3a9a1ba1aaa25131c2000ffd5f17a19978c94bdfc80d7fe72446187c47b4e3169442d9881036632f89dc77628ce815a825b0e07f6e52074789175d54589fd4c432913db6dce142471e4418cc7f36cee327000f4f6805109873d8e79b308d47398231c666312e601fd7a00df76e9b7a92f0c11446f2bd0e79843da98f79928bdfd5d719b87f3ca7eb7b920f663efea42a7bf147c5e5d26624d68cb755662ac07c7d6d8b96008a0c4a6f3f21b981cb9c0120955f9c87d269a3c2bee2ec93b5e6b52ec21ee4baed36888cfdfe75b9603fd453a2735192108de5585e219b38baf819e9c1cb30489028464ca18868aee9fe35ef94407c9a95cf4ecdb10926fc0ddd1b3b6778aa0bb521f03541a7cdab827618e031319cc5b18a4e02000060d5f6860b8e96c8a55d0135c3e55bd2ae9d021e280595ccceda8f7c41b73917f3b8f94c91fd7fa5ee5e78335ffbc07f95d1d1863d81a8bf35522952a09669169fd3ee4b1a409bba774c8b50eaba7b9c4c80e1519294fbf75e1d536b4e748ad2546416114572b1d5455d80f043c66a124a713a5934dba9dd3271e61f951a3deff533370a5463728bc4e5c3edfb18452dd3958e6149247b84f7f341e840175511cea7f55993572027e033abf55ffbffca2de4b01919c939fa47433402ec4289c809539a9356dc34b2cecc5b691e0cebf0d17dbcaede247988650188dd6ae64c9dc83ac3ea8fa9d69fe0fbde9dd0db69108167f89c76dfa98aa163d05f2d8d823a87f313438364ee38c050fe91750144873425d9f83328bf4395e5f5f77229387d779fb38f8ecf", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019761b5538a6868b07bb9da31631f6e1f6331ec2db23b6c056c62b9fc9f13fb45b09ded4ad3ee82d358891077529106b0b38aa7fd752484c7c46903d7ff7e932ee1f4aeefd8470e6c946990ee8343f0347b3de40620583d4779247ad2d7b278260866acec29d0f486e7f600e21fd04250a1f73ac3801f559ab9fcc704caa07a80a5100aafd437433b4fae716803a6db78b9e1d0b587ca53ca22a50880947c3e89102aa1c6b584f284a154f53f3332d2b5e154969cbe589472f42da3412e9cdd5c51ae096a6ad5ff5774c6276d59c83548b57bb63f88166905e2734992701971e037e0bffb114c62db1a6ebb05f6c455df2ed9bade7a85b0e2efe9cd78d80249ec133247b5fc04c0fe37eac88a1691bf50f2bdbed0c9a93595d104a1fb10390d02af3c9cfb7ff6ae6152cd3547e481651ee55d71fe213bc1c7f99cf65005e01e3518f6d910d1d50c56d8659d6e307625fe16fd34e7b089192611b8cfabb489aea19937440bd3b841cde573f182597c57cd39d38caafe132c8fab3bf4c4ab2d16abba32035f4fb6ea7cd52a411f49ddd9c357c14a613db70178590c403dc43427db435e02f245e04d004ab78969a50f426a63e5ed2098074b47bc26daf2cb0a2bda0670568e7a8104db4b2b5995b39e8e48bbe8fff6ef58bd6add50d747d50c5c456305d9e5565d3a695ad6f3cc6ad2052ead94b17aa4139455f8e18a55c4f9b49132994dda5955b44b31fa5010100003955241cd3885e860568649aa2900d0fba0d6562819630942add10ec6244487ce02f677e7220013af329c91c3cd2269f8e5ed91a55b7d848fd75775d5d7b8aa7969c71b8e76952bee87cd6fdc50bf50193994efebfa22cb22a911d37554f6474fcdbe309f70809644b2086b172e609980e68518cbb34765b1edca26523f7893d48ebed5d902409ddd0cbbb7f6b122a83c1395d1e9eac371b47893092754334a7327b634c58a512c2d254ac100d20aebf67fbe085260cf4e976ba0a45b5b976a9d56d0d7c9cfc4cc54871566891a654c2e867af8072b9235243492d1c794d077be97738c406590c883ec15f4872d12cf5bdf7848c19a1537f16386161130c1ecea6bd5a7f91628417e8efafbe3c3b08a3a997f2a68c7c53bcaab0738fec56086cf9c2c2d62a35ee032c68e18d95e2a8f10bc1934df5a8e9268c5a6b0ecee8e24f37f71ad8aab420b3fc9a4e7a33373cd7b77a1b1d4188d36db3f7a8b2ead1a5885af1aa981ebd87bc835484e7070c4ecf5a1107b75d765120b63a755dd154f9c5b58d0220f2bb93783f6f6b10f73115da02b5714734742c6b3db13a8fcee61abc152255ea185af5d106611ca4d3337fb9c410d3a2647e3cd73fa5f1e5dbbd01e18761ae9fd271bec553315d2b7caab5e550a2c0b28d919a2a627eee6b0ea481c4d96df774834efd65d0f77e0e4b9eac0c4cee22b05ba1a900aee500be5a21f0b956e2106f84fef2036be842e2d6c888e13c55e90a224f02eb1c50d657cf89f0ba5843f32b8e7108114ba91e691ac204dd7a6d40129bee8c1e61cabe46613c7755604787406e4793c271a405ad4713477167dc546a74f3c74948da40e4d577eb5c7cfb90c2d47adef789877f0639f0490a23fc82b8858acaed1e04ebb47b31ea5fbbbd554f343da5b99f295b7797c57ec2e2f16029c080196c929567438c81d9ac77746e59b1863214e714af009ac4e7ae566321158d440d1f62239971f438a77b94a71acaaa6ee388f7c55763cbe4560f4a7ced6ad448cddda2f697812306e7fdd03e0050d7966f6af51efe597d392843fd378b9621bb6a45ee0189f4527f45de88af3a7b566d637b555af50ede09e157b43768377c78e769bd762df89c4c715d4e4ad286076f154b5d73b968fd234bd92108c365e5b1c34b5a79c598b6223dee54b231476ca776cae0c11330178d32354de5d4a1e1c1c7a9fbd30619b966e2ee2ec15ce6ccf80baf39f7997c20de1a95f36fa11c3f283688a8fd166b5c415d33cde5d2acee738ef656ff9181962423f5214e0b4af81d6332130b37295f7a14b5bafcca0adde0331607e10f5a7bc85991279391b0e284f3e60b8fc79ad1404c429f00fc40d214019073e70ba07e4307018d9c5f7840fc8f99c36d2228b8c5aa0b9d4cf9df2567c00d4c0d068eb338e0eab2428634c50402ac1c30adcc4098f53d665321a4f0168c70a60aa55d27d23809ef5b519ff9bac4667eb94ac7e5c1eab56716fe88859344a221463fd1cbe0eb68b963d73aa93b3e3a9a1ba1aaa25131c2000ffd5f17a19978c94bdfc80d7fe72446187c47b4e3169442d9881036632f89dc77628ce815a825b0e07f6e52074789175d54589fd4c432913db6dce142471e4418cc7f36cee327000f4f6805109873d8e79b308d47398231c666312e601fd7a00df76e9b7a92f0c11446f2bd0e79843da98f79928bdfd5d719b87f3ca7eb7b920f663