Extracting prog: 1h22m33.765239258s
Minimizing prog: 15m0.764866734s
Simplifying prog options: 4m36.206648244s
Extracting C: 2m18.876248102s
Simplifying C: 0s


extracting reproducer from 45 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-unshare$auto-mmap$auto-prctl$auto-fanotify_init$auto-writev$auto-madvise$auto-mmap$auto-poll$auto-close_range$auto-io_uring_setup$auto-mmap$auto-socket-setsockopt$auto-socket-socketpair$auto-bind$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program did not crash
single: failed to extract reproducer
bisect: bisecting 45 programs with base timeout 30s
testing program (duration=41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30, 30, 33, 30, 20, 20, 11, 26, 30, 26, 15, 11, 11, 28, 26, 30, 13, 30, 30, 30, 30, 40, 30, 30, 26, 30, 40, 2, 20, 28, 30, 27, 26, 13, 30, 30, 5, 29, 13, 21, 30, 3, 30, 30]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mknod$auto(0x0, 0x1081, 0x3)
open(0x0, 0xa240, 0x15e)
socket(0xa, 0x801, 0x84)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
fstatfs$auto(0x3, 0x0)
shutdown$auto(0x200000003, 0x2)
setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x632b491c)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0xa00, 0x100)
sysfs$auto(0x2, 0x1e, 0x0)
executing program 0:
setrlimit$auto(0x2, 0x0)
mlockall$auto(0x7)
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0x10000}, 0x1, 0x0, 0x3, 0x9}, 0x100007}, 0x31cd3c7c, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_clone(0x21242011, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2)
prctl$auto(0x8, 0x8, r3, 0x7, 0x3)
ioctl$auto(0xffffffffffffffff, 0x7, r0)
rt_sigpending$auto(&(0x7f00000000c0), 0x8)
ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x7)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
socket(0x2, 0x3, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x2, 0x73)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sysfs$auto(0x2, 0x3, 0x0)
setsockopt$auto(0x3, 0x1, 0x3f, 0x0, 0x9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
executing program 0:
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x2, 0x14)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) (async)
write$auto(0x3, 0x0, 0x3f00)
r0 = socket(0x10, 0x2, 0x0) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x3f, 0x4909b6f8, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x81}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xe}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @HSR_A_IF1_AGE={0x8, 0x3, 0x2e}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) (async)
socket(0x2, 0x2, 0x88)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', <r2=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) (async)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf250a00000008000200", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000400000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="0800190004000000a659dd94ca2e27c087e2637c93bf3a037ad8861e9a1618dc7958e110e886"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40000080)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
mlock$auto(0x8001, 0xb)
ioperm$auto(0x800, 0x5, 0xd) (async)
ioperm$auto(0x800, 0x5, 0xd)
ioperm$auto(0x5, 0x8000000000000000, 0xea5c)
lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x5, 0x1, 0x3063, 0x3, 0xee00, 0xee00, 0x0, 0x368b, 0x4, 0x8f, 0xb, 0x83, 0x2, 0xffffffffffff7dc1, 0x3, 0x7117c580, 0x734})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x18, 0x5, 0x2) (async)
socket(0x18, 0x5, 0x2)
getpeername$auto(0x3, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(&(0x7f0000000040)={0x80000001, 0x1b15ae02, 0x0, 0xc6, 0x2b4e, 0x3f8a1795, 0x4c2, 0x5, 0xfffffffeffffffff, 0x2000, 0x8}, 0xd7ab)
r1 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
epoll_create$auto(0x4) (async)
epoll_create$auto(0x4)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
r2 = getsockopt$auto(0x100000006, 0x971c, 0x4, 0xfffffffffffffffe, 0x0)
write$auto_proc_setgroups_operations_base(r2, &(0x7f0000000000)="11cc74c8e9a1", 0x6)
mlock$auto(0x7c88, 0x7fff) (async)
mlock$auto(0x7c88, 0x7fff)
executing program 0:
openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000002100)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="840f0000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0xf84}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000)
mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x8000, &(0x7f0000001580))
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x200007, 0x8)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0x1, 0x0)
fanotify_init$auto(0x8c, 0x1)
fanotify_mark$auto(0x400000000000, 0x102, 0x9, 0x0, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
mmap$auto(0x800000000000, 0x12f, 0xdf, 0x9b72, 0x7, 0x1)
socket(0x1e, 0x5, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x1, 0x8000000000008000)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
listen$auto(0x3, 0xfffffffa)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000ac0), 0xffffffffffffffff)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon15\x00', 0x400, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x85, 0x0)
ioctl$auto(0x4000000000000c8, 0x400454e2, 0x3)
openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/block/nullb0/hctx0/cpu0/poll_rq_list\x00', 0x400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd2/mq/0/cpu_list\x00', 0xa0440, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:01.0/driver_override\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f00000003c0)=',l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_A\x87[\xd1{\xe6\x10\x1aX\xe0\xebQL\xe6&[\xa9X6\x86\x9c\a\x00\b\x00\x00\x00\x00\x00\x00\x00%m_\x96A\"\xdd\xe40\xa7\xc3\x00\x00\x00\x00\x00\x00\x00\x00\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\xbeC+$V\x91\xab\xf7\xf57\xe8\a\x15\xcb\x8e\xb1\n\x13HY\xf79b\xc2\x00\x82m\xdcz\x17\xfa\x8d\\\xe8(\x81\x96N\rZ\xf1E\x85\xe3#D\xfd\xa9\n3%p\xdc\xab\n%\x84\x1e\x05\x8cm\xe3\xd6\xa4\xab\x9fr\xc2\xef\xf4\tu\xdd\x16\xc3T\x1a\x11[@a\xa2\x19rO\xeb\xb4d\xc4\f=)\xba\x19\x83\x87+\x00'/206, 0x1000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setpriority$auto(0x2, 0x0, 0x200)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r0)
sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048)
openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000006a80)='/sys/kernel/tracing/timestamp_mode\x00', 0x42, 0x0)
executing program 32:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000ac0), 0xffffffffffffffff)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon15\x00', 0x400, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x85, 0x0)
ioctl$auto(0x4000000000000c8, 0x400454e2, 0x3)
openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/block/nullb0/hctx0/cpu0/poll_rq_list\x00', 0x400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd2/mq/0/cpu_list\x00', 0xa0440, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:01.0/driver_override\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f00000003c0)=',l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_A\x87[\xd1{\xe6\x10\x1aX\xe0\xebQL\xe6&[\xa9X6\x86\x9c\a\x00\b\x00\x00\x00\x00\x00\x00\x00%m_\x96A\"\xdd\xe40\xa7\xc3\x00\x00\x00\x00\x00\x00\x00\x00\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\xbeC+$V\x91\xab\xf7\xf57\xe8\a\x15\xcb\x8e\xb1\n\x13HY\xf79b\xc2\x00\x82m\xdcz\x17\xfa\x8d\\\xe8(\x81\x96N\rZ\xf1E\x85\xe3#D\xfd\xa9\n3%p\xdc\xab\n%\x84\x1e\x05\x8cm\xe3\xd6\xa4\xab\x9fr\xc2\xef\xf4\tu\xdd\x16\xc3T\x1a\x11[@a\xa2\x19rO\xeb\xb4d\xc4\f=)\xba\x19\x83\x87+\x00'/206, 0x1000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setpriority$auto(0x2, 0x0, 0x200)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r0)
sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048)
openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000006a80)='/sys/kernel/tracing/timestamp_mode\x00', 0x42, 0x0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = getpid()
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x800)
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0xe0080, 0x0)
openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_I2C_RDWR(r1, 0x707, 0x0)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f0000000080)="632d1bfe595046ab5c98399adf270600de80fee6009ca2ac32428953fffd000000000000e0ffffff13cc853e96caa75ec5b8c9a340224b1fad0a1afd4c4633217eb6eafea273c04e1ebe0a187d285c3c80ea6f5e", 0x54)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@nested={0x8, 0xb5, 0x0, 0x1, [@nested={0x4, 0x3ffb}]}, @typed={0xc, 0x10f, 0x0, 0x0, @u64=0x6}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000084)
executing program 2:
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x800)
write$auto(0x3, 0x0, 0xfffffdef)
prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
userfaultfd$auto(0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = socket(0xa, 0x801, 0x84)
socket(0xa, 0x3, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=r0, 0x4, @old_prog_fd=r1}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
write$auto(0x3, 0x0, 0x1)
executing program 2:
statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x0, 0x5ae, 0x5, 0x7, 0x4, 0x800, 0x4000010, 0x1, 0x4, 0x7, 0x9, 0x8, 0x9, 0x1ff, 0x7698, 0x5, 0x10000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x10001, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20000000000000, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfbfffffffffffffc, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x4, 0x0, 0x9]}, 0x40000000008, 0x0) (async)
r0 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0x301000, 0x0)
utimes$auto(0x0, &(0x7f0000000040)={0x800, 0x591}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) (async)
madvise$auto(0x0, 0x9, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
select$auto(0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64)
socket(0x1, 0x1, 0x1) (async)
mmap$auto(0x7, 0x8000000000000, 0x3, 0x910, r0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x264a80, 0x0) (async, rerun: 64)
get_robust_list$auto(0x0, 0x0, 0x0) (async, rerun: 64)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r1, 0x10000000084, 0x4, 0x0, 0x4) (async)
capget$auto(0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84) (async)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) (async)
readv$auto(0x0, 0x0, 0x3)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video34\x00', 0x123000, 0x0)
ioctl$auto_v4l2_fops_v4l2_dev(r2, 0x80085617, 0x0) (async)
close_range$auto(r2, r2, 0x30a1)
mmap$auto(0x0, 0x10000e983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
io_uring_setup$auto(0x1, 0x0) (async, rerun: 32)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (rerun: 32)
mincore$auto(0x3, 0x5, &(0x7f0000000000)='+]%\x00') (async, rerun: 32)
socket(0x2, 0xa, 0x80000001) (rerun: 32)
executing program 2:
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/0000:00:02.0/internal_clients\x00', 0x2000, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/1:4/max_ratio_fine\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000004180)=""/104, 0x68)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x18, 0x80000, 0x600)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x3, 0x0)
eventfd$auto(0x3)
r1 = socket(0xa, 0x2, 0x88)
r2 = socket(0x2a, 0x2, 0x1)
connect$auto(r2, &(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80)
connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x55)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=<r3=>0x4, 0x8, @old_map_fd}, 0xa3)
mmap$auto(0x3, 0x40009, 0xdf, 0x9b72, r0, 0xfffffffffffffffd)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x2040, 0x0)
sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800)
r5 = setfsuid$auto(0xee01)
fchown$auto(r4, r5, 0x0)
setpriority$auto(0x3, r5, 0x8)
read$auto(0x3, 0x0, 0x6)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
timer_create$auto(0x3, 0x0, 0x0) (async)
ppoll$auto(&(0x7f0000000040)={r1, 0x7ff}, 0x7, 0x0, 0x0, 0x8)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(0x0, 0x1000)
r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/uid_map\x00', 0x5cebbfbc3e3a7931, 0x0)
pread64$auto(r0, &(0x7f0000000080)='/proc/thread-self/uid_map\x00', 0x2, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x0, 0x1, 0x6}]}, 0xf8}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb781}, @CTRL_ATTR_FAMILY_NAME={0x1e, 0x2, '/proc/thread-self/uid_map\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40000)
executing program 33:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(0x0, 0x1000)
r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/uid_map\x00', 0x5cebbfbc3e3a7931, 0x0)
pread64$auto(r0, &(0x7f0000000080)='/proc/thread-self/uid_map\x00', 0x2, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x0, 0x1, 0x6}]}, 0xf8}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb781}, @CTRL_ATTR_FAMILY_NAME={0x1e, 0x2, '/proc/thread-self/uid_map\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40000)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x3)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x2000008000)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000340)='/dev/usbmon28\x00', 0x101800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
socket(0x29, 0x2, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000040)='+\x00', 0x74d)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0)
mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, &(0x7f00000000c0))
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x2, 0x0)
io_uring_register$auto(0x2, 0x16, 0x0, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/route\x00', 0x40800, 0x0) (async, rerun: 64)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64)
statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r1, 0x5393, r0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x121040, 0x0) (async, rerun: 64)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) (async, rerun: 64)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x81, 0x0)
ioctl$auto(r2, 0x5402, r2) (async, rerun: 32)
r3 = socket(0x10, 0x2, 0x0) (rerun: 32)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='j\x00%'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) (async)
read$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffffff, &(0x7f0000000100)=""/191, 0xbf) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto(0x3, 0x0, 0x400000) (async)
r4 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0)
mmap$auto(0x1, 0x40009, 0xdf, 0xcf2, r4, 0x10000000000000) (async)
mprotect$auto(0xfffffffffffffff9, 0x7fffffffffffffff, 0xfffffffffffffff8)
r5 = socket(0x22, 0x2, 0x24)
getsockopt$auto(r5, 0x3, 0x1, 0x0, &(0x7f00000000c0)=0x1) (async)
write$auto_tracing_mark_raw_fops_trace(r4, 0x0, 0x10)
close_range$auto(0x2, 0x8, 0x0)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x10, 0x2, 0x14)
r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x800, 0x5, 0x4}, 0x6, 0x3)
r5 = getpgrp(0xffffffffffffffff)
getpgrp(0x0)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0x2ec, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0xd1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffff8}, @NL802154_ATTR_PEER={0x2c8, 0x28, 0x0, 0x1, [@nested={0x2c2, 0x2c, 0x0, 0x1, [@nested={0x10b, 0xe3, 0x0, 0x1, [@typed={0x4, 0x9e}, @generic="d621e834e156835620d1fb5a7c72e4ab28397fe0ffdcbff0fa6aaa3b01b71d204a1c0f0bb0a436c46422dee0ba7b91ea9d3863a625bb26f98107d871074b4f2ae86f371091a658272c70dcb0ca63929ca199ecbb87439c00ed65ca8d893f98b0edfffc4b14bac07242b49ba6c89b707c57545cbec18c4cf0d945c601d5fedf3e2d736d16f6297ab0cfded209249826098f063c6de887c552dfe4ff97a5129cc1adc3690cfef97dadb98f423196b0bf6057a2ccbe40", @generic="6afdd070da26a6dcb7841f31376f4156af84905bf0e8705ecfb8138ca3c7a772d36170055f7b73fa61577f76499a11a53c2d", @typed={0x4, 0x100}, @typed={0x8, 0xbe, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x4e}, @nested={0x4, 0xa3}, @nested={0x4, 0xed}, @nested={0x4, 0x80}]}, @generic="a552db701aefd222ef90e8b199d5abc44be518e1aeba8facc5dc357ac861c87c49e14fbcac2aca1ba2df62ccf10bc51c21bad34e667d55022d0ca9aa1bb01b8a0010a81e2daca003cb368fc577f67fb9ecac68e9e39004f9782674371a55d55450", @typed={0x14, 0x49, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0xe3, 0x0, 0x0, @fd=r4}, @generic="c017d944903d756c3051ac6b5676e3fb4cad6bb21cfbef709f4f691606e4292704b5a6a5cb43728e8fc21d8260ca46f1ec450710ec9da23be6fddc306929d657fdf44b4cd3a87e4908612cc0519cb76a76bf1f36e728d1bb27c03e188638aa1ce7ff428c7cacf5495c4c2b24280876e2bb59e0bb5597f9572cd342166de76d7df93a3135aa2d7821228e24d7c5b1d1e67a2c2e1a6cb6133b2b2d7458ee15b55bc83d", @generic="4bfaf8ade1e83bedfb71d7a1b0fbe186dcb22e20f8e7edca440c50416b41848218819034f8f02eb3a6c7d6089dd7e0191c449aadf4969519bf61f3a19972553e703e21", @nested={0x4d, 0x6d, 0x0, 0x1, [@generic="92214bc00d9b50744b077f251ae1f7d0dba7ed4bdc3c87589f98ea928a136f0f7e90c878b6fa5db250e3d372be9101fa8715b2eb2bc3ca4d3625fd32535f5b86a4253f827dd9029704"]}]}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
clone$auto(0xffffffff00000001, 0x12, 0x0, 0x0, 0xfffffffffffffffd)
mlock$auto(0xfbe8, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_MON_GET(r6, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000000100)=ANY=[@ANYBLOB="bff41e0476e5fe6f1baf30ad0ebb1938de54b75eafacf4a5d0c443172c2eb188", @ANYRES16=r7, @ANYBLOB="2f032abd7000ffdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x3, 0x6)
socket(0x10, 0x2, 0xc)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0xe9, &(0x7f0000000040)=@iter_create={r6, 0x8ffa}, 0x1)
executing program 5:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0)
close_range$auto(r0, r0, 0x7)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/interrupts\x00', 0x40440, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000080)=""/121, 0x79)
r3 = socket(0xa, 0x2, 0x0)
sendto$auto(r3, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1b)
read$auto(0x3, 0x0, 0x8080)
executing program 5:
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r0 = socket(0x10, 0x4, 0xfffffffc)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010025bd7040ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffb, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x1d, 0x2, 0x2)
r3 = socket(0x1d, 0x2, 0x2)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x4, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x4fa, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xffffffffffffffff, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x88c0}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r5 = socket(0x1a, 0x4, 0x3a)
setsockopt$auto(r5, 0x29, 0x49, 0x0, 0x1ff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$auto_BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x4008000)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00'})
sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r0, 0xffffffffffffffff, 0x82)
close_range$auto(r3, r2, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fddbdf251f0000000600eb00010000004400c500663ee5062d489d263579fea6682f9525819b1cdb3b829700ce27890fbba7ce4e6604ee712efe0d3854f1a5bc24ac4024e7180aa80ca2a59f0ebdffb86e31707a"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(0xc0, &(0x7f0000000000)={{0x0, 0x22, 0x0, 0xa, 0x0, 0x989, 0x1}, 0x3}, 0x9a6, 0xfffffffe)
io_uring_setup$auto(0x3ff, 0x0)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, r0, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
fanotify_init$auto(0x5, 0x2)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x801, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109140, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0xa)
socket(0x2, 0x5, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x80043, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000011c0), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000012c0)={'veth0_macvtap\x00', <r3=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005439110000007540498bb48cfc89aed7e66c2064bc2c57c7fd5d044e3eb54fadda4dd90e66e5384bcaf317ebd758ee60990985f228e6925bdd841b534d2d6f5aad0600000046a28ba99ac541bffd7340053a7d5c05fc68ad6ada29ef0000000075a61ec222e560f4d46cef483ba3c13d87c760fdfbf3992a101f258053c35a57998d875f5d7a0353eeb0617636049f4f8717da2ef0d9dd7177", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250d00000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
socket(0x21, 0x2, 0xc798)
mincore$auto(0x1000, 0x8001, 0x0)
r4 = socket(0x2, 0x5, 0x0)
shutdown$auto(0x200000003, 0x2)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x2005, 0x2)
io_uring_setup$auto(0x877, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
io_uring_setup$auto(0x877, 0x0)
executing program 34:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, r0, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
fanotify_init$auto(0x5, 0x2)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x801, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109140, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0xa)
socket(0x2, 0x5, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x80043, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000011c0), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000012c0)={'veth0_macvtap\x00', <r3=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005439110000007540498bb48cfc89aed7e66c2064bc2c57c7fd5d044e3eb54fadda4dd90e66e5384bcaf317ebd758ee60990985f228e6925bdd841b534d2d6f5aad0600000046a28ba99ac541bffd7340053a7d5c05fc68ad6ada29ef0000000075a61ec222e560f4d46cef483ba3c13d87c760fdfbf3992a101f258053c35a57998d875f5d7a0353eeb0617636049f4f8717da2ef0d9dd7177", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250d00000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
socket(0x21, 0x2, 0xc798)
mincore$auto(0x1000, 0x8001, 0x0)
r4 = socket(0x2, 0x5, 0x0)
shutdown$auto(0x200000003, 0x2)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x2005, 0x2)
io_uring_setup$auto(0x877, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
io_uring_setup$auto(0x877, 0x0)
executing program 6:
r0 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffff7fffff0005, 0x8)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x204041, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r2 = socket(0x15, 0x5, 0x0)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x824402, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x4)
bind$auto(0x3, &(0x7f0000000040)=@rc={0x1f, @none, 0xfc}, 0x6a)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
r3 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r3, 0x114, 0x271c, 0xfffffffffffffffc, 0x0)
close_range$auto(0xffffffffffffffff, r0, 0x0)
socket(0x2, 0x3, 0x100)
r4 = socket(0x10, 0x2, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/security/tomoyo/profile\x00', 0x121c40, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
executing program 6:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x200000000000000)
r1 = socketpair$auto(0x6, 0x400, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x23, 0x5, 0x0) (async)
r2 = socket(0x23, 0x5, 0x0)
listen$auto(r1, 0x5ec)
connect$auto(r2, &(0x7f00000018c0)=@phonet={0x23, 0x65, 0xd3, 0x5}, 0x55)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x2000, 0x0) (async)
r3 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x2000, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x2, 0xfffff87b}, 0x8000, 0x0, 0x6) (async)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x2, 0xfffff87b}, 0x8000, 0x0, 0x6)
r4 = gettid()
rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8) (async)
rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8)
tkill$auto(r4, 0x7)
read$auto_tracing_pipe_fops_trace(r3, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x341200, 0xb2) (async)
open(&(0x7f0000000040)='./file0\x00', 0x341200, 0xb2)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x22001, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x121100, 0x0)
mmap$auto(0x634, 0x400005, 0xdc, 0x19b71, 0x5, 0x5)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004010}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004010}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_DEL_TX_TS(r5, 0x0, 0x4004010) (async)
sendmsg$auto_NL80211_CMD_DEL_TX_TS(r5, 0x0, 0x4004010)
executing program 6:
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x402001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000007180)='/sys/devices/virtual/block/zram0/debug_stat\x00', 0x80, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000071c0)=""/118, 0x76)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x5, 0x804, 0x2000074)
socket(0x2, 0x1, 0x84)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/uts\x00')
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
sigaltstack$auto(&(0x7f00000000c0)={&(0x7f0000000140)="2497ca05323e86d13fa64f2c108e58f586eff75c1fc250a9f39aa2ebe2511a9b221329ec055f7904c09970fdaf3b053f6acd93370a54462540b9e8a914b84f12456973646956675a8d770187eacb82174c8e206dcd8e1e5efd6ed3f10a930138e2d13534ceb7c852c44136825825359118e8e0f8bc46fe66fb1c666a1c8f3c2281d8aadcc9e588151740e4066cb3", 0x3, 0x7}, &(0x7f0000000240)={&(0x7f0000000340)="9047967eb6717e57206f99d38f96d333f9f26ba4e526f16a965a1ce74b215d6e4227de42450ec7bc7a9797b7e529dd96e46232fa6bcb89378cdf114ddc39867a587f68cc5941aeb27a7b090a39fdd4ddf73e660e102e3d21adfae0c70f2e1750e7a4d4bbc4a11e437c2048c28a25e6ce65e27a82ff0f4367d4d0c096a9aa487b2f39fd5a95e741e60c7c4f8247027d24f31d5151d4ff8ab57bc4afedec390fc1e2a24fe6276df2075523c85ebc45e822d0d3e2ee760953a2984a47c0de", 0x1000, 0xb})
ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0)
r4 = socket(0x23, 0x80805, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/topology/core_cpus\x00', 0x80000, 0x0)
read$auto(r5, 0x0, 0x20)
poll$auto(&(0x7f0000000000)={<r6=>r4, 0x1, 0x8}, 0x5, 0x400)
setsockopt$auto(r6, 0x113, 0x4, 0x0, 0x1)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sg0\x00', 0x181080, 0x0)
mincore$auto(0x0, 0x10000, 0x0)
write$auto(0x3, 0x0, 0xffd8)
executing program 6:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x82000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x80, 0x0)
r2 = io_uring_setup$auto(0x1, 0x0)
io_uring_enter$auto(r2, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff)
fcntl$getown(r0, 0x9)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0)
mbind$auto(0x4, 0x5, 0x1, 0x0, 0x4, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/pfkey\x00', 0x40, 0x0)
pread64$auto(r3, 0x0, 0x200000000003, 0x2f4a3a23)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
setsockopt$auto(0x3, 0x1, 0x4, 0x0, 0x3)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{@raw=0x8001, 0x9, 0x6, 0x7d2, "368ddd0f663567272af0d1992aa6abe572c1888ad14f15d1e21f8c9834b02816719d6dbfd1fc239426bdde4b", @raw=0x8}, 0x5, 0x9, 0x7141, @raw=0x6, @integer64={0x3, 0x6, 0x7fffffff}, "617b0d8a56e979bd47a2d75daab659a6f85bccdaa12c05c9f8a2499c700bd2bad917de6e95b3b821369589c1a74bfedb3686eb0035c4638311d8a8b3415367bd"})
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
r4 = socket(0x1d, 0x2, 0x7)
connect$auto(r4, &(0x7f00000000c0)=@phonet={0x23, 0xa, 0x4, 0xe3}, 0x8)
write$auto(0x3, 0x0, 0x100082)
open(0x0, 0x40000, 0x0)
select$auto(0xd, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x1, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0x6, 0x4000000000000002, 0xd, 0x3, 0x58d, 0x7, 0x1000000006]}, 0x0, 0x0)
r5 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x103000, 0x0)
statmount$auto(&(0x7f0000000080)={0x7, @inferred=r5, 0x7, 0xa, 0xa806}, &(0x7f00000002c0)={0x7, 0x7f, 0xb, 0x80, 0x9, 0x3, 0xff43, 0x101, 0x2, 0x9, 0x5, 0x9, 0x80, 0x3ff, 0x5, 0x9, 0x7, 0xfffffff8, 0xfffeffff, 0x2, 0xfc, 0x5, 0x8, 0x3, 0x8aa0, 0x2, [0x2, 0x7, 0x9, 0xe, 0x6, 0x3, 0x200, 0x7, 0xe4f, 0x1, 0xcf3, 0x7, 0x1, 0xfffffffffffff7f6, 0x3, 0xfffffffffffffff7, 0x6, 0x1, 0x101, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x7546, 0x9, 0x6, 0x0, 0x6, 0x4, 0x200, 0x200000, 0x10001, 0x1, 0x330, 0x4, 0x932b, 0x8, 0x0, 0x2, 0x9, 0x1, 0x100000001, 0x5, 0x10000, 0xe82, 0x6], "c29280121a92356de6ed965cf0ed56414ff4a9fac6c57fa712313b5d0f7ad5eef14cb7f343ed5693327ee54ff89630037be04061b0895da5d0e3c74f36c0fc8f1741a96e193134a080f7b2145f68dc428fa812c4c2bae54d013e2e8914c54a6c93247784131a801d150702323b4d16d618655c8ff8e5bf776761934c196986a1bc2f1219cf07f3807b164e6b41a1241a59c74a48187eb622c005"}, 0x4, 0x8)
executing program 6:
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\x00\x00\x00\xf0I\xba\xc9\xae\x80HcH\x00\xe8VF\x9e', 0x8587)
r2 = io_uring_setup$auto(0x2, 0x0)
ioperm$auto(0x7ff, 0x1, 0x4000005)
mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0)
write$auto(r3, 0x0, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
munlock$auto(0x9, 0x29b9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getresuid$auto(0x0, 0x0, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2)
sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74000000db49655232a974fa3f157d3fe57aee509dbba2c8d3", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf2592000000080001000000000005008a00ff0000000400340104000b0008004d010e0000000c009900020000000000000005001900070000002b006e8070d76926ce4552c1c92326d0f78b95cd49a76564ba112f34ccd35f7cc71b10b07c023f7d2da98b00"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
mincore$auto(0x0, 0x10000, 0x0)
write$auto(0x3, 0x0, 0xffd8)
executing program 6:
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0)
socket(0xa, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x19, 0x0, 0x9)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000001700)=""/4096, 0x1000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x801, 0x84)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
socket(0x1, 0x2, 0x0)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
getrandom$auto(&(0x7f0000000500)='nl80211\x00', 0xf7a5, 0x1)
socketpair$auto(0xffffffff, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3)
open(0x0, 0x14f140, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x15, 0x1ff, 0x47, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x6]}, 0x0, 0x0)
mmap$auto(0xffffffffffffff19, 0xdb7, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
connect$auto(r1, &(0x7f00000004c0)=@llc={0x1a, 0x306, 0xd, 0xcb, 0x4, 0xff, @multicast}, 0xf)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='\'\x00 \x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x20004080)
close_range$auto(0x2, 0x8, 0x0)
memfd_secret$auto(0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f)
r3 = bpf$auto(0x10, &(0x7f00000000c0)=@link_detach={r2}, 0x40)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r3)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2404c084) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2404c084)
socket(0x1e, 0x1, 0x0) (async)
r0 = socket(0x1e, 0x1, 0x0)
getsockname$auto(r0, &(0x7f0000000000)=@qipcrtr={0x2a, 0xfffffffc, 0x7fff}, &(0x7f0000000040)=0x5)
close_range$auto(0x2, 0xa, 0x0)
socket(0x11, 0x2, 0x300) (async)
r1 = socket(0x11, 0x2, 0x300)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8001)
bpf$auto(0x97, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc)