efea42a7bf147c5e5d26624d68cb755662ac07c7d6d8b96008a0c4a6f3f21b981cb9c0120955f9c87d269a3c2bee2ec93b5e6b52ec21ee4baed36888cfdfe75b9603fd453a2735192108de5585e219b38baf819e9c1cb30489028464ca18868aee9fe35ef94407c9a95cf4ecdb10926fc0ddd1b3b6778aa0bb521f03541a7cdab827618e031319cc5b18a4e02000060d5f6860b8e96c8a55d0135c3e55bd2ae9d021e280595ccceda8f7c41b73917f3b8f94c91fd7fa5ee5e78335ffbc07f95d1d1863d81a8bf35522952a09669169fd3ee4b1a409bba774c8b50eaba7b9c4c80e1519294fbf75e1d536b4e748ad2546416114572b1d5455d80f043c66a124a713a5934dba9dd3271e61f951a3deff533370a5463728bc4e5c3edfb18452dd3958e6149247b84f7f341e840175511cea7f55993572027e033abf55ffbffca2de4b01919c939fa47433402ec4289c809539a9356dc34b2cecc5b691e0cebf0d17dbcaede247988650188dd6ae64c9dc83ac3ea8fa9d69fe0fbde9dd0db69108167f89c76dfa98aa163d05f2d8d823a87f313438364ee38c050fe91750144873425d9f83328bf4395e5f5f77229387d779fb38f8ecf", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
socket(0x5, 0x1, 0x84)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0x7}, 0x5, 0x311)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x6a)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019761b5538a6868b07bb9da31631f6e1f6331ec2db23b6c056c62b9fc9f13fb45b09ded4ad3ee82d358891077529106b0b38aa7fd752484c7c46903d7ff7e932ee1f4aeefd8470e6c946990ee8343f0347b3de40620583d4779247ad2d7b278260866acec29d0f486e7f600e21fd04250a1f73ac3801f559ab9fcc704caa07a80a5100aafd437433b4fae716803a6db78b9e1d0b587ca53ca22a50880947c3e89102aa1c6b584f284a154f53f3332d2b5e154969cbe589472f42da3412e9cdd5c51ae096a6ad5ff5774c6276d59c83548b57bb63f88166905e2734992701971e037e0bffb114c62db1a6ebb05f6c455df2ed9bade7a85b0e2efe9cd78d80249ec133247b5fc04c0fe37eac88a1691bf50f2bdbed0c9a93595d104a1fb10390d02af3c9cfb7ff6ae6152cd3547e481651ee55d71fe213bc1c7f99cf65005e01e3518f6d910d1d50c56d8659d6e307625fe16fd34e7b089192611b8cfabb489aea19937440bd3b841cde573f182597c57cd39d38caafe132c8fab3bf4c4ab2d16abba32035f4fb6ea7cd52a411f49ddd9c357c14a613db70178590c403dc43427db435e02f245e04d004ab78969a50f426a63e5ed2098074b47bc26daf2cb0a2bda0670568e7a8104db4b2b5995b39e8e48bbe8fff6ef58bd6add50d747d50c5c456305d9e5565d3a695ad6f3cc6ad2052ead94b17aa4139455f8e18a55c4f9b49132994dda5955b44b31fa5010100003955241cd3885e860568649aa2900d0fba0d6562819630942add10ec6244487ce02f677e7220013af329c91c3cd2269f8e5ed91a55b7d848fd75775d5d7b8aa7969c71b8e76952bee87cd6fdc50bf50193994efebfa22cb22a911d37554f6474fcdbe309f70809644b2086b172e609980e68518cbb34765b1edca26523f7893d48ebed5d902409ddd0cbbb7f6b122a83c1395d1e9eac371b47893092754334a7327b634c58a512c2d254ac100d20aebf67fbe085260cf4e976ba0a45b5b976a9d56d0d7c9cfc4cc54871566891a654c2e867af8072b9235243492d1c794d077be97738c406590c883ec15f4872d12cf5bdf7848c19a1537f16386161130c1ecea6bd5a7f91628417e8efafbe3c3b08a3a997f2a68c7c53bcaab0738fec56086cf9c2c2d62a35ee032c68e18d95e2a8f10bc1934df5a8e9268c5a6b0ecee8e24f37f71ad8aab420b3fc9a4e7a33373cd7b77a1b1d4188d36db3f7a8b2ead1a5885af1aa981ebd87bc835484e7070c4ecf5a1107b75d765120b63a755dd154f9c5b58d0220f2bb93783f6f6b10f73115da02b5714734742c6b3db13a8fcee61abc152255ea185af5d106611ca4d3337fb9c410d3a2647e3cd73fa5f1e5dbbd01e18761ae9fd271bec553315d2b7caab5e550a2c0b28d919a2a627eee6b0ea481c4d96df774834efd65d0f77e0e4b9eac0c4cee22b05ba1a900aee500be5a21f0b956e2106f84fef2036be842e2d6c888e13c55e90a224f02eb1c50d657cf89f0ba5843f32b8e7108114ba91e691ac204dd7a6d40129bee8c1e61cabe46613c7755604787406e4793c271a405ad4713477167dc546a74f3c74948da40e4d577eb5c7cfb90c2d47adef789877f0639f0490a23fc82b8858acaed1e04ebb47b31ea5fbbbd554f343da5b99f295b7797c57ec2e2f16029c080196c929567438c81d9ac77746e59b1863214e714af009ac4e7ae566321158d440d1f62239971f438a77b94a71acaaa6ee388f7c55763cbe4560f4a7ced6ad448cddda2f697812306e7fdd03e0050d7966f6af51efe597d392843fd378b9621bb6a45ee0189f4527f45de88af3a7b566d637b555af50ede09e157b43768377c78e769bd762df89c4c715d4e4ad286076f154b5d73b968fd234bd92108c365e5b1c34b5a79c598b6223dee54b231476ca776cae0c11330178d32354de5d4a1e1c1c7a9fbd30619b966e2ee2ec15ce6ccf80baf39f7997c20de1a95f36fa11c3f283688a8fd166b5c415d33cde5d2acee738ef656ff9181962423f5214e0b4af81d6332130b37295f7a14b5bafcca0adde0331607e10f5a7bc85991279391b0e284f3e60b8fc79ad1404c429f00fc40d214019073e70ba07e4307018d9c5f7840fc8f99c36d2228b8c5aa0b9d4cf9df2567c00d4c0d068eb338e0eab2428634c50402ac1c30adcc4098f53d665321a4f0168c70a60aa55d27d23809ef5b519ff9bac4667eb94ac7e5c1eab56716fe88859344a221463fd1cbe0eb68b963d73aa93b3e3a9a1ba1aaa25131c2000ffd5f17a19978c94bdfc80d7fe72446187c47b4e3169442d9881036632f89dc77628ce815a825b0e07f6e52074789175d54589fd4c432913db6dce142471e4418cc7f36cee327000f4f6805109873d8e79b308d47398231c666312e601fd7a00df76e9b7a92f0c11446f2bd0e79843da98f79928bdfd5d719b87f3ca7eb7b920f663efea42a7bf147c5e5d26624d68cb755662ac07c7d6d8b96008a0c4a6f3f21b981cb9c0120955f9c87d269a3c2bee2ec93b5e6b52ec21ee4baed36888cfdfe75b9603fd453a2735192108de5585e219b38baf819e9c1cb30489028464ca18868aee9fe35ef94407c9a95cf4ecdb10926fc0ddd1b3b6778aa0bb521f03541a7cdab827618e031319cc5b18a4e02000060d5f6860b8e96c8a55d0135c3e55bd2ae9d021e280595ccceda8f7c41b73917f3b8f94c91fd7fa5ee5e78335ffbc07f95d1d1863d81a8bf35522952a09669169fd3ee4b1a409bba774c8b50eaba7b9c4c80e1519294fbf75e1d536b4e748ad2546416114572b1d5455d80f043c66a124a713a5934dba9dd3271e61f951a3deff533370a5463728bc4e5c3edfb18452dd3958e6149247b84f7f341e840175511cea7f55993572027e033abf55ffbffca2de4b01919c939fa47433402ec4289c809539a9356dc34b2cecc5b691e0cebf0d17dbcaede247988650188dd6ae64c9dc83ac3ea8fa9d69fe0fbde9dd0db69108167f89c76dfa98aa163d05f2d8d823a87f313438364ee38c050fe91750144873425d9f83328bf4395e5f5f77229387d779fb38f8ecf", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
socket(0x10, 0x2, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019761b5538a6868b07bb9da31631f6e1f6331ec2db23b6c056c62b9fc9f13fb45b09ded4ad3ee82d358891077529106b0b38aa7fd752484c7c46903d7ff7e932ee1f4aeefd8470e6c946990ee8343f0347b3de40620583d4779247ad2d7b278260866acec29d0f486e7f600e21fd04250a1f73ac3801f559ab9fcc704caa07a80a5100aafd437433b4fae716803a6db78b9e1d0b587ca53ca22a50880947c3e89102aa1c6b584f284a154f53f3332d2b5e154969cbe589472f42da3412e9cdd5c51ae096a6ad5ff5774c6276d59c83548b57bb63f88166905e2734992701971e037e0bffb114c62db1a6ebb05f6c455df2ed9bade7a85b0e2efe9cd78d80249ec133247b5fc04c0fe37eac88a1691bf50f2bdbed0c9a93595d104a1fb10390d02af3c9cfb7ff6ae6152cd3547e481651ee55d71fe213bc1c7f99cf65005e01e3518f6d910d1d50c56d8659d6e307625fe16fd34e7b089192611b8cfabb489aea19937440bd3b841cde573f182597c57cd39d38caafe132c8fab3bf4c4ab2d16abba32035f4fb6ea7cd52a411f49ddd9c357c14a613db70178590c403dc43427db435e02f245e04d004ab78969a50f426a63e5ed2098074b47bc26daf2cb0a2bda0670568e7a8104db4b2b5995b39e8e48bbe8fff6ef58bd6add50d747d50c5c456305d9e5565d3a695ad6f3cc6ad2052ead94b17aa4139455f8e18a55c4f9b49132994dda5955b44b31fa5010100003955241cd3885e860568649aa2900d0fba0d6562819630942add10ec6244487ce02f677e7220013af329c91c3cd2269f8e5ed91a55b7d848fd75775d5d7b8aa7969c71b8e76952bee87cd6fdc50bf50193994efebfa22cb22a911d37554f6474fcdbe309f70809644b2086b172e609980e68518cbb34765b1edca26523f7893d48ebed5d902409ddd0cbbb7f6b122a83c1395d1e9eac371b47893092754334a7327b634c58a512c2d254ac100d20aebf67fbe085260cf4e976ba0a45b5b976a9d56d0d7c9cfc4cc54871566891a654c2e867af8072b9235243492d1c794d077be97738c406590c883ec15f4872d12cf5bdf7848c19a1537f16386161130c1ecea6bd5a7f91628417e8efafbe3c3b08a3a997f2a68c7c53bcaab0738fec56086cf9c2c2d62a35ee032c68e18d95e2a8f10bc1934df5a8e9268c5a6b0ecee8e24f37f71ad8aab420b3fc9a4e7a33373cd7b77a1b1d4188d36db3f7a8b2ead1a5885af1aa981ebd87bc835484e7070c4ecf5a1107b75d765120b63a755dd154f9c5b58d0220f2bb93783f6f6b10f73115da02b5714734742c6b3db13a8fcee61abc152255ea185af5d106611ca4d3337fb9c410d3a2647e3cd73fa5f1e5dbbd01e18761ae9fd271bec553315d2b7caab5e550a2c0b28d919a2a627eee6b0ea481c4d96df774834efd65d0f77e0e4b9eac0c4cee22b05ba1a900aee500be5a21f0b956e2106f84fef2036be842e2d6c888e13c55e90a224f02eb1c50d657cf89f0ba5843f32b8e7108114ba91e691ac204dd7a6d40129bee8c1e61cabe46613c7755604787406e4793c271a405ad4713477167dc546a74f3c74948da40e4d577eb5c7cfb90c2d47adef789877f0639f0490a23fc82b8858acaed1e04ebb47b31ea5fbbbd554f343da5b99f295b7797c57ec2e2f16029c080196c929567438c81d9ac77746e59b1863214e714af009ac4e7ae566321158d440d1f62239971f438a77b94a71acaaa6ee388f7c55763cbe4560f4a7ced6ad448cddda2f697812306e7fdd03e0050d7966f6af51efe597d392843fd378b9621bb6a45ee0189f4527f45de88af3a7b566d637b555af50ede09e157b43768377c78e769bd762df89c4c715d4e4ad286076f154b5d73b968fd234bd92108c365e5b1c34b5a79c598b6223dee54b231476ca776cae0c11330178d32354de5d4a1e1c1c7a9fbd30619b966e2ee2ec15ce6ccf80baf39f7997c20de1a95f36fa11c3f283688a8fd166b5c415d33cde5d2acee738ef656ff9181962423f5214e0b4af81d6332130b37295f7a14b5bafcca0adde0331607e10f5a7bc85991279391b0e284f3e60b8fc79ad1404c429f00fc40d214019073e70ba07e4307018d9c5f7840fc8f99c36d2228b8c5aa0b9d4cf9df2567c00d4c0d068eb338e0eab2428634c50402ac1c30adcc4098f53d665321a4f0168c70a60aa55d27d23809ef5b519ff9bac4667eb94ac7e5c1eab56716fe88859344a221463fd1cbe0eb68b963d73aa93b3e3a9a1ba1aaa25131c2000ffd5f17a19978c94bdfc80d7fe72446187c47b4e3169442d9881036632f89dc77628ce815a825b0e07f6e52074789175d54589fd4c432913db6dce142471e4418cc7f36cee327000f4f6805109873d8e79b308d47398231c666312e601fd7a00df76e9b7a92f0c11446f2bd0e79843da98f79928bdfd5d719b87f3ca7eb7b920f663efea42a7bf147c5e5d26624d68cb755662ac07c7d6d8b96008a0c4a6f3f21b981cb9c0120955f9c87d269a3c2bee2ec93b5e6b52ec21ee4baed36888cfdfe75b9603fd453a2735192108de5585e219b38baf819e9c1cb30489028464ca18868aee9fe35ef94407c9a95cf4ecdb10926fc0ddd1b3b6778aa0bb521f03541a7cdab827618e031319cc5b18a4e02000060d5f6860b8e96c8a55d0135c3e55bd2ae9d021e280595ccceda8f7c41b73917f3b8f94c91fd7fa5ee5e78335ffbc07f95d1d1863d81a8bf35522952a09669169fd3ee4b1a409bba774c8b50eaba7b9c4c80e1519294fbf75e1d536b4e748ad2546416114572b1d5455d80f043c66a124a713a5934dba9dd3271e61f951a3deff533370a5463728bc4e5c3edfb18452dd3958e6149247b84f7f341e840175511cea7f55993572027e033abf55ffbffca2de4b01919c939fa47433402ec4289c809539a9356dc34b2cecc5b691e0cebf0d17dbcaede247988650188dd6ae64c9dc83ac3ea8fa9d69fe0fbde9dd0db69108167f89c76dfa98aa163d05f2d8d823a87f313438364ee38c050fe91750144873425d9f83328bf4395e5f5f77229387d779fb38f8ecf", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