modify_ldt$auto(0x40000001, &(0x7f0000000100)="c5a2044e3826c2a9487cc82c4a9351332f37475e5a63d7c80000", 0x10)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x7, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
unshare$auto(0x20000080)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x840, 0x0) (async)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x840, 0x0)
ioctl$auto(r2, 0xc10c5541, 0xffffffffffffffff) (async)
ioctl$auto(r2, 0xc10c5541, 0xffffffffffffffff)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x880)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
mkdir$auto(0x0, 0xc001)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x3, 0x16, 0x1001, 0xffffffffffffffff, 0xf, 0x9, 0xb, 0x1, 0x7ff, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0x80000001]}, 0x0, 0x0)
executing program 4:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r0, 0x910, 0x5, 0x0, 0x6)
executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open_tree$auto(0x6, 0x0, 0x101) (async)
r1 = open_tree$auto(0x6, 0x0, 0x101)
setfsuid$auto(0xee01) (async)
r2 = setfsuid$auto(0xee01)
fchown$auto(0xffffffffffffffff, r2, 0x0)
lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xb2, 0x100000001, 0x101, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x9, 0x80, 0xbd, 0xc40, 0x4, 0xcd75, 0x8, 0x5723}) (async)
lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xb2, 0x100000001, 0x101, 0x9, 0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x8, 0x9, 0x80, 0xbd, 0xc40, 0x4, 0xcd75, 0x8, 0x5723})
landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x3, 0x2e1b}, 0xf7, 0x0) (async)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x3, 0x2e1b}, 0xf7, 0x0)
lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x8, 0x8, 0x7fff, 0xfda4, r2, r3, 0x0, 0x2, 0x0, 0x400, 0x8, 0x4, 0xfffffffffffffff7, 0x0, 0x4, 0x0, 0x2})
newfstatat$auto(r1, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x60, 0xe, 0x8, 0x81, r2, 0xffffffffffffffff, 0x0, 0x3b, 0x5, 0x4, 0x97, 0xb0c, 0x5, 0x10001, 0x2, 0x5, 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x334, r4, 0x100, 0x2, 0x25dfdbfd, {}, [@HWSIM_ATTR_TX_INFO={0x6, 0x7, [{0x2, 0x6}]}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x2}, @HWSIM_ATTR_FRAME={0x30d, 0x3, "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"}]}, 0x334}, 0x1, 0x0, 0x0, 0x4}, 0x4004004)
r5 = open$auto(&(0x7f00000001c0)='./file0\x00', 0x7, 0x9)
r6 = getpgid$auto(0xffffffffffffffff)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000580)={{@inferred=r6, 0x5, 0x5, 0x0, "e7233f501e533b6c58a1876bcc4edcbb38658d5ad9cac9df193d3c04352f6721c5a0d70770eb784535d71640", @raw=0x8}, 0x0, @integer=@value_ptr=&(0x7f0000000540)=0x1, "a3ef27c7d71136cfceb3c5b2cdef847e5d88beb9bd07517a831c2a9dc3740ccdd47e8f88bd6f0fae60cc6405ad3c0dc38b1cca2f437e85b1c9dbe579ea815f887381c1c259137cbe9850571129233f5201b05efb7680be61ed4ddcd15d9b534e6d2ef6db529215f2edf33c9f6a48412661ec13349a3d1dfc6f95f0c7bcbf0190"})
lgetxattr$auto(0xfffffffffffffffd, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r4, 0x800, 0x70bd3a, 0x25dfdbfe, {}, [@HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c081}, 0x40000) (async)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r4, 0x800, 0x70bd3a, 0x25dfdbfe, {}, [@HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c081}, 0x40000)
executing program 4:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x3)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x2000008000)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000340)='/dev/usbmon28\x00', 0x101800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
socket(0x29, 0x2, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000040)='+\x00', 0x74d)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0)
mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, &(0x7f00000000c0))
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x2, 0x0)
io_uring_register$auto(0x2, 0x16, &(0x7f0000000180), 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
r0 = socket(0x29, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x2000011)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r3=>r2, 0x7, 0x6}, 0x6, 0x100000)
r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2)
r5 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci5/hci5:200/power/control\x00', 0x40200, 0x0)
close_range$auto(r5, r1, 0x4)
writev$auto(r3, &(0x7f0000000140)={&(0x7f00000000c0)="a139ea22766b28f7aeafffb9f9ab3192ffec55d579ea160953dda210a80c3cddc69318512b3eed8499d35bb0f55768900e4f8aad3c2c9e6ce1d6e2dee2565c5f3572a3439eacd4b58fe166b8d3262f8f76534f98a6d74924fe24dc6006f0e17a330e", 0x8}, 0xc76)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032bbd7000fddbdf250a00000008000200", @ANYRES32=0x0, @ANYBLOB="08000100fbffffff08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0800eeea17c0f9000300060185a152fa02000000"], 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4)
sendmmsg$auto(0x3, 0x0, 0x29f, 0x3ec0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32, @ANYBLOB='\b\x00}'], 0x24}}, 0x4000000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x184, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x2}, @NL80211_ATTR_WIPHY_NAME={0x3f, 0x2, '/sys/devices/virtual/bluetooth/hci5/hci5:200/power/control\x00'}, @NL80211_ATTR_MLO_TTLM_DLINK={0x7d, 0x148, "be380ba6e4c8fd33b8e618ceeba104a45228097c3e16e3f4275737b6211ea83d4df01e2f9602223a9ee7fdfbf6d7334feba739fc12d446aa8647a414a887c4cf702915855eb1f2e160bfee8e77bb4af11be3b46444efa78a8cb923c14d71bcc137e88e511deccc97fa8938ceecce52d987f3c5bac597c5b89f"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x1ae}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "24bce48e44cf548d5a1aabf9d2637ad1164705ae9c8b49e4"}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, "6500a748"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x6b, 0x129, "41e832386cef527cdd28bff494ef41f77d5cc38e385362b1854db779f65c1481eb9b10abdebacf9c61697f462e10163312d57e02f5198c4faceb30c74951a64cb20078573e86c0c47f93cef2fd41a702476822fa0ceaba4927792cd8753584acd12f2ae304e00b"}]}, 0x184}, 0x1, 0x0, 0x0, 0x8001}, 0x40000000)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x4, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
read$auto_tracing_buffers_fops_trace(r6, &(0x7f0000000080)=""/123, 0x7b)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="6524c7aac083b05c1173a1174ad8f52418f12c", 0x13)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000480), 0x8440, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mlock$auto(0xfbe8, 0x4)
personality$auto(0xfffffffc)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0xc)
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, r0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x80000000, 0x80000000, 0x120000009b76, 0x7, 0x28001)
mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mprotect$auto(0x10000001ffff000, 0x8000000000000001, 0xb)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0)
read$auto(0x3, 0x0, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$auto_NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x20000080)
close_range$auto(0x2, 0xa, 0x0)
executing program 1:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.rpcsec.context/flush\x00', 0x60400, 0x0) (async)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
socket(0x2, 0x5, 0x0) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
r1 = getpgid(0x0)
pidfd_open$auto(r1, 0x0) (async)
socket(0xa, 0x3, 0x100) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x2a, 0x2, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
eventfd$auto(0x3)
eventfd$auto(0x0)
syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), r2)
pipe$auto(0x0) (async)
socketpair$auto(0x1e, 0x1, 0x4, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
nanosleep$auto(0x0, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
unshare$auto(0x20000080) (async)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0) (async)
r0 = io_uring_setup$auto(0x877, 0x0)
io_uring_enter$auto(r0, 0xcd00, 0xcd00, 0x7, 0x0, 0x8000000000000000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r1, 0x114, 0x1d, 0x0, 0x4)
executing program 3:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0)
mremap$auto(0x1, 0x101, 0x3fd6, 0x100, 0xd5f4)
r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x142, 0x0)
write$auto_random_fops_random(r1, &(0x7f0000000240)="3ced35a03ce59df9ec0df90827e77cc34afa0cc529932446ba93682709d8d931636ea09d50209b4c7e9d814e8c5bfeb63ae52886d4f014c99b84bd7e7a3c57c3442c3bc5a10674fc05a8b516b91880aa957ada7806f4827465f52cfb20ffeb157f3174c1a1cc1cb13916f8075e3e26df8db80a88619df4d7889f2918dd82c30d9ac1ba3d03127e28f31d896e18363803fedaa3e442283acb142028525c8665f2b8c2a26a017ada7490", 0xa9)
madvise$auto(0x0, 0x200, 0x15)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0)
select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40040)
getdents64$auto(0xffffffffffffffff, &(0x7f0000000900)={0x8, 0x6, 0x6, 0x2, "55f699a1ed1dfd84816e46d5a3142db6e186b2300308e64494f33ceb2785a2f01116a0cfb9b26afa5137fb7b9c3e18c023"}, 0x15fb)
sendmsg$auto_NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4440010}, 0xc, &(0x7f0000000b00)={&(0x7f0000000540)={0xb0, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_6GHZ_CAPABILITY={0x65, 0x125, "ccc2a42ec9349fde767bb4a3b0ba34cb78ea4d5c5df3817f700a447abf2476f6b0832cc3f3b4fa387099f497d6e7fa0b2d879f69fed120fcad29cc2889f88e982c80bb58934be9a780f28352b7904e619c1eda9a1b8eb22ae21ddf313314d4f19d"}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "1f85"}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x800}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x69, 0x0, 0x0, @pid}, @typed={0x8, 0x12c, 0x0, 0x0, @uid}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040001}, 0x30000045)
r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$auto_IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008800)
sendmsg$auto_IEEE802154_SCAN_REQ(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_ED_LIST={0x1f, 0x16, "4ca77dde9374b318db9802adaccfba287e5c55bcfc2b04e6d51bba"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x9}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0x7}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40805)
fcntl$auto(0x8000000000000001, 0x26, 0x8)
fcntl$auto(r3, 0x2007, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2540, 0x0)
move_pages$auto(0x0, 0x4000000000000009, 0x0, 0x0, 0x0, 0x1)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}})
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x701000, 0x0)
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/resource1\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/33, 0x21)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=<r1=>0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff7c, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0xae31e9c9e702e50}, 0x40001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video43\x00', 0x181782, 0x0)
setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6})
eventfd$auto(0x6)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x4e20}, 0x55)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy9/netdev:wlan1/stations/08:02:11:00:00:00/airtime\x00', 0x408000, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
io_uring_setup$auto(0x6, 0x0)
semctl$auto(0x80001ff, 0x804, 0x3, 0x5)
setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x10001)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000)
mremap$auto(0x0, 0x7, 0x10000000003fd6, 0x3, 0x20000000)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x0)
executing program 1:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0xeccdb0b86aeeec73, 0x0)
memfd_create$auto(0x0, 0x16)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
move_mount$auto(r0, 0x0, 0x4, 0x0, 0x176)
executing program 1:
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='jfs\x00', 0x8000009, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000003c9c3bef3be1f01650346b2d51c115b1868437ab82da54b9cfa8f4df20efeb0ecad3bc19f827dcb81551a066475c4beb92b6e31bb0", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf251400000005000b00060000000c00018008000100", @ANYRES32=r2, @ANYBLOB="080010000400000008000a0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4089c}, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r4, &(0x7f0000000400)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000440)="366a03abaf85df411c06ed39162566c88e191591c7da43937f28b88d9811a857e4614e3eda1e8d88bc151732e6dfcd2d350238b90c594c453eb47e529b69a1c52f819fb5eb06c2fdaadf7982793a432402da9eaf19170fa077891fc9445063a6ddefaf14d2e5fa4b7b97632933cd6c3c20d279f7c7e7a7efcc2c84489d9a1ae77900c161e80cb85c441e79e83e1865912e864064f64d5db896f8f1c499c10d4d0f2afd51a432519e74620f2589730edb38594da1fb8c96e065112a6bd7bbc00b3da46e1342586ceba3a41bcf052cbd42410fd191c922fad0df4ab48426415af20e9778bb835ffe1c78e3ea6fd008a6eca586076b7c1147284a6c700a1e99ec858948b843510baea5a2b84f8069d538842f9cf0e3d88a879e11917d497a148a547015", 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x163c}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = wait4$auto(0x0, &(0x7f0000000000)=0xf, 0x53e00000, &(0x7f0000000040)={{0x5, 0x9}, {0x6, 0x3fe000000000}, 0x6, 0xfffffffffffffffb, 0x1, 0x1, 0x0, 0x3, 0x2, 0xfffffffffffffffd, 0xe0, 0xb, 0x9, 0xf1, 0xe032, 0x5})
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x2, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
prctl$auto(0x59616d61, 0xdaffffffffffffff, r5, 0xfffffffffffff7ff, 0x8)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
executing program 3:
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x400, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
ioctl$auto(0x3, 0x5412, 0x38)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r0, 0xfffffffffffff000, 0x2)
socket(0x15, 0x5, 0x0)
select$auto(0x6, 0x0, &(0x7f00000000c0)={[0xbb0, 0x8101, 0x80, 0x1, 0xb, 0x4db11da, 0x3, 0x7f, 0x2, 0x0, 0x32, 0x1, 0x10000, 0x7, 0x6, 0xb83]}, 0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
executing program 1:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub2/xrun_injection\x00', 0x4a040, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = open(0x0, 0x22240, 0x155)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)
bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x55)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x100000, &(0x7f0000001d80)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x0, 0x3, 0x1)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
timer_create$auto(0xfffffff8, 0x0, 0x0)