socket(0x2, 0x1, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019761b5538a6868b07bb9da31631f6e1f6331ec2db23b6c056c62b9fc9f13fb45b09ded4ad3ee82d358891077529106b0b38aa7fd752484c7c46903d7ff7e932ee1f4aeefd8470e6c946990ee8343f0347b3de40620583d4779247ad2d7b278260866acec29d0f486e7f600e21fd04250a1f73ac3801f559ab9fcc704caa07a80a5100aafd437433b4fae716803a6db78b9e1d0b587ca53ca22a50880947c3e89102aa1c6b584f284a154f53f3332d2b5e154969cbe589472f42da3412e9cdd5c51ae096a6ad5ff5774c6276d59c83548b57bb63f88166905e2734992701971e037e0bffb114c62db1a6ebb05f6c455df2ed9bade7a85b0e2efe9cd78d80249ec133247b5fc04c0fe37eac88a1691bf50f2bdbed0c9a93595d104a1fb10390d02af3c9cfb7ff6ae6152cd3547e481651ee55d71fe213bc1c7f99cf65005e01e3518f6d910d1d50c56d8659d6e307625fe16fd34e7b089192611b8cfabb489aea19937440bd3b841cde573f182597c57cd39d38caafe132c8fab3bf4c4ab2d16abba32035f4fb6ea7cd52a411f49ddd9c357c14a613db70178590c403dc43427db435e02f245e04d004ab78969a50f426a63e5ed2098074b47bc26daf2cb0a2bda0670568e7a8104db4b2b5995b39e8e48bbe8fff6ef58bd6add50d747d50c5c456305d9e5565d3a695ad6f3cc6ad2052ead94b17aa4139455f8e18a55c4f9b49132994dda5955b44b31fa5010100003955241cd3885e860568649aa2900d0fba0d6562819630942add10ec6244487ce02f677e7220013af329c91c3cd2269f8e5ed91a55b7d848fd75775d5d7b8aa7969c71b8e76952bee87cd6fdc50bf50193994efebfa22cb22a911d37554f6474fcdbe309f70809644b2086b172e609980e68518cbb34765b1edca26523f7893d48ebed5d902409ddd0cbbb7f6b122a83c1395d1e9eac371b47893092754334a7327b634c58a512c2d254ac100d20aebf67fbe085260cf4e976ba0a45b5b976a9d56d0d7c9cfc4cc54871566891a654c2e867af8072b9235243492d1c794d077be97738c406590c883ec15f4872d12cf5bdf7848c19a1537f16386161130c1ecea6bd5a7f91628417e8efafbe3c3b08a3a997f2a68c7c53bcaab0738fec56086cf9c2c2d62a35ee032c68e18d95e2a8f10bc1934df5a8e9268c5a6b0ecee8e24f37f71ad8aab420b3fc9a4e7a33373cd7b77a1b1d4188d36db3f7a8b2ead1a5885af1aa981ebd87bc835484e7070c4ecf5a1107b75d765120b63a755dd154f9c5b58d0220f2bb93783f6f6b10f73115da02b5714734742c6b3db13a8fcee61abc152255ea185af5d106611ca4d3337fb9c410d3a2647e3cd73fa5f1e5dbbd01e18761ae9fd271bec553315d2b7caab5e550a2c0b28d919a2a627eee6b0ea481c4d96df774834efd65d0f77e0e4b9eac0c4cee22b05ba1a900aee500be5a21f0b956e2106f84fef2036be842e2d6c888e13c55e90a224f02eb1c50d657cf89f0ba5843f32b8e7108114ba91e691ac204dd7a6d40129bee8c1e61cabe46613c7755604787406e4793c271a405ad4713477167dc546a74f3c74948da40e4d577eb5c7cfb90c2d47adef789877f0639f0490a23fc82b8858acaed1e04ebb47b31ea5fbbbd554f343da5b99f295b7797c57ec2e2f16029c080196c929567438c81d9ac77746e59b1863214e714af009ac4e7ae566321158d440d1f62239971f438a77b94a71acaaa6ee388f7c55763cbe4560f4a7ced6ad448cddda2f697812306e7fdd03e0050d7966f6af51efe597d392843fd378b9621bb6a45ee0189f4527f45de88af3a7b566d637b555af50ede09e157b43768377c78e769bd762df89c4c715d4e4ad286076f154b5d73b968fd234bd92108c365e5b1c34b5a79c598b6223dee54b231476ca776cae0c11330178d32354de5d4a1e1c1c7a9fbd30619b966e2ee2ec15ce6ccf80baf39f7997c20de1a95f36fa11c3f283688a8fd166b5c415d33cde5d2acee738ef656ff9181962423f5214e0b4af81d6332130b37295f7a14b5bafcca0adde0331607e10f5a7bc85991279391b0e284f3e60b8fc79ad1404c429f00fc40d214019073e70ba07e4307018d9c5f7840fc8f99c36d2228b8c5aa0b9d4cf9df2567c00d4c0d068eb338e0eab2428634c50402ac1c30adcc4098f53d665321a4f0168c70a60aa55d27d23809ef5b519ff9bac4667eb94ac7e5c1eab56716fe88859344a221463fd1cbe0eb68b963d73aa93b3e3a9a1ba1aaa25131c2000ffd5f17a19978c94bdfc80d7fe72446187c47b4e3169442d9881036632f89dc77628ce815a825b0e07f6e52074789175d54589fd4c432913db6dce142471e4418cc7f36cee327000f4f6805109873d8e79b308d47398231c666312e601fd7a00df76e9b7a92f0c11446f2bd0e79843da98f79928bdfd5d719b87f3ca7eb7b920f663efea42a7bf147c5e5d26624d68cb755662ac07c7d6d8b96008a0c4a6f3f21b981cb9c0120955f9c87d269a3c2bee2ec93b5e6b52ec21ee4baed36888cfdfe75b9603fd453a2735192108de5585e219b38baf819e9c1cb30489028464ca18868aee9fe35ef94407c9a95cf4ecdb10926fc0ddd1b3b6778aa0bb521f03541a7cdab827618e031319cc5b18a4e02000060d5f6860b8e96c8a55d0135c3e55bd2ae9d021e280595ccceda8f7c41b73917f3b8f94c91fd7fa5ee5e78335ffbc07f95d1d1863d81a8bf35522952a09669169fd3ee4b1a409bba774c8b50eaba7b9c4c80e1519294fbf75e1d536b4e748ad2546416114572b1d5455d80f043c66a124a713a5934dba9dd3271e61f951a3deff533370a5463728bc4e5c3edfb18452dd3958e6149247b84f7f341e840175511cea7f55993572027e033abf55ffbffca2de4b01919c939fa47433402ec4289c809539a9356dc34b2cecc5b691e0cebf0d17dbcaede247988650188dd6ae64c9dc83ac3ea8fa9d69fe0fbde9dd0db69108167f89c76dfa98aa163d05f2d8d823a87f313438364ee38c050fe91750144873425d9f83328bf4395e5f5f77229387d779fb38f8ecf", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 29]
detailed listing:
executing program 0:
socket(0x2a, 0x80000, 0xfffffffd)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019761b5538a6868b07bb9da31631f6e1f6331ec2db23b6c056c62b9fc9f13fb45b09ded4ad3ee82d358891077529106b0b38aa7fd752484c7c46903d7ff7e932ee1f4aeefd8470e6c946990ee8343f0347b3de40620583d4779247ad2d7b278260866acec29d0f486e7f600e21fd04250a1f73ac3801f559ab9fcc704caa07a80a5100aafd437433b4fae716803a6db78b9e1d0b587ca53ca22a50880947c3e89102aa1c6b584f284a154f53f3332d2b5e154969cbe589472f42da3412e9cdd5c51ae096a6ad5ff5774c6276d59c83548b57bb63f88166905e2734992701971e037e0bffb114c62db1a6ebb05f6c455df2ed9bade7a85b0e2efe9cd78d80249ec133247b5fc04c0fe37eac88a1691bf50f2bdbed0c9a93595d104a1fb10390d02af3c9cfb7ff6ae6152cd3547e481651ee55d71fe213bc1c7f99cf65005e01e3518f6d910d1d50c56d8659d6e307625fe16fd34e7b089192611b8cfabb489aea19937440bd3b841cde573f182597c57cd39d38caafe132c8fab3bf4c4ab2d16abba32035f4fb6ea7cd52a411f49ddd9c357c14a613db70178590c403dc43427db435e02f245e04d004ab78969a50f426a63e5ed2098074b47bc26daf2cb0a2bda0670568e7a8104db4b2b5995b39e8e48bbe8fff6ef58bd6add50d747d50c5c456305d9e5565d3a695ad6f3cc6ad2052ead94b17aa4139455f8e18a55c4f9b49132994dda5955b44b31fa5010100003955241cd3885e860568649aa2900d0fba0d6562819630942add10ec6244487ce02f677e7220013af329c91c3cd2269f8e5ed91a55b7d848fd75775d5d7b8aa7969c71b8e76952bee87cd6fdc50bf50193994efebfa22cb22a911d37554f6474fcdbe309f70809644b2086b172e609980e68518cbb34765b1edca26523f7893d48ebed5d902409ddd0cbbb7f6b122a83c1395d1e9eac371b47893092754334a7327b634c58a512c2d254ac100d20aebf67fbe085260cf4e976ba0a45b5b976a9d56d0d7c9cfc4cc54871566891a654c2e867af8072b9235243492d1c794d077be97738c406590c883ec15f4872d12cf5bdf7848c19a1537f16386161130c1ecea6bd5a7f91628417e8efafbe3c3b08a3a997f2a68c7c53bcaab0738fec56086cf9c2c2d62a35ee032c68e18d95e2a8f10bc1934df5a8e9268c5a6b0ecee8e24f37f71ad8aab420b3fc9a4e7a33373cd7b77a1b1d4188d36db3f7a8b2ead1a5885af1aa981ebd87bc835484e7070c4ecf5a1107b75d765120b63a755dd154f9c5b58d0220f2bb93783f6f6b10f73115da02b5714734742c6b3db13a8fcee61abc152255ea185af5d106611ca4d3337fb9c410d3a2647e3cd73fa5f1e5dbbd01e18761ae9fd271bec553315d2b7caab5e550a2c0b28d919a2a627eee6b0ea481c4d96df774834efd65d0f77e0e4b9eac0c4cee22b05ba1a900aee500be5a21f0b956e2106f84fef2036be842e2d6c888e13c55e90a224f02eb1c50d657cf89f0ba5843f32b8e7108114ba91e691ac204dd7a6d40129bee8c1e61cabe46613c7755604787406e4793c271a405ad4713477167dc546a74f3c74948da40e4d577eb5c7cfb90c2d47adef789877f0639f0490a23fc82b8858acaed1e04ebb47b31ea5fbbbd554f343da5b99f295b7797c57ec2e2f16029c080196c929567438c81d9ac77746e59b1863214e714af009ac4e7ae566321158d440d1f62239971f438a77b94a71acaaa6ee388f7c55763cbe4560f4a7ced6ad448cddda2f697812306e7fdd03e0050d7966f6af51efe597d392843fd378b9621bb6a45ee0189f4527f45de88af3a7b566d637b555af50ede09e157b43768377c78e769bd762df89c4c715d4e4ad286076f154b5d73b968fd234bd92108c365e5b1c34b5a79c598b6223dee54b231476ca776cae0c11330178d32354de5d4a1e1c1c7a9fbd30619b966e2ee2ec15ce6ccf80baf39f7997c20de1a95f36fa11c3f283688a8fd166b5c415d33cde5d2acee738ef656ff9181962423f5214e0b4af81d6332130b37295f7a14b5bafcca0adde0331607e10f5a7bc85991279391b0e284f3e60b8fc79ad1404c429f00fc40d214019073e70ba07e4307018d9c5f7840fc8f99c36d2228b8c5aa0b9d4cf9df2567c00d4c0d068eb338e0eab2428634c50402ac1c30adcc4098f53d665321a4f0168c70a60aa55d27d23809ef5b519ff9bac4667eb94ac7e5c1eab56716fe88859344a221463fd1cbe0eb68b963d73aa93b3e3a9a1ba1aaa25131c2000ffd5f17a19978c94bdfc80d7fe72446187c47b4e3169442d9881036632f89dc77628ce815a825b0e07f6e52074789175d54589fd4c432913db6dce142471e4418cc7f36cee327000f4f6805109873d8e79b308d47398231c666312e601fd7a00df76e9b7a92f0c11446f2bd0e79843da98f79928bdfd5d719b87f3ca7eb7b920f663efea42a7bf147c5e5d26624d68cb755662ac07c7d6d8b96008a0c4a6f3f21b981cb9c0120955f9c87d269a3c2bee2ec93b5e6b52ec21ee4baed36888cfdfe75b9603fd453a2735192108de5585e219b38baf819e9c1cb30489028464ca18868aee9fe35ef94407c9a95cf4ecdb10926fc0ddd1b3b6778aa0bb521f03541a7cdab827618e031319cc5b18a4e02000060d5f6860b8e96c8a55d0135c3e55bd2ae9d021e280595ccceda8f7c41b73917f3b8f94c91fd7fa5ee5e78335ffbc07f95d1d1863d81a8bf35522952a09669169fd3ee4b1a409bba774c8b50eaba7b9c4c80e1519294fbf75e1d536b4e748ad2546416114572b1d5455d80f043c66a124a713a5934dba9dd3271e61f951a3deff533370a5463728bc4e5c3edfb18452dd3958e6149247b84f7f341e840175511cea7f55993572027e033abf55ffbffca2de4b01919c939fa47433402ec4289c809539a9356dc34b2cecc5b691e0cebf0d17dbcaede247988650188dd6ae64c9dc83ac3ea8fa9d69fe0fbde9dd0db69108167f89c76dfa98aa163d05f2d8d823a87f313438364ee38c050fe91750144873425d9f83328bf4395e5f5f77229387d779fb38f8ecf", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 29]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 2:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