timer_gettime$auto(0x0, 0x0)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto_safesetid_gid_file_fops_securityfs(r0, &(0x7f0000000380)="4a5a2ef40e9ea3aa99b7c2754b1af36515dc8f4ee2f5300330a4bd4e58bbc012d91d19f7e52d52486c5016dd5dd0ac6ba4e32551b0a1fa61fd74d3ec8cd175af91ef70df99e7ca39014d12ffead41c35fe598a5aa3c31600359f56a931261c81ce4902da26c0f9280acd684823ff326e54cba2a0b3c016004ce06b216d424e0187ff7c5cbdb8932aa7d5c7a8124b77b33843a9ffd5b03184c053a184492b65cd5faefd5fc508abde7f2e903fcf1780000f972169eabef9fb3dbe6e99a9e69ff6e1575b7381988f150dcbd0fae582901cd0060c65a258df8d4e70faab33fb86ddf832ec4f03a89cdf9b1a32c325455b555e4f5f5ca9658cd9401a1ea3f9dab8e0b68e67f7b52db44cc4313334b3564c673adc1f9dfd4cb0faacd609bbc15fe6c1c42463e6d6d03891f3e2838b0b9e72719f77ef76f70862296817c097d90d680d74bdab8a130af7eecc2e4bc18df08ca511f93486408e79b1024e835180f1c7330b50c28b4b43419f621eb742ba79b0b06cc36237792e5909612caa41df558b1531186c24397de15f0d61f433e1e5ff2439ea55f5fe6f4b2d678eb2a7928ac8d6c2f654a17cc66601eb861856578948f9874827633407588e351766870a9b455140b0df1c3615dd5a6b210763641913196966b338b48d8150dcbc2428ff5f3890c66b834c44c201324b15f34f085fee9e489787767bf2aa58602a407b6e791160292f48313fb0b39c0c8c78bafe7e1227b41cb91d519fe85891f97646c6004bf5d02490db879fc99b36a0e9f3222f713c14bbd75f6d1c9058549325ee1ed0efb9ab4bc1430db4de943919dedf91abb6c93b6fc62687d91fa0e7ebd2d963e282d6003fee4324e3391368c5c4cf6c7457dd109b9ea4817b4772431f6c10fd7b8c8acd86ba4864cb76c65a770a08118bc030f9566a1dc634dfdfd3e14e810456959114a9c9efdcc8a84c7a7a8d9d7cafc0c7304c51f86592c69ba0412f497d730b16438a234d232e2f635c9d6089873c0a991ce25092dc4d152a3bd74274a6b31a9b18e6c370f148b82826a4643673761270d3706b58fd7647c285ed9a3c7b6e2c4e4d45f74d7f27d12987f16a0f93ef7a20f84a9932f038acf05b7a2621a19d74f47e0f8f3bb6e1b4f62461f45bc8571d1bfcdc8a3334662c180b314c1cefa80c6a6e010adb0709fc2c7286564b3379254e090aa86aa99a8e1eaf57bcd8b9498b6d57a2677c543b25e3d11a1f862fb04abdb31fddec90d5dde5e97281852e53351c0173827574b90d3a54c7ab77ae6fec2c01bdfcb250c6f5dfdd1a0fe3157a9935eda4e17e28bd22ab0e1fa2dc7191fca68a49300a7d567aaa9bfdcc0e8f44e2cc17f3d89c3ca73129ba5883eac32d2378d9a6c19c7b7d38908f07df3fdf13523bb289078a10bead228b2f0a235aa6d753856edbc1df3c751fb6d84bf7c03b4dd5672811e71e637732489e44f1c6c367b49774a82c54d7b60641ed7874abd940bad0d866cf47ce92181262de8b3bb4b6de5a314844c9373191b24889f4bb01e8e4877f29cef63598782dff81557bdd475502f67786ceb1625c57b202c5c544da4e7d513ce71b5c379aab2711ba57cc703f8911c0b81b3c93b6dd4760e6877ba51ae244fb648b5a701486d366a3b5a0904ad7d9d2ef92051161cd7ab5c9489e299777c2010a662f5b2ef8bcfaa08ecc44d4a4b3cb6857485d0997e1f805bff468fde6798d54edb669e27060cc3882e621f367b6975918831975482668816550b7f1fe94ee2568f2439208990ff1caa0434b921ca7cdbeef9d8103dab10f7aef37ecfd4f5db88a8889ef9a4476c8a680027d22b9217779e5ff177378e8c165d2d9ab3ebac2cc5a833a12a4a17700b1b5725d9d216b421d5df8cdef54d7843e554fcec51ea23a8d81605735177efd6acd72bb54f2d826443df71e66c73cfcc3a82b949afa43f7ad9fdbea4dc1c296b44065d29916842c20c74d9215d249b257cbc0ef4f194d7799d033b718d1a3293ea596a1f76c7730cbb7727c46d3ef554cc20bfe4be2b5daf98f3283e824c5e9436dec33a21f2daaa4f54d0a85b494b3ea19399b770c301fa47c2c2f24b66828b509b21b1dc3661d2acb9c5355f1e6fb8cb8022367e92b0c1226bd6e3df39e17f1527cb8aefb463fec5ed121ad177c246c64d530f0739acf8be19baca1a5b723a17695c1362d59da0e043224ed6652050c894c1970fa565e1eab0eb970f763acee884ab351ff573e4a9213ca1a83e0571303f025e6a4ac7c00ca7f84fdfa78312a16a9d53da0e0827602a11630810e3f39b8a3dae466daf789bb6f40bdaab903c02b5cc209432697ce63a61cd7c6366d6ff5fa35ab00e6ccfbb2e05ff5f35d84670daa1a21985e16afcb61e500a2c55e2b26891e21203b6d656430a07bc7286b3293170df5c268838b5ceb8936ebe98b2d1dbc6984df064806dc8ff831976feb7f5a59c3ad38c44b5c38330976859defa35b24945f1828f1779adf2326bb949b9b1c02d9fc3ad9be1224888be8f2bce6b51be9f47baf05ad6e478ccadda7b80bf0b0397ae4bcdbf217e9eb338d9aab771709737b3bc382469177e7a384ba9fd4eb2e7cb4d008546fe1372156dfd878c9fda67a48474025c0308e251c632975abf7564f82428d716a6b9e4c835fae09f2206203a6259a596a0afff13b5aa649b4c03b35c59306dd54dc88d3e3b9a56c1ed59ad69b7dcb10811b09764abe4fc6e723e252985716430329f380d0b3cc789cd9b6dc6f39c3d2eb970f2397fc7f9f302c9de2dd10f9477fab5d829668b8c3eb145e28b20739b916236747394af8819ecb93f0557f090b260f536fa5ca7b4ac6b7404aa9dcfaaf5e1c8ff04bdb1aafdb943afc1b01d749f4a9ea1625f61510e05ea61b4dbcb214d34d44a771afaedb0053a14e8c13a85aaaa2bb52127e715ba2242a4cb18614db806e44180fe9f5c26180c925903fa1e1ac112eca3c956ab52b8ced51e39efc1567969fa65e4a7eef6a1b7a5f28438d7f121e02afd233e04ee110cc873ff6dd5dfc4c074aed2916d1aa68b62439d47e75676f3d24dfa2acab563d0d55a6bfea64fcffea4143da1c525ba71f4d289bd5095b142fd490ce9fa6d9ea1407393c039244cea9777eca2bfea3b2838c1910194649ee392554180abfd8e9cf77c644eaf0d03b1a9e3f4021bb8416702131f62ed08879c9841e008166f093c6c89b5666d507d9f0b3649928ffb1d4625b6c413b115e297d74f0eda178da011d581d3c3c45af58d98a92ec1e81437476b411102435a02f39cede5c9939091d100bd26b1af0608632b483aaee5ddbfd7eedf9e94a6038b9a14d8f9587e566bca55e85a968935947f152f0f7290651488ec74e1e77ba288b1e2b8e510764a585056edad8493bee59abcc8d7aeceb3f9149466bfbd2cf75e6373ad887d48de9b4dc325ffc57c507df56e0a89941809784bac225af145a46342141211c53e54f0121679469c0953ae9394b37ba434a9d303a974ac7ae6efee21a2cd62dd41e1f05b529b1b469835049e07480fa62bf7f141f940bcd213ecc590ffd57e5ad40901eed0c9efd06afec92f014426ec6688ad3e55e20b19969fffa5ac0663111c4d967b0d194301427a96d4d1571708dd2a477e3fb691784bcf00cda6ff24bb00a95a19d28bc4ac93a5807767219d6dd37059c0e668adc774100b4f5d77ffff4b4151b4727caf499a97cc7a9ed29a944627aa1b9c1605df25c3d435d174906080a64f864db8300324a086d328fda3c2c07b846d391828332f4ddaaabbd4bfed58e1069defacd80d7523eb9fe4724ce4a350eb3da6d7201dd03d736aa9375134e6d0d85d59e6021c57bf0e5da7f8b9f0bbe00ca604aab22e8d2b33c990c7e1808255a6ab7798d2724abba062d0855edff7f86d629eefe2f29d1f38d6dbf172ca6b9fc8d6ac554f5311d3eb69b52d8733808e7af6c16a7740762c31b6681e2e114a0539eda1f9b2344dd38a872d98a9230b5775cf4cae2ad765d16e293a12d7b2f65bb74efaa3f540754f80baa1ab01306352106c3cf1fea1a52b4228c95739a3dcecbcb65aabcf1b17e1af0675a71a8ffa5887776b4690606f8d3fa3c9adaca221f6498fad7fe9da2a2b416cdf00468884b7fdaac75eba836d27a413b10ec74763625c851a6fc9c74937b0f5e2f67395cb08b8e56d8e417e00f0ce0078edcacb3b1f2b3125f16da94374bc8899b8b9f19a0b69b4c24bcd7dced060f1068d19303b14305383b22f55dd72c5f0826866b0347b7a4b123755ff69a91f14005902a7ae834630889eb55f531b0496e165858ad3d3db64f8f75684f77515ff8bc6e2c58880a0917017f6709414bfc669e3b262cb2d18d3525e6499242c052d448065fb14fbb2d86a57f4c31c6a6f657139c903aaf7ada08fa776193d4ae070901005e5397540f1262cc269907e5a436cf043902c7a1b129865b555ab07875b0ce8c826dd90d39490ae47d2daf65200fad0b689cc796489363ee825993af8f86bf3bb5721eed1c0369bfb5e28edaf1b455e7c9ab7bd3332edc8274dd754871e7de2f5ced71cbd3b521cd7dc15dd7b5cd3037210f2d53ab7572bc0936d17aa8e0d2a193aa7e981a77d024ee22e45a399eeba5fd9bbcf71797bbbf55e93b81d81c53255bf914b1959f7ea34db13453903965d4db5f889c0ed07a8ac959cc675adde329a7c6bac21354afb13ae43f5d2cdf835c7aea59526b53c323683abd7ee509e5b7444b871d8807c24c0bf54c48ed5b2a3605de3725e51c84d5a91d245314b66e404249373ce4a05df0a97fd28a4959e17538673b47c025b9d6d3885d224c2619b119da56657cd0c4aaa0329259eb4e3b61bc38e43601042bb85adb4492f9c13d293ace583b86f2d3b8f5d7529e5aa937d342ea9425b0eb2353da0897b1668727ef2597764639deeacd34f2f866afcc58862e0176e942871f27d37594571450a8fb5a4073c64d82730f5facebe84899e43a2ade2a59459062785ac19d25964a8b5f1c34c08549bd945734e9654be007848c820c85a2086d8396845cbd145b1e1611878c513cae6ee7551f00a495f0f5688343487c560f3711878e27ea4e6d94b017602b2d5f8ba776b9813f661c870c8f50bb8c022bceab7c2142a5863e89f3eb54b0ee129b2e6e07dacadace6ec12a0fc7ee8087ee8b7415c63f21d1328206c80ecdc071445fc1a521e015d45a88eb623fddcbabe39ba1b60e3ce2f2e52e33549a120cf311bca78378e920823ae90d5ece64e9483244806a354cc98559a75ca99627d93ea33713b849ede1ed3be7358c61f2ec392770bf393f28e56b6d177e58dbf4070eb0324d6c9c5582dbb467c25c109821d7bc5ab170f569f25b7a6f08d599ad48cc465daf50185be99b8fd9eb31540b9707f4b326400835a931d632be36e07af4d85958293a0157e23473e28c553720b5dffcb1212bf18bf17a4d75c397fb2dc2e197cde05cffaa728223ed593aaeb21c2344f64667cca3bcc03e39db31ea49cf3d98cb4d4fc9d377f91677eec7c6b4398b216ba9f9d1349742294ba554b78da9439b433a2650aa7f7ffd11066242f82713dd9822e50d5b9d93b9636da2a68b65e834ea5eedc203882be040586a5a784a32d82e417c2c950d7496f0584da0189b252cd3a17014b41e54cfb388d1e2fd6221ffc8f1e98bd14a043a6201e7a53b4852b5f83569da72bb3e56bb52df1514d83d10b55e05c6789914d576a4eb96def05c5daf2d6a66ccbc91b524a7db1784416e7d3280032a20f29a021701db56ec82de40d29e", 0xffe)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/mtd-0/min_bytes\x00', 0xc0002, 0x0)
read$auto(0x3, 0x0, 0x80)
write$auto(0x3, 0x0, 0xfdef)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x7, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb2, 0xfffffffffffffffc, 0x1, 0x1000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x1000000, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x2]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
executing program 4:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/type\x00', 0x101900, 0x0)
bind$auto(r0, &(0x7f0000000080)=@sco={0x1f, @none}, 0x8)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(r0, 0x0, 0x7fffffffffffffff)
mmap$auto(0x0, 0xa, 0xdb, 0x1c, 0x5, 0x8000)
pidfd_send_signal$auto(0xfffffffffffffff3, 0xe31, 0xfffffffffffffffd, 0x0)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/power/control\x00', 0x80302, 0x0)
sendfile$auto(r2, r2, 0x0, 0x3)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0x2000000000000000, 0xffffffff, 0x2, 0x18000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2b, 0x1, 0x0)
socket(0x29, 0x1, 0x73)
r4 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x0, 0x0)
read$auto_tracing_stats_fops_trace(r4, &(0x7f0000000180)=""/166, 0xa6)
bind$auto(0x3, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0xd434193a0c40f2f}, 0x6a)
connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x55)
socket(0x11, 0x3, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
mincore$auto(0x1000, 0x8001, 0x0)
io_uring_setup$auto(0x2, 0x0)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x82000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x80, 0x0)
r2 = io_uring_setup$auto(0x1, 0x0)
io_uring_enter$auto(r2, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff)
fcntl$getown(r0, 0x9)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0)
mbind$auto(0x4, 0x5, 0x1, 0x0, 0x4, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/pfkey\x00', 0x40, 0x0)
pread64$auto(r3, 0x0, 0x200000000003, 0x2f4a3a23)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
setsockopt$auto(0x3, 0x1, 0x4, 0x0, 0x3)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{@raw=0x8001, 0x9, 0x6, 0x7d2, "368ddd0f663567272af0d1992aa6abe572c1888ad14f15d1e21f8c9834b02816719d6dbfd1fc239426bdde4b", @raw=0x8}, 0x5, 0x9, 0x7141, @raw=0x6, @integer64={0x3, 0x6, 0x7fffffff}, "617b0d8a56e979bd47a2d75daab659a6f85bccdaa12c05c9f8a2499c700bd2bad917de6e95b3b821369589c1a74bfedb3686eb0035c4638311d8a8b3415367bd"})
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
r4 = socket(0x1d, 0x2, 0x7)
connect$auto(r4, &(0x7f00000000c0)=@phonet={0x23, 0xa, 0x4, 0xe3}, 0x8)
write$auto(0x3, 0x0, 0x100082)
open(0x0, 0x40000, 0x0)
select$auto(0xd, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x1, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0x6, 0x4000000000000002, 0xd, 0x3, 0x58d, 0x7, 0x1000000006]}, 0x0, 0x0)
r5 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x103000, 0x0)
statmount$auto(&(0x7f0000000080)={0x7, @inferred=r5, 0x7, 0x1, 0xa806}, &(0x7f00000002c0)={0x7, 0x7f, 0xb, 0x80, 0x9, 0x3, 0xff43, 0x101, 0x2, 0x9, 0x5, 0x9, 0x80, 0x3e, 0x5, 0x9, 0x6, 0xfffffff8, 0xc, 0x2, 0x100, 0x5, 0x8, 0x3, 0x8aa0, 0x2, [0x2, 0x7, 0x9, 0xe, 0x6, 0x3, 0x200, 0x7, 0xe4f, 0x1, 0xcf3, 0x7, 0x1, 0xfffffffffffffff6, 0x3, 0xfffffffffffffff7, 0x6, 0x1, 0x101, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x7546, 0x9, 0x6, 0x0, 0x6, 0x4, 0x200, 0x200000, 0x10001, 0x1, 0x330, 0x4, 0x932b, 0x8, 0x0, 0x2, 0x9, 0x1, 0x100000001, 0x5, 0x10000, 0xe82, 0x6], "c29280121a92356de6ed965cf0ed56414ff4a9fac6c57fa712313b5d0f7ad5eef14cb7f343ed5693327ee54ff89630037be04061b0895da5d0e3c74f36c0fc8f1741a96e193134a080f7b2145f68dc428fa812c4c2bae54d013e2e8914c54a6c93247784131a801d150702323b4d16d618655c8ff8e5bf776761934c196986a1bc2f1219cf07f3807b164e6b41a1241a59c74a48187eb622c005"}, 0x4, 0x8)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-unshare$auto-mmap$auto-prctl$auto-fanotify_init$auto-writev$auto-madvise$auto-mmap$auto-poll$auto-close_range$auto-io_uring_setup$auto-mmap$auto-socket-setsockopt$auto-socket-socketpair$auto-bind$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program did not crash
single: failed to extract reproducer
bisect: bisecting 45 programs with base timeout 1m40s
testing program (duration=1m51s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30, 30, 33, 30, 20, 20, 11, 26, 30, 26, 15, 11, 11, 28, 26, 30, 13, 30, 30, 30, 30, 40, 30, 30, 26, 30, 40, 2, 20, 28, 30, 27, 26, 13, 30, 30, 5, 29, 13, 21, 30, 3, 30, 30]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mknod$auto(0x0, 0x1081, 0x3)
open(0x0, 0xa240, 0x15e)
socket(0xa, 0x801, 0x84)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
fstatfs$auto(0x3, 0x0)
shutdown$auto(0x200000003, 0x2)
setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x632b491c)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0xa00, 0x100)
sysfs$auto(0x2, 0x1e, 0x0)
executing program 0:
setrlimit$auto(0x2, 0x0)
mlockall$auto(0x7)
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0x10000}, 0x1, 0x0, 0x3, 0x9}, 0x100007}, 0x31cd3c7c, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_clone(0x21242011, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2)
prctl$auto(0x8, 0x8, r3, 0x7, 0x3)
ioctl$auto(0xffffffffffffffff, 0x7, r0)
rt_sigpending$auto(&(0x7f00000000c0), 0x8)
ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x7)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
socket(0x2, 0x3, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x2, 0x73)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sysfs$auto(0x2, 0x3, 0x0)
setsockopt$auto(0x3, 0x1, 0x3f, 0x0, 0x9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
executing program 0:
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x2, 0x14)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) (async)
write$auto(0x3, 0x0, 0x3f00)
r0 = socket(0x10, 0x2, 0x0) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x3f, 0x4909b6f8, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x81}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xe}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @HSR_A_IF1_AGE={0x8, 0x3, 0x2e}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) (async)
socket(0x2, 0x2, 0x88)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', <r2=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) (async)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf250a00000008000200", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000400000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="0800190004000000a659dd94ca2e27c087e2637c93bf3a037ad8861e9a1618dc7958e110e886"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40000080)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
mlock$auto(0x8001, 0xb)
ioperm$auto(0x800, 0x5, 0xd) (async)
ioperm$auto(0x800, 0x5, 0xd)
ioperm$auto(0x5, 0x8000000000000000, 0xea5c)
lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x5, 0x1, 0x3063, 0x3, 0xee00, 0xee00, 0x0, 0x368b, 0x4, 0x8f, 0xb, 0x83, 0x2, 0xffffffffffff7dc1, 0x3, 0x7117c580, 0x734})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x18, 0x5, 0x2) (async)
socket(0x18, 0x5, 0x2)
getpeername$auto(0x3, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(&(0x7f0000000040)={0x80000001, 0x1b15ae02, 0x0, 0xc6, 0x2b4e, 0x3f8a1795, 0x4c2, 0x5, 0xfffffffeffffffff, 0x2000, 0x8}, 0xd7ab)
r1 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
epoll_create$auto(0x4) (async)
epoll_create$auto(0x4)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
r2 = getsockopt$auto(0x100000006, 0x971c, 0x4, 0xfffffffffffffffe, 0x0)
write$auto_proc_setgroups_operations_base(r2, &(0x7f0000000000)="11cc74c8e9a1", 0x6)
mlock$auto(0x7c88, 0x7fff) (async)
mlock$auto(0x7c88, 0x7fff)
executing program 0:
openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000002100)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="840f0000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="bb14bd00e3f48983e1f63f1cfc9b7e0112c2afa22ab11aa8574e8e31810a133eddd8eeb428cd75cb3c120f77718fa58dab40372cb3749988e6a59a6f8217ae37563468ac64ad4a7576691ce6d5138768ed3bb6042992b4156c2568ec5f2a9b2850f816e01b08de22cde3aa289c7eaa05f3fa6faba112119160f5a19548fe08681470e11d3cdf63793826544e6654a53cacaecfe59cfe81eaaae8f85b63dcad53fd94cfdca2eaadec8e5eda0020436de288f74d70b56027e79a9cc617b376ad85ad1470d6acdc80671a4924d5e2344f3387eac815e0edb13bc67241fbcdf4617092fac0c2eeb3a24dec8c7c5108e5efd75cf77c404e74c37ad174229f4e22587fb8512467c7c478572fe50cc134c94ad1c590befbdb9ae03d78790fb078b0f3b802d11fc012ff7a5c35a3f3f0e6c4163e77cb7e408dd5fed9f14d1a0b32f35c37ea8fa0be5d2b96acd8f8b1adbe241a362f60ca6c1d87179cfda84b0206599205287e40f2e88b280805999864463654c5f06a8baa4f0394a60009cde24572a71a76b3f885d9f0507ccbddced338c781bda310c06cef9fb5ddbabfb5ca26259fd1977a804b5654e12d7d5f96c47c648e0d5f1aaa703868100a2ce14f1ed188b1174537e8e8949c668b2c5df33791a21fd05b4e9a3034e4142e0542b9b41c08d2b89b6dd176d9848f32d8f9723c2a49820803d549a0f591d9117fa6591a71930538f1e461c4053fbbd931004e274f8216df24d1032dd21830d189093a6e5f5d5a6306b64c0946c5a9353e4a41ca2294ff44228e79fcdab3d796a34b215751a7bd992b7ca5957cee47935e7b0632d966326bd7bac9f03ba8b91252dae3f3737469d64aec60ae61a60af8923dc5479e855ba5c7d8206aa403347f5794cb1a6f5a74319dde1fb477c5cfd1b910803f72ea00535baedfabfa72783622664d50eae6ffd8f10cbc251a39152c47d7a68bdeae8d8d0c4e7faadd0a694d53e64cf6ee188dde0675fac679168adeeed70aeb9c7b8ea512b4e38afba52dc680cef33b36990a34403d6bd60f985d4c555a911f08c1447e676a526d745a6f391bd155d519d79d7f9dd3b1ec8ba27e686f5aa6795dde768e2f3f5516242d275576f718029efc07c4f494a7af09527f4b1baedf1da3af90e14ececb2cf6f7016fa880460fbf8305913ee35068b07c01c3221f9c293c417e1990a8bcf30940681808801b545431e6ebbcfc2290b4b3ffe8f85f9c17bcbe452e6609e83c4841e48372a2ee3ef7913e5e77e79932691e5f69234b84b1de8699ecfc1c1eac89759ec01ed31bb232ce21ebe2fc6c3cd7901f512fd4130c75051d2e38bc78daac31d513d592d9ade571b3b60b4c40683605136fe7eb4a932c42dd7e48921f4ac90dbd8ae7bcba4f5e449604580a3abd7a4b22f9a44fa12b03b756ae4401a95a76c576180c0a25b845a892dcf9e8b6a9c15688ec99b296d13aa7e5fc994743ea559badab49bf7978020ef6bbc61827e9b38ab853b3692fa9a4bdcd63128ec4dc931e80858ed462fb2575682c4f1f44a5b1862ad9691abd7059418c0967888345fa898e81697c390dbd427a70fef16cc133c519991957a86ad76b100abdbf29f4a9e58589f232cdfc7417224be4b3122e02f27623cdb36c10d3f6d660ecf0e373e640b503b545a3d6599b1fc568a1b19a9ad109fd3c2406f419653af8a6abeca7e490a2722c12c78781dfdb681b996ada80b72a68509ada773241167b8e2bb7e56b6a856b03b205baeda1747a5d6846971098df779a67fb2c395f97f1b337b63430f382445ff1a08c12039048ba0126c3948bf1bdefb2960366d3359f2b799293b42ba4dbd3e5a984eac785eb72940dbd01df7a9b8353ab16f490b30870a9a2228ee0513822a7a56543aef20da07d65d474f16ad5e01ff46bbd6af4cf97a28cb90020c046abbfefd648f6c029dc19740fe878f2fddb10f596ec33d0aaaf530891ef5a1a909131594667df2f049f656f33462830a038d25071ac05f8701aafdf092603621fa314c22b94d88814433c5893f0e704d722516ee017d7b5af6d2595badb02e9117e57795b25ff51f6f4c83ca15be4799bd1c92a8446c60d427103d5b31b653b9c0a3ed9d109709f8d63275e2103cbd4a9b68864e440868d70967b14d00caf59fd4bb6192efb5a4a7aed1f748ec54f45b21873fe15912f31c80533dbd3f56a9ec750c95f7c741a8940ec6ce1c899c79a8cc71e78d6c7c746ce7d92dfd6cabe6a61583da2095a8a950c13ab671d6eb0daf688c3d2a81d9a5d370f4ad8db9aeb0976e005d739144f47eeb74d4b4e0f880d59f84191297e2df35a712003c9ab95243bbd5488f7a5e3ee96c2d73cbb1ca7aecef9c1dafe043442419263410351c7adbe759acd75e6143248905e54919051ddcc3960841c6d20e2f09cc782531d7f686d535b5f2c229148b3a1dae7c87ff49c026926c150c7360a0fb61ebce586e16e6cce9fc69e9b6812f2f58432d7a692890950774facc8dfd18b7e469b4461b8ce89ee595ebd7f5f4bf6124716aea115ac952251aa33943553f025dac7591f67c172c4e0fa7ff56d974d61700e5c8b20d3ef622a4092bd8b95186ca4514d321f329e3ecdd866773c41a336c329ef6faa3505c8546adb69f17c4844cae09710f0f53ae72850e4abade31838360e6d678ca9f82977083d0d4aef726749e1ff79b463e03fa2c67bf1031965ef7edd04a92531a88f686b7c8859eb5f4064facb9c6de0d0759e261eadf642e3bff738b6f4bb9d8ddd69068ae0dbe3caea1d1754b15097888c2937cd122e4abe0911d76acc107c447d49f24c5ff33bf707aa6cd6229a852e34c36d2930f73aa9742651030db682a63e1e1072a494d92da2d48d59da08b12d1d13a3e38551f415c8d7da8c2c6590f1db5d397595340fb91ba702f1b18b272bec9cadd032e52c48b9627b233e9903923bee65404602af0950362429c2c6bcde2e3bfc4a025c19f83fcac5541906c8e926a3b118ed05acd81f4b94359ec8a881bce2826536b46c6a68b858a5e656a30eade63ee113dd75e84c130904d70653f9c189f37c58968bdcde49117ac713402bfeb7788e4337d297f7ce55a8c313868ae53272c5071d65fe0aa781687c76636894484743b80a2d512d97d3d2a1fe327e93b5a31ada27c99a17356b27ddbfa98fc91e52b5fb0588bbde0cda8200f04c3a990641982f4e89fecf4365887ed1697fef0ec1715e7239cd0db629a3cabb74f7410c94f786d6dc6a8bf7661daab7d5ea8ea22f1004674190dc4a2af80b94d3e44d3b895c07dde8b094036f81e64e8e9051aeec75073cf5e36675470104ac05d132018d01a959f5a48d830ecabb4bcf0d557ee7c52ad3e8973fda0f260de790b6438460307839fbbe2035fa354a4a5dcad36715179b89a591442f12780da8c867eea765334fab2ad7595a709524aaf5b524021bb007edaff78030964499fab27ff8d71eefca84db095b20bdc552f9194fde4f0ddbb78365a9c9ea3e925971b04b90e42cf3f09b2366873b043a5e4bf75cf59bf2b064ca9a31e3f935e4db409fe8318f9944b9146b773abc1184a73198dba20483c9f11baeca62c90f01f65ea1df1e162d6e68a055f8c5466c1e5e67495261479774d369a1c787a34c176d413f6113c56f423e4e254aa1b3b5f60987d9512e3f87e94f42d5ef5a00da921c6c7dc253bfd81c6c41e66909b87855b8875244ef42743296828697791bdce8d36d78ed20f8616c161ee8b06f1a663b8c9dd86b137cfaf66587f317662227abc072764a66803748fcc7d15ef4c0535011103b045654e8ac35feb47b0e7d83325be18824f0204d1e0c20e6eec24584af4b61e3d822a9f00bf5765dfa54ef555b8efa7ad53161b5448f23eecd62229025e8fc805d32cec640d066846f7a913fdc41b244b9e6e8174a47efa6787af573fcf81c6c9ea0aa1ddc7c8cab62459064d4982ebb7e0d14c98be7571ab872e4318b7859c735276559e57996f2839099180e1d91e6dc070462719c9c04b9fcf2cb29d717d1097f667b6b47c70904577c36b5e755c1725870d8b737d941a433c089586385eb6cd11430368fa60ff31f335b43112c7f9350833afa0973ed128edf3887a0a858068f4f0966d358afc5fb9a1371d05f8226a69cd801d44e38871ad5a40efa4f02c7f853f63e84f1ab38d43bc158fc17e16d06e45591052aa342fe1c473f7e2beedea2d7e678f2f5b826c9d16c9297db18265d83da6845f0357d304e24a0a6ecc54d3c467850ce35b533fd749a9dcdb0646f05970215ecfb3eddc9ea266386366769bc01981f38f6e727a910390df6aa9b6475be9ae761579506820355b6ceb17d9acd1bf0810f4c00e3a3b1768bfd29a5571953594a809cfc79be94d4775914eedb77fab5c73c36cde7b231d6a66a7700039919ab347fb23e43c06900dee780306476db3ac9d2e6a4a36d42c27fb705650982fe8399d7e59ed5398c51baab5a7fe0dbe7f80d64aa3a74b5daf7a6c9e0096bccff9147b4f9a25179b1911cf9a9b1b0652e852844a93e9388f468c07a77115587d07062806a5bb4f04d917adf4f5bd0af7a16eb148bc21c5ddb051aacf7180ed60443fc97dba52841300df83070462ba3577940f038079b9f58fae5131c362bce748e7418a093a9f351c5acad08b5bac3ed433713a1764c5a4c1d82450f5b578a0a20a5401fe5aa6c2dc0846fda83bd0e66ca8f5ebf52eaf6d85fe4b14887affb836080a4fd1a630533d65f887d87d726df942ab1040b760afe7115299eced4c38f45fcb7e3af47dd262dcfc2d615a0adb7f627c12b1584d4253d980ca3ff3e7840672120ec9e16889fce3ad97e3a8c6fdce3fc2fc9682e6e529b6f4c913786e53d5994a9686336668103cebe9ae989d2476ad90ebdfefacdaf677971bb1c09203ee5bd01854e7253124dcb4666e4e26ab7070008905e7be74c90a2a65ee2ac54ea74205e019e50fb9663a5c204fea85ddf6a175447a0a1c255a2de58b296edc87c584e8f28c022714366f53515e42f7fc4b31366c3d867e5b5a9c2c38f76bb9f197e4962b6e37568a28c9bad33edfe2f7082129af946ae7cd8c058608701e040e9ce0f7f943c82391b7905d07695c3f673d32eb5593017d8a0d0a410ecec8c6f28f58025efe2d4613162f74c91078ad65caf7df39e0a5858173324795e3b8b5f489e577f563298872adb0c4a8a3d0000002a278bde55b8e587bdfc21e0f6039dfcf94e5c278432c4a2d37d76592325d3ef8684e9790f5254d76e8b13d5ccc72fc8e464374efff1df450eb8380f46afd5a7c725ad642f17cbcfb14cc38cad6453b936e9a82dc541b687975b148438002e20b7ecb83ec530268292f1bec967a15ce558563271af02ca75907eb997f0811f9a7718a63c303e2d72320e6dbbb4de3668f0dc"], 0xf84}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000)
mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x8000, &(0x7f0000001580))
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x200007, 0x8)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0x1, 0x0)
fanotify_init$auto(0x8c, 0x1)
fanotify_mark$auto(0x400000000000, 0x102, 0x9, 0x0, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
mmap$auto(0x800000000000, 0x12f, 0xdf, 0x9b72, 0x7, 0x1)
socket(0x1e, 0x5, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x1, 0x8000000000008000)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
listen$auto(0x3, 0xfffffffa)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000ac0), 0xffffffffffffffff)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon15\x00', 0x400, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x85, 0x0)
ioctl$auto(0x4000000000000c8, 0x400454e2, 0x3)
openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/block/nullb0/hctx0/cpu0/poll_rq_list\x00', 0x400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd2/mq/0/cpu_list\x00', 0xa0440, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:01.0/driver_override\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f00000003c0)=',l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_A\x87[\xd1{\xe6\x10\x1aX\xe0\xebQL\xe6&[\xa9X6\x86\x9c\a\x00\b\x00\x00\x00\x00\x00\x00\x00%m_\x96A\"\xdd\xe40\xa7\xc3\x00\x00\x00\x00\x00\x00\x00\x00\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\xbeC+$V\x91\xab\xf7\xf57\xe8\a\x15\xcb\x8e\xb1\n\x13HY\xf79b\xc2\x00\x82m\xdcz\x17\xfa\x8d\\\xe8(\x81\x96N\rZ\xf1E\x85\xe3#D\xfd\xa9\n3%p\xdc\xab\n%\x84\x1e\x05\x8cm\xe3\xd6\xa4\xab\x9fr\xc2\xef\xf4\tu\xdd\x16\xc3T\x1a\x11[@a\xa2\x19rO\xeb\xb4d\xc4\f=)\xba\x19\x83\x87+\x00'/206, 0x1000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setpriority$auto(0x2, 0x0, 0x200)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r0)
sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048)
openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000006a80)='/sys/kernel/tracing/timestamp_mode\x00', 0x42, 0x0)
executing program 32:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000ac0), 0xffffffffffffffff)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon15\x00', 0x400, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x85, 0x0)
ioctl$auto(0x4000000000000c8, 0x400454e2, 0x3)
openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/block/nullb0/hctx0/cpu0/poll_rq_list\x00', 0x400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd2/mq/0/cpu_list\x00', 0xa0440, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:01.0/driver_override\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f00000003c0)=',l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_A\x87[\xd1{\xe6\x10\x1aX\xe0\xebQL\xe6&[\xa9X6\x86\x9c\a\x00\b\x00\x00\x00\x00\x00\x00\x00%m_\x96A\"\xdd\xe40\xa7\xc3\x00\x00\x00\x00\x00\x00\x00\x00\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\xbeC+$V\x91\xab\xf7\xf57\xe8\a\x15\xcb\x8e\xb1\n\x13HY\xf79b\xc2\x00\x82m\xdcz\x17\xfa\x8d\\\xe8(\x81\x96N\rZ\xf1E\x85\xe3#D\xfd\xa9\n3%p\xdc\xab\n%\x84\x1e\x05\x8cm\xe3\xd6\xa4\xab\x9fr\xc2\xef\xf4\tu\xdd\x16\xc3T\x1a\x11[@a\xa2\x19rO\xeb\xb4d\xc4\f=)\xba\x19\x83\x87+\x00'/206, 0x1000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setpriority$auto(0x2, 0x0, 0x200)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r0)
sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048)
openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000006a80)='/sys/kernel/tracing/timestamp_mode\x00', 0x42, 0x0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = getpid()
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x800)
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0xe0080, 0x0)
openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_I2C_RDWR(r1, 0x707, 0x0)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f0000000080)="632d1bfe595046ab5c98399adf270600de80fee6009ca2ac32428953fffd000000000000e0ffffff13cc853e96caa75ec5b8c9a340224b1fad0a1afd4c4633217eb6eafea273c04e1ebe0a187d285c3c80ea6f5e", 0x54)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@nested={0x8, 0xb5, 0x0, 0x1, [@nested={0x4, 0x3ffb}]}, @typed={0xc, 0x10f, 0x0, 0x0, @u64=0x6}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000084)
executing program 2:
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x800)
write$auto(0x3, 0x0, 0xfffffdef)
prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
userfaultfd$auto(0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = socket(0xa, 0x801, 0x84)
socket(0xa, 0x3, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=r0, 0x4, @old_prog_fd=r1}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
write$auto(0x3, 0x0, 0x1)
executing program 2:
statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x0, 0x5ae, 0x5, 0x7, 0x4, 0x800, 0x4000010, 0x1, 0x4, 0x7, 0x9, 0x8, 0x9, 0x1ff, 0x7698, 0x5, 0x10000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x10001, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20000000000000, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfbfffffffffffffc, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x4, 0x0, 0x9]}, 0x40000000008, 0x0) (async)
r0 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0x301000, 0x0)
utimes$auto(0x0, &(0x7f0000000040)={0x800, 0x591}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) (async)
madvise$auto(0x0, 0x9, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
select$auto(0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64)
socket(0x1, 0x1, 0x1) (async)
mmap$auto(0x7, 0x8000000000000, 0x3, 0x910, r0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x264a80, 0x0) (async, rerun: 64)
get_robust_list$auto(0x0, 0x0, 0x0) (async, rerun: 64)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r1, 0x10000000084, 0x4, 0x0, 0x4) (async)
capget$auto(0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84) (async)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) (async)
readv$auto(0x0, 0x0, 0x3)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video34\x00', 0x123000, 0x0)
ioctl$auto_v4l2_fops_v4l2_dev(r2, 0x80085617, 0x0) (async)
close_range$auto(r2, r2, 0x30a1)
mmap$auto(0x0, 0x10000e983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
io_uring_setup$auto(0x1, 0x0) (async, rerun: 32)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (rerun: 32)
mincore$auto(0x3, 0x5, &(0x7f0000000000)='+]%\x00') (async, rerun: 32)
socket(0x2, 0xa, 0x80000001) (rerun: 32)
executing program 2:
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/0000:00:02.0/internal_clients\x00', 0x2000, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/1:4/max_ratio_fine\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000004180)=""/104, 0x68)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x18, 0x80000, 0x600)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x3, 0x0)
eventfd$auto(0x3)
r1 = socket(0xa, 0x2, 0x88)
r2 = socket(0x2a, 0x2, 0x1)
connect$auto(r2, &(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80)
connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x55)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=<r3=>0x4, 0x8, @old_map_fd}, 0xa3)
mmap$auto(0x3, 0x40009, 0xdf, 0x9b72, r0, 0xfffffffffffffffd)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x2040, 0x0)
sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800)
r5 = setfsuid$auto(0xee01)
fchown$auto(r4, r5, 0x0)
setpriority$auto(0x3, r5, 0x8)
read$auto(0x3, 0x0, 0x6)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
timer_create$auto(0x3, 0x0, 0x0) (async)
ppoll$auto(&(0x7f0000000040)={r1, 0x7ff}, 0x7, 0x0, 0x0, 0x8)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(0x0, 0x1000)
r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/uid_map\x00', 0x5cebbfbc3e3a7931, 0x0)