minimized 30 calls -> 2 calls
minimizing program #1 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 28]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 27]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019761b5538a6868b07bb9da31631f6e1f6331ec2db23b6c056c62b9fc9f13fb45b09ded4ad3ee82d358891077529106b0b38aa7fd752484c7c46903d7ff7e932ee1f4aeefd8470e6c946990ee8343f0347b3de40620583d4779247ad2d7b278260866acec29d0f486e7f600e21fd04250a1f73ac3801f559ab9fcc704caa07a80a5100aafd437433b4fae716803a6db78b9e1d0b587ca53ca22a50880947c3e89102aa1c6b584f284a154f53f3332d2b5e154969cbe589472f42da3412e9cdd5c51ae096a6ad5ff5774c6276d59c83548b57bb63f88166905e2734992701971e037e0bffb114c62db1a6ebb05f6c455df2ed9bade7a85b0e2efe9cd78d80249ec133247b5fc04c0fe37eac88a1691bf50f2bdbed0c9a93595d104a1fb10390d02af3c9cfb7ff6ae6152cd3547e481651ee55d71fe213bc1c7f99cf65005e01e3518f6d910d1d50c56d8659d6e307625fe16fd34e7b089192611b8cfabb489aea19937440bd3b841cde573f182597c57cd39d38caafe132c8fab3bf4c4ab2d16abba32035f4fb6ea7cd52a411f49ddd9c357c14a613db70178590c403dc43427db435e02f245e04d004ab78969a50f426a63e5ed2098074b47bc26daf2cb0a2bda0670568e7a8104db4b2b5995b39e8e48bbe8fff6ef58bd6add50d747d50c5c456305d9e5565d3a695ad6f3cc6ad2052ead94b17aa4139455f8e18a55c4f9b49132994dda5955b44b31fa5010100003955241cd3885e860568649aa2900d0fba0d6562819630942add10ec6244487ce02f677e7220013af329c91c3cd2269f8e5ed91a55b7d848fd75775d5d7b8aa7969c71b8e76952bee87cd6fdc50bf50193994efebfa22cb22a911d37554f6474fcdbe309f70809644b2086b172e609980e68518cbb34765b1edca26523f7893d48ebed5d902409ddd0cbbb7f6b122a83c1395d1e9eac371b47893092754334a7327b634c58a512c2d254ac100d20aebf67fbe085260cf4e976ba0a45b5b976a9d56d0d7c9cfc4cc54871566891a654c2e867af8072b9235243492d1c794d077be97738c406590c883ec15f4872d12cf5bdf7848c19a1537f16386161130c1ecea6bd5a7f91628417e8efafbe3c3b08a3a997f2a68c7c53bcaab0738fec56086cf9c2c2d62a35ee032c68e18d95e2a8f10bc1934df5a8e9268c5a6b0ecee8e24f37f71ad8aab420b3fc9a4e7a33373cd7b77a1b1d4188d36db3f7a8b2ead1a5885af1aa981ebd87bc835484e7070c4ecf5a1107b75d765120b63a755dd154f9c5b58d0220f2bb93783f6f6b10f73115da02b5714734742c6b3db13a8fcee61abc152255ea185af5d106611ca4d3337fb9c410d3a2647e3cd73fa5f1e5dbbd01e18761ae9fd271bec553315d2b7caab5e550a2c0b28d919a2a627eee6b0ea481c4d96df774834efd65d0f77e0e4b9eac0c4cee22b05ba1a900aee500be5a21f0b956e2106f84fef2036be842e2d6c888e13c55e90a224f02eb1c50d657cf89f0ba5843f32b8e7108114ba91e691ac204dd7a6d40129bee8c1e61cabe46613c7755604787406e4793c271a405ad4713477167dc546a74f3c74948da40e4d577eb5c7cfb90c2d47adef789877f0639f0490a23fc82b8858acaed1e04ebb47b31ea5fbbbd554f343da5b99f295b7797c57ec2e2f16029c080196c929567438c81d9ac77746e59b1863214e714af009ac4e7ae566321158d440d1f62239971f438a77b94a71acaaa6ee388f7c55763cbe4560f4a7ced6ad448cddda2f697812306e7fdd03e0050d7966f6af51efe597d392843fd378b9621bb6a45ee0189f4527f45de88af3a7b566d637b555af50ede09e157b43768377c78e769bd762df89c4c715d4e4ad286076f154b5d73b968fd234bd92108c365e5b1c34b5a79c598b6223dee54b231476ca776cae0c11330178d32354de5d4a1e1c1c7a9fbd30619b966e2ee2ec15ce6ccf80baf39f7997c20de1a95f36fa11c3f283688a8fd166b5c415d33cde5d2acee738ef656ff9181962423f5214e0b4af81d6332130b37295f7a14b5bafcca0adde0331607e10f5a7bc85991279391b0e284f3e60b8fc79ad1404c429f00fc40d214019073e70ba07e4307018d9c5f7840fc8f99c36d2228b8c5aa0b9d4cf9df2567c00d4c0d068eb338e0eab2428634c50402ac1c30adcc4098f53d665321a4f0168c70a60aa55d27d23809ef5b519ff9bac4667eb94ac7e5c1eab56716fe88859344a221463fd1cbe0eb68b963d73aa93b3e3a9a1ba1aaa25131c2000ffd5f17a19978c94bdfc80d7fe72446187c47b4e3169442d9881036632f89dc77628ce815a825b0e07f6e52074789175d54589fd4c432913db6dce142471e4418cc7f36cee327000f4f6805109873d8e79b308d47398231c666312e601fd7a00df76e9b7a92f0c11446f2bd0e79843da98f79928bdfd5d719b87f3ca7eb7b920f663efea42a7bf147c5e5d26624d68cb755662ac07c7d6d8b96008a0c4a6f3f21b981cb9c0120955f9c87d269a3c2bee2ec93b5e6b52ec21ee4baed36888cfdfe75b9603fd453a2735192108de5585e219b38baf819e9c1cb30489028464ca18868aee9fe35ef94407c9a95cf4ecdb10926fc0ddd1b3b6778aa0bb521f03541a7cdab827618e031319cc5b18a4e02000060d5f6860b8e96c8a55d0135c3e55bd2ae9d021e280595ccceda8f7c41b73917f3b8f94c91fd7fa5ee5e78335ffbc07f95d1d1863d81a8bf35522952a09669169fd3ee4b1a409bba774c8b50eaba7b9c4c80e1519294fbf75e1d536b4e748ad2546416114572b1d5455d80f043c66a124a713a5934dba9dd3271e61f951a3deff533370a5463728bc4e5c3edfb18452dd3958e6149247b84f7f341e840175511cea7f55993572027e033abf55ffbffca2de4b01919c939fa47433402ec4289c809539a9356dc34b2cecc5b691e0cebf0d17dbcaede247988650188dd6ae64c9dc83ac3ea8fa9d69fe0fbde9dd0db69108167f89c76dfa98aa163d05f2d8d823a87f313438364ee38c050fe91750144873425d9f83328bf4395e5f5f77229387d779fb38f8ecf", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x66, 0x0, 0x0, 0x0, 0xffc, 0x4, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0xa, 0x200000100103})

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 26]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 25]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x8, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 24]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 23]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 23]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 23]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f0000003200)="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", 0x8de)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 22]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 21]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 20]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 19]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 18]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 17]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
unshare$auto(0x800)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 16]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 15]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
ioperm$auto(0xfffffffffffffff8, 0x8000000000005, 0xe)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 14]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
read$auto(r0, 0x0, 0x5)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 13]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 12]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 11]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 10]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 9]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x5, 0x2, 0x7, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x14281, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
socket(0x28, 0x5, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3]
detailed listing:
executing program 32:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
executing program 0:
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
minimized 29 calls -> 3 calls
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: concatenation succeeded
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-mmap$auto-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
simplifying guilty program options
testing program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
extracting C reproducer
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
testing program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
extracting C reproducer
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
reproducing took 3h9m43.323925691s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff888032abd800 by task syz.0.616/6790

CPU: 0 UID: 0 PID: 6790 Comm: syz.0.616 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xd9/0x110 mm/kasan/report.c:634
 force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:398
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7fb298d169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcd882ac98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f7fb2ba5fa0 RCX: 00007f7fb298d169
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f7fb2a0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f7fb2ba5fa0 R14: 00007f7fb2ba5fa0 R15: 0000000000000003
 </TASK>

Allocated by task 5999:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:179
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x735/0x1c40 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5999:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x2c4/0x4d0 mm/slub.c:4757
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3ff/0xb70 fs/file_table.c:464
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2db0 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x24ed/0x26c0 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff888032abd800
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff888032abd800, ffff888032abdc00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32ab8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b041dc0 ffffea00004bce00 0000000000000002
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88801b041dc0 ffffea00004bce00 0000000000000002
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000003 ffffea0000caae01 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5753, tgid 5753 (dhcpcd-run-hook), ts 72661590465, free_ts 72601781760