pread64$auto(r0, &(0x7f0000000080)='/proc/thread-self/uid_map\x00', 0x2, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x0, 0x1, 0x6}]}, 0xf8}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb781}, @CTRL_ATTR_FAMILY_NAME={0x1e, 0x2, '/proc/thread-self/uid_map\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40000)
executing program 33:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(0x0, 0x1000)
r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/uid_map\x00', 0x5cebbfbc3e3a7931, 0x0)
pread64$auto(r0, &(0x7f0000000080)='/proc/thread-self/uid_map\x00', 0x2, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x0, 0x1, 0x6}]}, 0xf8}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb781}, @CTRL_ATTR_FAMILY_NAME={0x1e, 0x2, '/proc/thread-self/uid_map\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40000)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x3)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x2000008000)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000340)='/dev/usbmon28\x00', 0x101800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
socket(0x29, 0x2, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000040)='+\x00', 0x74d)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0)
mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, &(0x7f00000000c0))
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x2, 0x0)
io_uring_register$auto(0x2, 0x16, 0x0, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/route\x00', 0x40800, 0x0) (async, rerun: 64)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64)
statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r1, 0x5393, r0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x121040, 0x0) (async, rerun: 64)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) (async, rerun: 64)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x81, 0x0)
ioctl$auto(r2, 0x5402, r2) (async, rerun: 32)
r3 = socket(0x10, 0x2, 0x0) (rerun: 32)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='j\x00%'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) (async)
read$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffffff, &(0x7f0000000100)=""/191, 0xbf) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto(0x3, 0x0, 0x400000) (async)
r4 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0)
mmap$auto(0x1, 0x40009, 0xdf, 0xcf2, r4, 0x10000000000000) (async)
mprotect$auto(0xfffffffffffffff9, 0x7fffffffffffffff, 0xfffffffffffffff8)
r5 = socket(0x22, 0x2, 0x24)
getsockopt$auto(r5, 0x3, 0x1, 0x0, &(0x7f00000000c0)=0x1) (async)
write$auto_tracing_mark_raw_fops_trace(r4, 0x0, 0x10)
close_range$auto(0x2, 0x8, 0x0)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x10, 0x2, 0x14)
r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x800, 0x5, 0x4}, 0x6, 0x3)
r5 = getpgrp(0xffffffffffffffff)
getpgrp(0x0)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0x2ec, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0xd1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffff8}, @NL802154_ATTR_PEER={0x2c8, 0x28, 0x0, 0x1, [@nested={0x2c2, 0x2c, 0x0, 0x1, [@nested={0x10b, 0xe3, 0x0, 0x1, [@typed={0x4, 0x9e}, @generic="d621e834e156835620d1fb5a7c72e4ab28397fe0ffdcbff0fa6aaa3b01b71d204a1c0f0bb0a436c46422dee0ba7b91ea9d3863a625bb26f98107d871074b4f2ae86f371091a658272c70dcb0ca63929ca199ecbb87439c00ed65ca8d893f98b0edfffc4b14bac07242b49ba6c89b707c57545cbec18c4cf0d945c601d5fedf3e2d736d16f6297ab0cfded209249826098f063c6de887c552dfe4ff97a5129cc1adc3690cfef97dadb98f423196b0bf6057a2ccbe40", @generic="6afdd070da26a6dcb7841f31376f4156af84905bf0e8705ecfb8138ca3c7a772d36170055f7b73fa61577f76499a11a53c2d", @typed={0x4, 0x100}, @typed={0x8, 0xbe, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x4e}, @nested={0x4, 0xa3}, @nested={0x4, 0xed}, @nested={0x4, 0x80}]}, @generic="a552db701aefd222ef90e8b199d5abc44be518e1aeba8facc5dc357ac861c87c49e14fbcac2aca1ba2df62ccf10bc51c21bad34e667d55022d0ca9aa1bb01b8a0010a81e2daca003cb368fc577f67fb9ecac68e9e39004f9782674371a55d55450", @typed={0x14, 0x49, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0xe3, 0x0, 0x0, @fd=r4}, @generic="c017d944903d756c3051ac6b5676e3fb4cad6bb21cfbef709f4f691606e4292704b5a6a5cb43728e8fc21d8260ca46f1ec450710ec9da23be6fddc306929d657fdf44b4cd3a87e4908612cc0519cb76a76bf1f36e728d1bb27c03e188638aa1ce7ff428c7cacf5495c4c2b24280876e2bb59e0bb5597f9572cd342166de76d7df93a3135aa2d7821228e24d7c5b1d1e67a2c2e1a6cb6133b2b2d7458ee15b55bc83d", @generic="4bfaf8ade1e83bedfb71d7a1b0fbe186dcb22e20f8e7edca440c50416b41848218819034f8f02eb3a6c7d6089dd7e0191c449aadf4969519bf61f3a19972553e703e21", @nested={0x4d, 0x6d, 0x0, 0x1, [@generic="92214bc00d9b50744b077f251ae1f7d0dba7ed4bdc3c87589f98ea928a136f0f7e90c878b6fa5db250e3d372be9101fa8715b2eb2bc3ca4d3625fd32535f5b86a4253f827dd9029704"]}]}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
clone$auto(0xffffffff00000001, 0x12, 0x0, 0x0, 0xfffffffffffffffd)
mlock$auto(0xfbe8, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_MON_GET(r6, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000000100)=ANY=[@ANYBLOB="bff41e0476e5fe6f1baf30ad0ebb1938de54b75eafacf4a5d0c443172c2eb188", @ANYRES16=r7, @ANYBLOB="2f032abd7000ffdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x3, 0x6)
socket(0x10, 0x2, 0xc)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0xe9, &(0x7f0000000040)=@iter_create={r6, 0x8ffa}, 0x1)
executing program 5:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0)
close_range$auto(r0, r0, 0x7)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/interrupts\x00', 0x40440, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000080)=""/121, 0x79)
r3 = socket(0xa, 0x2, 0x0)
sendto$auto(r3, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1b)
read$auto(0x3, 0x0, 0x8080)
executing program 5:
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r0 = socket(0x10, 0x4, 0xfffffffc)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010025bd7040ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffb, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x1d, 0x2, 0x2)
r3 = socket(0x1d, 0x2, 0x2)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x4, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x4fa, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xffffffffffffffff, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x88c0}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r5 = socket(0x1a, 0x4, 0x3a)
setsockopt$auto(r5, 0x29, 0x49, 0x0, 0x1ff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$auto_BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x4008000)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00'})
sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r0, 0xffffffffffffffff, 0x82)
close_range$auto(r3, r2, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fddbdf251f0000000600eb00010000004400c500663ee5062d489d263579fea6682f9525819b1cdb3b829700ce27890fbba7ce4e6604ee712efe0d3854f1a5bc24ac4024e7180aa80ca2a59f0ebdffb86e31707a"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(0xc0, &(0x7f0000000000)={{0x0, 0x22, 0x0, 0xa, 0x0, 0x989, 0x1}, 0x3}, 0x9a6, 0xfffffffe)
io_uring_setup$auto(0x3ff, 0x0)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, r0, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
fanotify_init$auto(0x5, 0x2)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x801, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109140, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0xa)
socket(0x2, 0x5, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x80043, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000011c0), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000012c0)={'veth0_macvtap\x00', <r3=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005439110000007540498bb48cfc89aed7e66c2064bc2c57c7fd5d044e3eb54fadda4dd90e66e5384bcaf317ebd758ee60990985f228e6925bdd841b534d2d6f5aad0600000046a28ba99ac541bffd7340053a7d5c05fc68ad6ada29ef0000000075a61ec222e560f4d46cef483ba3c13d87c760fdfbf3992a101f258053c35a57998d875f5d7a0353eeb0617636049f4f8717da2ef0d9dd7177", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250d00000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
socket(0x21, 0x2, 0xc798)
mincore$auto(0x1000, 0x8001, 0x0)
r4 = socket(0x2, 0x5, 0x0)
shutdown$auto(0x200000003, 0x2)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x2005, 0x2)
io_uring_setup$auto(0x877, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
io_uring_setup$auto(0x877, 0x0)
executing program 34:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, r0, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
fanotify_init$auto(0x5, 0x2)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x801, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109140, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0xa)
socket(0x2, 0x5, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x80043, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000011c0), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000012c0)={'veth0_macvtap\x00', <r3=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005439110000007540498bb48cfc89aed7e66c2064bc2c57c7fd5d044e3eb54fadda4dd90e66e5384bcaf317ebd758ee60990985f228e6925bdd841b534d2d6f5aad0600000046a28ba99ac541bffd7340053a7d5c05fc68ad6ada29ef0000000075a61ec222e560f4d46cef483ba3c13d87c760fdfbf3992a101f258053c35a57998d875f5d7a0353eeb0617636049f4f8717da2ef0d9dd7177", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250d00000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
socket(0x21, 0x2, 0xc798)
mincore$auto(0x1000, 0x8001, 0x0)
r4 = socket(0x2, 0x5, 0x0)
shutdown$auto(0x200000003, 0x2)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x2005, 0x2)
io_uring_setup$auto(0x877, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
io_uring_setup$auto(0x877, 0x0)
executing program 6:
r0 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffff7fffff0005, 0x8)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x204041, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r2 = socket(0x15, 0x5, 0x0)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x824402, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x4)
bind$auto(0x3, &(0x7f0000000040)=@rc={0x1f, @none, 0xfc}, 0x6a)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
r3 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r3, 0x114, 0x271c, 0xfffffffffffffffc, 0x0)
close_range$auto(0xffffffffffffffff, r0, 0x0)
socket(0x2, 0x3, 0x100)
r4 = socket(0x10, 0x2, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/security/tomoyo/profile\x00', 0x121c40, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
executing program 6:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x200000000000000)
r1 = socketpair$auto(0x6, 0x400, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x23, 0x5, 0x0) (async)
r2 = socket(0x23, 0x5, 0x0)
listen$auto(r1, 0x5ec)
connect$auto(r2, &(0x7f00000018c0)=@phonet={0x23, 0x65, 0xd3, 0x5}, 0x55)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x2000, 0x0) (async)
r3 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x2000, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x2, 0xfffff87b}, 0x8000, 0x0, 0x6) (async)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x2, 0xfffff87b}, 0x8000, 0x0, 0x6)
r4 = gettid()
rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8) (async)
rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8)
tkill$auto(r4, 0x7)
read$auto_tracing_pipe_fops_trace(r3, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x341200, 0xb2) (async)
open(&(0x7f0000000040)='./file0\x00', 0x341200, 0xb2)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x22001, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x121100, 0x0)
mmap$auto(0x634, 0x400005, 0xdc, 0x19b71, 0x5, 0x5)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004010}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004010}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_DEL_TX_TS(r5, 0x0, 0x4004010) (async)
sendmsg$auto_NL80211_CMD_DEL_TX_TS(r5, 0x0, 0x4004010)
executing program 6:
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x402001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000007180)='/sys/devices/virtual/block/zram0/debug_stat\x00', 0x80, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000071c0)=""/118, 0x76)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x5, 0x804, 0x2000074)
socket(0x2, 0x1, 0x84)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/uts\x00')
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
sigaltstack$auto(&(0x7f00000000c0)={&(0x7f0000000140)="2497ca05323e86d13fa64f2c108e58f586eff75c1fc250a9f39aa2ebe2511a9b221329ec055f7904c09970fdaf3b053f6acd93370a54462540b9e8a914b84f12456973646956675a8d770187eacb82174c8e206dcd8e1e5efd6ed3f10a930138e2d13534ceb7c852c44136825825359118e8e0f8bc46fe66fb1c666a1c8f3c2281d8aadcc9e588151740e4066cb3", 0x3, 0x7}, &(0x7f0000000240)={&(0x7f0000000340)="9047967eb6717e57206f99d38f96d333f9f26ba4e526f16a965a1ce74b215d6e4227de42450ec7bc7a9797b7e529dd96e46232fa6bcb89378cdf114ddc39867a587f68cc5941aeb27a7b090a39fdd4ddf73e660e102e3d21adfae0c70f2e1750e7a4d4bbc4a11e437c2048c28a25e6ce65e27a82ff0f4367d4d0c096a9aa487b2f39fd5a95e741e60c7c4f8247027d24f31d5151d4ff8ab57bc4afedec390fc1e2a24fe6276df2075523c85ebc45e822d0d3e2ee760953a2984a47c0de", 0x1000, 0xb})
ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0)
r4 = socket(0x23, 0x80805, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/topology/core_cpus\x00', 0x80000, 0x0)
read$auto(r5, 0x0, 0x20)
poll$auto(&(0x7f0000000000)={<r6=>r4, 0x1, 0x8}, 0x5, 0x400)
setsockopt$auto(r6, 0x113, 0x4, 0x0, 0x1)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sg0\x00', 0x181080, 0x0)
mincore$auto(0x0, 0x10000, 0x0)
write$auto(0x3, 0x0, 0xffd8)
executing program 6:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x82000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x80, 0x0)
r2 = io_uring_setup$auto(0x1, 0x0)
io_uring_enter$auto(r2, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff)
fcntl$getown(r0, 0x9)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0)
mbind$auto(0x4, 0x5, 0x1, 0x0, 0x4, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/pfkey\x00', 0x40, 0x0)
pread64$auto(r3, 0x0, 0x200000000003, 0x2f4a3a23)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
setsockopt$auto(0x3, 0x1, 0x4, 0x0, 0x3)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{@raw=0x8001, 0x9, 0x6, 0x7d2, "368ddd0f663567272af0d1992aa6abe572c1888ad14f15d1e21f8c9834b02816719d6dbfd1fc239426bdde4b", @raw=0x8}, 0x5, 0x9, 0x7141, @raw=0x6, @integer64={0x3, 0x6, 0x7fffffff}, "617b0d8a56e979bd47a2d75daab659a6f85bccdaa12c05c9f8a2499c700bd2bad917de6e95b3b821369589c1a74bfedb3686eb0035c4638311d8a8b3415367bd"})
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
r4 = socket(0x1d, 0x2, 0x7)
connect$auto(r4, &(0x7f00000000c0)=@phonet={0x23, 0xa, 0x4, 0xe3}, 0x8)
write$auto(0x3, 0x0, 0x100082)
open(0x0, 0x40000, 0x0)
select$auto(0xd, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x1, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0x6, 0x4000000000000002, 0xd, 0x3, 0x58d, 0x7, 0x1000000006]}, 0x0, 0x0)
r5 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x103000, 0x0)