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4740
 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xc5d/0x1720 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_noprof+0x2ec/0x510 mm/slub.c:4306
 kmalloc_noprof include/linux/slab.h:905 [inline]
 load_elf_phdrs+0x103/0x210 fs/binfmt_elf.c:532
 load_elf_binary+0x153d/0x4fc0 fs/binfmt_elf.c:961
 search_binary_handler fs/exec.c:1775 [inline]
 exec_binprm fs/exec.c:1807 [inline]
 bprm_execve fs/exec.c:1859 [inline]
 bprm_execve+0x8dd/0x16d0 fs/exec.c:1835
 do_execveat_common.isra.0+0x4a2/0x610 fs/exec.c:1966
 do_execve fs/exec.c:2040 [inline]
 __do_sys_execve fs/exec.c:2116 [inline]
 __se_sys_execve fs/exec.c:2111 [inline]
 __x64_sys_execve+0x8c/0xb0 fs/exec.c:2111
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
page last free pid 5750 tgid 5750 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4171
 getname_flags.part.0+0x4c/0x550 fs/namei.c:139
 getname_flags include/linux/audit.h:322 [inline]
 getname+0x8d/0xe0 fs/namei.c:223
 do_sys_openat2+0x104/0x1e0 fs/open.c:1422
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff888032abd700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888032abd780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888032abd800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff888032abd880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888032abd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff888032abd800 by task syz.0.616/6790

CPU: 0 UID: 0 PID: 6790 Comm: syz.0.616 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xd9/0x110 mm/kasan/report.c:634
 force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:398
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7fb298d169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcd882ac98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f7fb2ba5fa0 RCX: 00007f7fb298d169
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f7fb2a0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f7fb2ba5fa0 R14: 00007f7fb2ba5fa0 R15: 0000000000000003
 </TASK>

Allocated by task 5999:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:179
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x735/0x1c40 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5999:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x2c4/0x4d0 mm/slub.c:4757
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3ff/0xb70 fs/file_table.c:464
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2db0 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x24ed/0x26c0 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff888032abd800
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff888032abd800, ffff888032abdc00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32ab8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b041dc0 ffffea00004bce00 0000000000000002
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88801b041dc0 ffffea00004bce00 0000000000000002
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000003 ffffea0000caae01 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5753, tgid 5753 (dhcpcd-run-hook), ts 72661590465, free_ts 72601781760
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4740
 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xc5d/0x1720 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_noprof+0x2ec/0x510 mm/slub.c:4306
 kmalloc_noprof include/linux/slab.h:905 [inline]
 load_elf_phdrs+0x103/0x210 fs/binfmt_elf.c:532
 load_elf_binary+0x153d/0x4fc0 fs/binfmt_elf.c:961
 search_binary_handler fs/exec.c:1775 [inline]
 exec_binprm fs/exec.c:1807 [inline]
 bprm_execve fs/exec.c:1859 [inline]
 bprm_execve+0x8dd/0x16d0 fs/exec.c:1835
 do_execveat_common.isra.0+0x4a2/0x610 fs/exec.c:1966
 do_execve fs/exec.c:2040 [inline]
 __do_sys_execve fs/exec.c:2116 [inline]
 __se_sys_execve fs/exec.c:2111 [inline]
 __x64_sys_execve+0x8c/0xb0 fs/exec.c:2111
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
page last free pid 5750 tgid 5750 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4171
 getname_flags.part.0+0x4c/0x550 fs/namei.c:139
 getname_flags include/linux/audit.h:322 [inline]
 getname+0x8d/0xe0 fs/namei.c:223
 do_sys_openat2+0x104/0x1e0 fs/open.c:1422
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff888032abd700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888032abd780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888032abd800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff888032abd880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888032abd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================