statmount$auto(&(0x7f0000000080)={0x7, @inferred=r5, 0x7, 0xa, 0xa806}, &(0x7f00000002c0)={0x7, 0x7f, 0xb, 0x80, 0x9, 0x3, 0xff43, 0x101, 0x2, 0x9, 0x5, 0x9, 0x80, 0x3ff, 0x5, 0x9, 0x7, 0xfffffff8, 0xfffeffff, 0x2, 0xfc, 0x5, 0x8, 0x3, 0x8aa0, 0x2, [0x2, 0x7, 0x9, 0xe, 0x6, 0x3, 0x200, 0x7, 0xe4f, 0x1, 0xcf3, 0x7, 0x1, 0xfffffffffffff7f6, 0x3, 0xfffffffffffffff7, 0x6, 0x1, 0x101, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x7546, 0x9, 0x6, 0x0, 0x6, 0x4, 0x200, 0x200000, 0x10001, 0x1, 0x330, 0x4, 0x932b, 0x8, 0x0, 0x2, 0x9, 0x1, 0x100000001, 0x5, 0x10000, 0xe82, 0x6], "c29280121a92356de6ed965cf0ed56414ff4a9fac6c57fa712313b5d0f7ad5eef14cb7f343ed5693327ee54ff89630037be04061b0895da5d0e3c74f36c0fc8f1741a96e193134a080f7b2145f68dc428fa812c4c2bae54d013e2e8914c54a6c93247784131a801d150702323b4d16d618655c8ff8e5bf776761934c196986a1bc2f1219cf07f3807b164e6b41a1241a59c74a48187eb622c005"}, 0x4, 0x8)
executing program 6:
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\x00\x00\x00\xf0I\xba\xc9\xae\x80HcH\x00\xe8VF\x9e', 0x8587)
r2 = io_uring_setup$auto(0x2, 0x0)
ioperm$auto(0x7ff, 0x1, 0x4000005)
mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0)
write$auto(r3, 0x0, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
munlock$auto(0x9, 0x29b9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getresuid$auto(0x0, 0x0, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2)
sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74000000db49655232a974fa3f157d3fe57aee509dbba2c8d3", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf2592000000080001000000000005008a00ff0000000400340104000b0008004d010e0000000c009900020000000000000005001900070000002b006e8070d76926ce4552c1c92326d0f78b95cd49a76564ba112f34ccd35f7cc71b10b07c023f7d2da98b00"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
mincore$auto(0x0, 0x10000, 0x0)
write$auto(0x3, 0x0, 0xffd8)
executing program 6:
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0)
socket(0xa, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x19, 0x0, 0x9)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000001700)=""/4096, 0x1000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x801, 0x84)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
socket(0x1, 0x2, 0x0)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
getrandom$auto(&(0x7f0000000500)='nl80211\x00', 0xf7a5, 0x1)
socketpair$auto(0xffffffff, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3)
open(0x0, 0x14f140, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x15, 0x1ff, 0x47, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x6]}, 0x0, 0x0)
mmap$auto(0xffffffffffffff19, 0xdb7, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
connect$auto(r1, &(0x7f00000004c0)=@llc={0x1a, 0x306, 0xd, 0xcb, 0x4, 0xff, @multicast}, 0xf)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='\'\x00 \x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x20004080)
close_range$auto(0x2, 0x8, 0x0)
memfd_secret$auto(0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f)
r3 = bpf$auto(0x10, &(0x7f00000000c0)=@link_detach={r2}, 0x40)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r3)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2404c084) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2404c084)
socket(0x1e, 0x1, 0x0) (async)
r0 = socket(0x1e, 0x1, 0x0)
getsockname$auto(r0, &(0x7f0000000000)=@qipcrtr={0x2a, 0xfffffffc, 0x7fff}, &(0x7f0000000040)=0x5)
close_range$auto(0x2, 0xa, 0x0)
socket(0x11, 0x2, 0x300) (async)
r1 = socket(0x11, 0x2, 0x300)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8001)
bpf$auto(0x97, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc)
modify_ldt$auto(0x40000001, &(0x7f0000000100)="c5a2044e3826c2a9487cc82c4a9351332f37475e5a63d7c80000", 0x10)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x7, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
unshare$auto(0x20000080)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x840, 0x0) (async)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x840, 0x0)
ioctl$auto(r2, 0xc10c5541, 0xffffffffffffffff) (async)
ioctl$auto(r2, 0xc10c5541, 0xffffffffffffffff)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x880)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
mkdir$auto(0x0, 0xc001)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x3, 0x16, 0x1001, 0xffffffffffffffff, 0xf, 0x9, 0xb, 0x1, 0x7ff, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0x80000001]}, 0x0, 0x0)
executing program 4:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r0, 0x910, 0x5, 0x0, 0x6)
executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open_tree$auto(0x6, 0x0, 0x101) (async)
r1 = open_tree$auto(0x6, 0x0, 0x101)
setfsuid$auto(0xee01) (async)
r2 = setfsuid$auto(0xee01)
fchown$auto(0xffffffffffffffff, r2, 0x0)
lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xb2, 0x100000001, 0x101, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x9, 0x80, 0xbd, 0xc40, 0x4, 0xcd75, 0x8, 0x5723}) (async)
lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xb2, 0x100000001, 0x101, 0x9, 0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x8, 0x9, 0x80, 0xbd, 0xc40, 0x4, 0xcd75, 0x8, 0x5723})
landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x3, 0x2e1b}, 0xf7, 0x0) (async)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x3, 0x2e1b}, 0xf7, 0x0)
lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x8, 0x8, 0x7fff, 0xfda4, r2, r3, 0x0, 0x2, 0x0, 0x400, 0x8, 0x4, 0xfffffffffffffff7, 0x0, 0x4, 0x0, 0x2})
newfstatat$auto(r1, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x60, 0xe, 0x8, 0x81, r2, 0xffffffffffffffff, 0x0, 0x3b, 0x5, 0x4, 0x97, 0xb0c, 0x5, 0x10001, 0x2, 0x5, 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x334, r4, 0x100, 0x2, 0x25dfdbfd, {}, [@HWSIM_ATTR_TX_INFO={0x6, 0x7, [{0x2, 0x6}]}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x2}, @HWSIM_ATTR_FRAME={0x30d, 0x3, "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"}]}, 0x334}, 0x1, 0x0, 0x0, 0x4}, 0x4004004)
r5 = open$auto(&(0x7f00000001c0)='./file0\x00', 0x7, 0x9)
r6 = getpgid$auto(0xffffffffffffffff)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000580)={{@inferred=r6, 0x5, 0x5, 0x0, "e7233f501e533b6c58a1876bcc4edcbb38658d5ad9cac9df193d3c04352f6721c5a0d70770eb784535d71640", @raw=0x8}, 0x0, @integer=@value_ptr=&(0x7f0000000540)=0x1, "a3ef27c7d71136cfceb3c5b2cdef847e5d88beb9bd07517a831c2a9dc3740ccdd47e8f88bd6f0fae60cc6405ad3c0dc38b1cca2f437e85b1c9dbe579ea815f887381c1c259137cbe9850571129233f5201b05efb7680be61ed4ddcd15d9b534e6d2ef6db529215f2edf33c9f6a48412661ec13349a3d1dfc6f95f0c7bcbf0190"})
lgetxattr$auto(0xfffffffffffffffd, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r4, 0x800, 0x70bd3a, 0x25dfdbfe, {}, [@HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c081}, 0x40000) (async)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r4, 0x800, 0x70bd3a, 0x25dfdbfe, {}, [@HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c081}, 0x40000)
executing program 4:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x3)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x2000008000)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000340)='/dev/usbmon28\x00', 0x101800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
socket(0x29, 0x2, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000040)='+\x00', 0x74d)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0)
mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, &(0x7f00000000c0))
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x2, 0x0)
io_uring_register$auto(0x2, 0x16, &(0x7f0000000180), 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
r0 = socket(0x29, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x2000011)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r3=>r2, 0x7, 0x6}, 0x6, 0x100000)
r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2)
r5 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci5/hci5:200/power/control\x00', 0x40200, 0x0)
close_range$auto(r5, r1, 0x4)
writev$auto(r3, &(0x7f0000000140)={&(0x7f00000000c0)="a139ea22766b28f7aeafffb9f9ab3192ffec55d579ea160953dda210a80c3cddc69318512b3eed8499d35bb0f55768900e4f8aad3c2c9e6ce1d6e2dee2565c5f3572a3439eacd4b58fe166b8d3262f8f76534f98a6d74924fe24dc6006f0e17a330e", 0x8}, 0xc76)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032bbd7000fddbdf250a00000008000200", @ANYRES32=0x0, @ANYBLOB="08000100fbffffff08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0800eeea17c0f9000300060185a152fa02000000"], 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4)
sendmmsg$auto(0x3, 0x0, 0x29f, 0x3ec0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32, @ANYBLOB='\b\x00}'], 0x24}}, 0x4000000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x184, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x2}, @NL80211_ATTR_WIPHY_NAME={0x3f, 0x2, '/sys/devices/virtual/bluetooth/hci5/hci5:200/power/control\x00'}, @NL80211_ATTR_MLO_TTLM_DLINK={0x7d, 0x148, "be380ba6e4c8fd33b8e618ceeba104a45228097c3e16e3f4275737b6211ea83d4df01e2f9602223a9ee7fdfbf6d7334feba739fc12d446aa8647a414a887c4cf702915855eb1f2e160bfee8e77bb4af11be3b46444efa78a8cb923c14d71bcc137e88e511deccc97fa8938ceecce52d987f3c5bac597c5b89f"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x1ae}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "24bce48e44cf548d5a1aabf9d2637ad1164705ae9c8b49e4"}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, "6500a748"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x6b, 0x129, "41e832386cef527cdd28bff494ef41f77d5cc38e385362b1854db779f65c1481eb9b10abdebacf9c61697f462e10163312d57e02f5198c4faceb30c74951a64cb20078573e86c0c47f93cef2fd41a702476822fa0ceaba4927792cd8753584acd12f2ae304e00b"}]}, 0x184}, 0x1, 0x0, 0x0, 0x8001}, 0x40000000)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x4, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
read$auto_tracing_buffers_fops_trace(r6, &(0x7f0000000080)=""/123, 0x7b)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="6524c7aac083b05c1173a1174ad8f52418f12c", 0x13)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000480), 0x8440, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mlock$auto(0xfbe8, 0x4)
personality$auto(0xfffffffc)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0xc)
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, r0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x80000000, 0x80000000, 0x120000009b76, 0x7, 0x28001)
mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mprotect$auto(0x10000001ffff000, 0x8000000000000001, 0xb)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0)
read$auto(0x3, 0x0, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$auto_NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x20000080)
close_range$auto(0x2, 0xa, 0x0)
executing program 1:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.rpcsec.context/flush\x00', 0x60400, 0x0) (async)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
socket(0x2, 0x5, 0x0) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
r1 = getpgid(0x0)
pidfd_open$auto(r1, 0x0) (async)
socket(0xa, 0x3, 0x100) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x2a, 0x2, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
eventfd$auto(0x3)
eventfd$auto(0x0)
syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), r2)
pipe$auto(0x0) (async)
socketpair$auto(0x1e, 0x1, 0x4, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
nanosleep$auto(0x0, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
unshare$auto(0x20000080) (async)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0) (async)
r0 = io_uring_setup$auto(0x877, 0x0)
io_uring_enter$auto(r0, 0xcd00, 0xcd00, 0x7, 0x0, 0x8000000000000000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r1, 0x114, 0x1d, 0x0, 0x4)
executing program 3:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0)
mremap$auto(0x1, 0x101, 0x3fd6, 0x100, 0xd5f4)
r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x142, 0x0)
write$auto_random_fops_random(r1, &(0x7f0000000240)="3ced35a03ce59df9ec0df90827e77cc34afa0cc529932446ba93682709d8d931636ea09d50209b4c7e9d814e8c5bfeb63ae52886d4f014c99b84bd7e7a3c57c3442c3bc5a10674fc05a8b516b91880aa957ada7806f4827465f52cfb20ffeb157f3174c1a1cc1cb13916f8075e3e26df8db80a88619df4d7889f2918dd82c30d9ac1ba3d03127e28f31d896e18363803fedaa3e442283acb142028525c8665f2b8c2a26a017ada7490", 0xa9)
madvise$auto(0x0, 0x200, 0x15)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0)
select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40040)
getdents64$auto(0xffffffffffffffff, &(0x7f0000000900)={0x8, 0x6, 0x6, 0x2, "55f699a1ed1dfd84816e46d5a3142db6e186b2300308e64494f33ceb2785a2f01116a0cfb9b26afa5137fb7b9c3e18c023"}, 0x15fb)
sendmsg$auto_NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4440010}, 0xc, &(0x7f0000000b00)={&(0x7f0000000540)={0xb0, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_6GHZ_CAPABILITY={0x65, 0x125, "ccc2a42ec9349fde767bb4a3b0ba34cb78ea4d5c5df3817f700a447abf2476f6b0832cc3f3b4fa387099f497d6e7fa0b2d879f69fed120fcad29cc2889f88e982c80bb58934be9a780f28352b7904e619c1eda9a1b8eb22ae21ddf313314d4f19d"}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "1f85"}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x800}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x69, 0x0, 0x0, @pid}, @typed={0x8, 0x12c, 0x0, 0x0, @uid}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040001}, 0x30000045)
r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$auto_IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008800)
sendmsg$auto_IEEE802154_SCAN_REQ(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_ED_LIST={0x1f, 0x16, "4ca77dde9374b318db9802adaccfba287e5c55bcfc2b04e6d51bba"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x9}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0x7}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40805)
fcntl$auto(0x8000000000000001, 0x26, 0x8)
fcntl$auto(r3, 0x2007, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2540, 0x0)
move_pages$auto(0x0, 0x4000000000000009, 0x0, 0x0, 0x0, 0x1)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}})
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x701000, 0x0)
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/resource1\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/33, 0x21)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=<r1=>0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff7c, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0xae31e9c9e702e50}, 0x40001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video43\x00', 0x181782, 0x0)
setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6})
eventfd$auto(0x6)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x4e20}, 0x55)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy9/netdev:wlan1/stations/08:02:11:00:00:00/airtime\x00', 0x408000, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
io_uring_setup$auto(0x6, 0x0)
semctl$auto(0x80001ff, 0x804, 0x3, 0x5)
setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x10001)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000)
mremap$auto(0x0, 0x7, 0x10000000003fd6, 0x3, 0x20000000)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x0)
executing program 1:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0xeccdb0b86aeeec73, 0x0)
memfd_create$auto(0x0, 0x16)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
move_mount$auto(r0, 0x0, 0x4, 0x0, 0x176)
executing program 1:
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='jfs\x00', 0x8000009, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000003c9c3bef3be1f01650346b2d51c115b1868437ab82da54b9cfa8f4df20efeb0ecad3bc19f827dcb81551a066475c4beb92b6e31bb0", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf251400000005000b00060000000c00018008000100", @ANYRES32=r2, @ANYBLOB="080010000400000008000a0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4089c}, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r4, &(0x7f0000000400)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000440)="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", 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x163c}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = wait4$auto(0x0, &(0x7f0000000000)=0xf, 0x53e00000, &(0x7f0000000040)={{0x5, 0x9}, {0x6, 0x3fe000000000}, 0x6, 0xfffffffffffffffb, 0x1, 0x1, 0x0, 0x3, 0x2, 0xfffffffffffffffd, 0xe0, 0xb, 0x9, 0xf1, 0xe032, 0x5})
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x2, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
prctl$auto(0x59616d61, 0xdaffffffffffffff, r5, 0xfffffffffffff7ff, 0x8)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
executing program 3:
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x400, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
ioctl$auto(0x3, 0x5412, 0x38)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r0, 0xfffffffffffff000, 0x2)
socket(0x15, 0x5, 0x0)
select$auto(0x6, 0x0, &(0x7f00000000c0)={[0xbb0, 0x8101, 0x80, 0x1, 0xb, 0x4db11da, 0x3, 0x7f, 0x2, 0x0, 0x32, 0x1, 0x10000, 0x7, 0x6, 0xb83]}, 0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
executing program 1:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub2/xrun_injection\x00', 0x4a040, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = open(0x0, 0x22240, 0x155)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)
bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x55)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x100000, &(0x7f0000001d80)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x0, 0x3, 0x1)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
timer_create$auto(0xfffffff8, 0x0, 0x0)
timer_gettime$auto(0x0, 0x0)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto_safesetid_gid_file_fops_securityfs(r0, &(0x7f0000000380)="4a5a2ef40e9ea3aa99b7c2754b1af36515dc8f4ee2f5300330a4bd4e58bbc012d91d19f7e52d52486c5016dd5dd0ac6ba4e32551b0a1fa61fd74d3ec8cd175af91ef70df99e7ca39014d12ffead41c35fe598a5aa3c31600359f56a931261c81ce4902da26c0f9280acd684823ff326e54cba2a0b3c016004ce06b216d424e0187ff7c5cbdb8932aa7d5c7a8124b77b33843a9ffd5b03184c053a184492b65cd5faefd5fc508abde7f2e903fcf1780000f972169eabef9fb3dbe6e99a9e69ff6e1575b7381988f150dcbd0fae582901cd0060c65a258df8d4e70faab33fb86ddf832ec4f03a89cdf9b1a32c325455b555e4f5f5ca9658cd9401a1ea3f9dab8e0b68e67f7b52db44cc4313334b3564c673adc1f9dfd4cb0faacd609bbc15fe6c1c42463e6d6d03891f3e2838b0b9e72719f77ef76f70862296817c097d90d680d74bdab8a130af7eecc2e4bc18df08ca511f93486408e79b1024e835180f1c7330b50c28b4b43419f621eb742ba79b0b06cc36237792e5909612caa41df558b1531186c24397de15f0d61f433e1e5ff2439ea55f5fe6f4b2d678eb2a7928ac8d6c2f654a17cc66601eb861856578948f9874827633407588e351766870a9b455140b0df1c3615dd5a6b210763641913196966b338b48d8150dcbc2428ff5f3890c66b834c44c201324b15f34f085fee9e489787767bf2aa58602a407b6e791160292f48313fb0b39c0c8c78bafe7e1227b41cb91d519fe85891f97646c6004bf5d02490db879fc99b36a0e9f3222f713c14bbd75f6d1c9058549325ee1ed0efb9ab4bc1430db4de943919dedf91abb6c93b6fc62687d91fa0e7ebd2d963e282d6003fee4324e3391368c5c4cf6c7457dd109b9ea4817b4772431f6c10fd7b8c8acd86ba4864cb76c65a770a08118bc030f9566a1dc634dfdfd3e14e810456959114a9c9efdcc8a84c7a7a8d9d7cafc0c7304c51f86592c69ba0412f497d730b16438a234d232e2f635c9d6089873c0a991ce25092dc4d152a3bd74274a6b31a9b18e6c370f148b82826a4643673761270d3706b58fd7647c285ed9a3c7b6e2c4e4d45f74d7f27d12987f16a0f93ef7a20f84a9932f038acf05b7a2621a19d74f47e0f8f3bb6e1b4f62461f45bc8571d1bfcdc8a3334662c180b314c1cefa80c6a6e010adb0709fc2c7286564b3379254e090aa86aa99a8e1eaf57bcd8b9498b6d57a2677c543b25e3d11a1f862fb04abdb31fddec90d5dde5e97281852e53351c0173827574b90d3a54c7ab77ae6fec2c01bdfcb250c6f5dfdd1a0fe3157a9935eda4e17e28bd22ab0e1fa2dc7191fca68a49300a7d567aaa9bfdcc0e8f44e2cc17f3d89c3ca73129ba5883eac32d2378d9a6c19c7b7d38908f07df3fdf13523bb289078a10bead228b2f0a235aa6d753856edbc1df3c751fb6d84bf7c03b4dd5672811e71e637732489e44f1c6c367b49774a82c54d7b60641ed7874abd940bad0d866cf47ce92181262de8b3bb4b6de5a314844c9373191b24889f4bb01e8e4877f29cef63598782dff81557bdd475502f67786ceb1625c57b202c5c544da4e7d513ce71b5c379aab2711ba57cc703f8911c0b81b3c93b6dd4760e6877ba51ae244fb648b5a701486d366a3b5a0904ad7d9d2ef92051161cd7ab5c9489e299777c2010a662f5b2ef8bcfaa08ecc44d4a4b3cb6857485d0997e1f805bff468fde6798d54edb669e27060cc3882e621f367b6975918831975482668816550b7f1fe94ee2568f2439208990ff1caa0434b921ca7cdbeef9d8103dab10f7aef37ecfd4f5db88a8889ef9a4476c8a680027d22b9217779e5ff177378e8c165d2d9ab3ebac2cc5a833a12a4a17700b1b5725d9d216b421d5df8cdef54d7843e554fcec51ea23a8d81605735177efd6acd72bb54f2d826443df71e66c73cfcc3a82b949afa43f7ad9fdbea4dc1c296b44065d29916842c20c74d9215d249b257cbc0ef4f194d7799d033b718d1a3293ea596a1f76c7730cbb7727c46d3ef554cc20bfe4be2b5daf98f3283e824c5e9436dec33a21f2daaa4f54d0a85b494b3ea19399b770c301fa47c2c2f24b66828b509b21b1dc3661d2acb9c5355f1e6fb8cb8022367e92b0c1226bd6e3df39e17f1527cb8aefb463fec5ed121ad177c246c64d530f0739acf8be19baca1a5b723a17695c1362d59da0e043224ed6652050c894c1970fa565e1eab0eb970f763acee884ab351ff573e4a9213ca1a83e0571303f025e6a4ac7c00ca7f84fdfa78312a16a9d53da0e0827602a11630810e3f39b8a3dae466daf789bb6f40bdaab903c02b5cc209432697ce63a61cd7c6366d6ff5fa35ab00e6ccfbb2e05ff5f35d84670daa1a21985e16afcb61e500a2c55e2b26891e21203b6d656430a07bc7286b3293170df5c268838b5ceb8936ebe98b2d1dbc6984df064806dc8ff831976feb7f5a59c3ad38c44b5c38330976859defa35b24945f1828f1779adf2326bb949b9b1c02d9fc3ad9be1224888be8f2bce6b51be9f47baf05ad6e478ccadda7b80bf0b0397ae4bcdbf217e9eb338d9aab771709737b3bc382469177e7a384ba9fd4eb2e7cb4d008546fe1372156dfd878c9fda67a48474025c0308e251c632975abf7564f82428d716a6b9e4c835fae09f2206203a6259a596a0afff13b5aa649b4c03b35c59306dd54dc88d3e3b9a56c1ed59ad69b7dcb10811b09764abe4fc6e723e252985716430329f380d0b3cc789cd9b6dc6f39c3d2eb970f2397fc7f9f302c9de2dd10f9477fab5d829668b8c3eb145e28b20739b916236747394af8819ecb93f0557f090b260f536fa5ca7b4ac6b7404aa9dcfaaf5e1c8ff04bdb1aafdb943afc1b01d749f4a9ea1625f61510e05ea61b4dbcb214d34d44a771afaedb0053a14e8c13a85aaaa2bb52127e715ba2242a4cb18614db806e44180fe9f5c26180c925903fa1e1ac112eca3c956ab52b8ced51e39efc1567969fa65e4a7eef6a1b7a5f28438d7f121e02afd233e04ee110cc873ff6dd5dfc4c074aed2916d1aa68b62439d47e75676f3d24dfa2acab563d0d55a6bfea64fcffea4143da1c525ba71f4d289bd5095b142fd490ce9fa6d9ea1407393c039244cea9777eca2bfea3b2838c1910194649ee392554180abfd8e9cf77c644eaf0d03b1a9e3f4021bb8416702131f62ed08879c9841e008166f093c6c89b5666d507d9f0b3649928ffb1d4625b6c413b115e297d74f0eda178da011d581d3c3c45af58d98a92ec1e81437476b411102435a02f39cede5c9939091d100bd26b1af0608632b483aaee5ddbfd7eedf9e94a6038b9a14d8f9587e566bca55e85a968935947f152f0f7290651488ec74e1e77ba288b1e2b8e510764a585056edad8493bee59abcc8d7aeceb3f9149466bfbd2cf75e6373ad887d48de9b4dc325ffc57c507df56e0a89941809784bac225af145a46342141211c53e54f0121679469c0953ae9394b37ba434a9d303a974ac7ae6efee21a2cd62dd41e1f05b529b1b469835049e07480fa62bf7f141f940bcd213ecc590ffd57e5ad40901eed0c9efd06afec92f014426ec6688ad3e55e20b19969fffa5ac0663111c4d967b0d194301427a96d4d1571708dd2a477e3fb691784bcf00cda6ff24bb00a95a19d28bc4ac93a5807767219d6dd37059c0e668adc774100b4f5d77ffff4b4151b4727caf499a97cc7a9ed29a944627aa1b9c1605df25c3d435d174906080a64f864db8300324a086d328fda3c2c07b846d391828332f4ddaaabbd4bfed58e1069defacd80d7523eb9fe4724ce4a350eb3da6d7201dd03d736aa9375134e6d0d85d59e6021c57bf0e5da7f8b9f0bbe00ca604aab22e8d2b33c990c7e1808255a6ab7798d2724abba062d0855edff7f86d629eefe2f29d1f38d6dbf172ca6b9fc8d6ac554f5311d3eb69b52d8733808e7af6c16a7740762c31b6681e2e114a0539eda1f9b2344dd38a872d98a9230b5775cf4cae2ad765d16e293a12d7b2f65bb74efaa3f540754f80baa1ab01306352106c3cf1fea1a52b4228c95739a3dcecbcb65aabcf1b17e1af0675a71a8ffa5887776b4690606f8d3fa3c9adaca221f6498fad7fe9da2a2b416cdf00468884b7fdaac75eba836d27a413b10ec74763625c851a6fc9c74937b0f5e2f67395cb08b8e56d8e417e00f0ce0078edcacb3b1f2b3125f16da94374bc8899b8b9f19a0b69b4c24bcd7dced060f1068d19303b14305383b22f55dd72c5f0826866b0347b7a4b123755ff69a91f14005902a7ae834630889eb55f531b0496e165858ad3d3db64f8f75684f77515ff8bc6e2c58880a0917017f6709414bfc669e3b262cb2d18d3525e6499242c052d448065fb14fbb2d86a57f4c31c6a6f657139c903aaf7ada08fa776193d4ae070901005e5397540f1262cc269907e5a436cf043902c7a1b129865b555ab07875b0ce8c826dd90d39490ae47d2daf65200fad0b689cc796489363ee825993af8f86bf3bb5721eed1c0369bfb5e28edaf1b455e7c9ab7bd3332edc8274dd754871e7de2f5ced71cbd3b521cd7dc15dd7b5cd3037210f2d53ab7572bc0936d17aa8e0d2a193aa7e981a77d024ee22e45a399eeba5fd9bbcf71797bbbf55e93b81d81c53255bf914b1959f7ea34db13453903965d4db5f889c0ed07a8ac959cc675adde329a7c6bac21354afb13ae43f5d2cdf835c7aea59526b53c323683abd7ee509e5b7444b871d8807c24c0bf54c48ed5b2a3605de3725e51c84d5a91d245314b66e404249373ce4a05df0a97fd28a4959e17538673b47c025b9d6d3885d224c2619b119da56657cd0c4aaa0329259eb4e3b61bc38e43601042bb85adb4492f9c13d293ace583b86f2d3b8f5d7529e5aa937d342ea9425b0eb2353da0897b1668727ef2597764639deeacd34f2f866afcc58862e0176e942871f27d37594571450a8fb5a4073c64d82730f5facebe84899e43a2ade2a59459062785ac19d25964a8b5f1c34c08549bd945734e9654be007848c820c85a2086d8396845cbd145b1e1611878c513cae6ee7551f00a495f0f5688343487c560f3711878e27ea4e6d94b017602b2d5f8ba776b9813f661c870c8f50bb8c022bceab7c2142a5863e89f3eb54b0ee129b2e6e07dacadace6ec12a0fc7ee8087ee8b7415c63f21d1328206c80ecdc071445fc1a521e015d45a88eb623fddcbabe39ba1b60e3ce2f2e52e33549a120cf311bca78378e920823ae90d5ece64e9483244806a354cc98559a75ca99627d93ea33713b849ede1ed3be7358c61f2ec392770bf393f28e56b6d177e58dbf4070eb0324d6c9c5582dbb467c25c109821d7bc5ab170f569f25b7a6f08d599ad48cc465daf50185be99b8fd9eb31540b9707f4b326400835a931d632be36e07af4d85958293a0157e23473e28c553720b5dffcb1212bf18bf17a4d75c397fb2dc2e197cde05cffaa728223ed593aaeb21c2344f64667cca3bcc03e39db31ea49cf3d98cb4d4fc9d377f91677eec7c6b4398b216ba9f9d1349742294ba554b78da9439b433a2650aa7f7ffd11066242f82713dd9822e50d5b9d93b9636da2a68b65e834ea5eedc203882be040586a5a784a32d82e417c2c950d7496f0584da0189b252cd3a17014b41e54cfb388d1e2fd6221ffc8f1e98bd14a043a6201e7a53b4852b5f83569da72bb3e56bb52df1514d83d10b55e05c6789914d576a4eb96def05c5daf2d6a66ccbc91b524a7db1784416e7d3280032a20f29a021701db56ec82de40d29e", 0xffe)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/mtd-0/min_bytes\x00', 0xc0002, 0x0)
read$auto(0x3, 0x0, 0x80)
write$auto(0x3, 0x0, 0xfdef)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x7, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb2, 0xfffffffffffffffc, 0x1, 0x1000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x1000000, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x2]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
executing program 4:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/type\x00', 0x101900, 0x0)
bind$auto(r0, &(0x7f0000000080)=@sco={0x1f, @none}, 0x8)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(r0, 0x0, 0x7fffffffffffffff)
mmap$auto(0x0, 0xa, 0xdb, 0x1c, 0x5, 0x8000)
pidfd_send_signal$auto(0xfffffffffffffff3, 0xe31, 0xfffffffffffffffd, 0x0)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/power/control\x00', 0x80302, 0x0)
sendfile$auto(r2, r2, 0x0, 0x3)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0x2000000000000000, 0xffffffff, 0x2, 0x18000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2b, 0x1, 0x0)
socket(0x29, 0x1, 0x73)
r4 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x0, 0x0)
read$auto_tracing_stats_fops_trace(r4, &(0x7f0000000180)=""/166, 0xa6)
bind$auto(0x3, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0xd434193a0c40f2f}, 0x6a)
connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x55)
socket(0x11, 0x3, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
mincore$auto(0x1000, 0x8001, 0x0)
io_uring_setup$auto(0x2, 0x0)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x82000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x80, 0x0)
r2 = io_uring_setup$auto(0x1, 0x0)
io_uring_enter$auto(r2, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff)
fcntl$getown(r0, 0x9)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0)
mbind$auto(0x4, 0x5, 0x1, 0x0, 0x4, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/pfkey\x00', 0x40, 0x0)
pread64$auto(r3, 0x0, 0x200000000003, 0x2f4a3a23)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
setsockopt$auto(0x3, 0x1, 0x4, 0x0, 0x3)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{@raw=0x8001, 0x9, 0x6, 0x7d2, "368ddd0f663567272af0d1992aa6abe572c1888ad14f15d1e21f8c9834b02816719d6dbfd1fc239426bdde4b", @raw=0x8}, 0x5, 0x9, 0x7141, @raw=0x6, @integer64={0x3, 0x6, 0x7fffffff}, "617b0d8a56e979bd47a2d75daab659a6f85bccdaa12c05c9f8a2499c700bd2bad917de6e95b3b821369589c1a74bfedb3686eb0035c4638311d8a8b3415367bd"})
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
r4 = socket(0x1d, 0x2, 0x7)
connect$auto(r4, &(0x7f00000000c0)=@phonet={0x23, 0xa, 0x4, 0xe3}, 0x8)
write$auto(0x3, 0x0, 0x100082)
open(0x0, 0x40000, 0x0)
select$auto(0xd, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x1, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0x6, 0x4000000000000002, 0xd, 0x3, 0x58d, 0x7, 0x1000000006]}, 0x0, 0x0)
r5 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x103000, 0x0)
statmount$auto(&(0x7f0000000080)={0x7, @inferred=r5, 0x7, 0x1, 0xa806}, &(0x7f00000002c0)={0x7, 0x7f, 0xb, 0x80, 0x9, 0x3, 0xff43, 0x101, 0x2, 0x9, 0x5, 0x9, 0x80, 0x3e, 0x5, 0x9, 0x6, 0xfffffff8, 0xc, 0x2, 0x100, 0x5, 0x8, 0x3, 0x8aa0, 0x2, [0x2, 0x7, 0x9, 0xe, 0x6, 0x3, 0x200, 0x7, 0xe4f, 0x1, 0xcf3, 0x7, 0x1, 0xfffffffffffffff6, 0x3, 0xfffffffffffffff7, 0x6, 0x1, 0x101, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x7546, 0x9, 0x6, 0x0, 0x6, 0x4, 0x200, 0x200000, 0x10001, 0x1, 0x330, 0x4, 0x932b, 0x8, 0x0, 0x2, 0x9, 0x1, 0x100000001, 0x5, 0x10000, 0xe82, 0x6], "c29280121a92356de6ed965cf0ed56414ff4a9fac6c57fa712313b5d0f7ad5eef14cb7f343ed5693327ee54ff89630037be04061b0895da5d0e3c74f36c0fc8f1741a96e193134a080f7b2145f68dc428fa812c4c2bae54d013e2e8914c54a6c93247784131a801d150702323b4d16d618655c8ff8e5bf776761934c196986a1bc2f1219cf07f3807b164e6b41a1241a59c74a48187eb622c005"}, 0x4, 0x8)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: bisecting 45 programs
bisect: split chunks (needed=false): <44>
bisect: split chunk #0 of len 44 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30, 13, 30, 30, 30, 30, 40, 30, 30, 26, 30, 40, 2, 20, 28, 30, 27, 26, 13, 30, 30, 5, 29, 13, 21, 30, 3, 30, 30]
detailed listing:
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/route\x00', 0x40800, 0x0) (async, rerun: 64)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64)
statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r1, 0x5393, r0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x121040, 0x0) (async, rerun: 64)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) (async, rerun: 64)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x81, 0x0)
ioctl$auto(r2, 0x5402, r2) (async, rerun: 32)
r3 = socket(0x10, 0x2, 0x0) (rerun: 32)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='j\x00%'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) (async)
read$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffffff, &(0x7f0000000100)=""/191, 0xbf) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
read$auto(0x3, 0x0, 0x400000) (async)
r4 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0)
mmap$auto(0x1, 0x40009, 0xdf, 0xcf2, r4, 0x10000000000000) (async)
mprotect$auto(0xfffffffffffffff9, 0x7fffffffffffffff, 0xfffffffffffffff8)
r5 = socket(0x22, 0x2, 0x24)
getsockopt$auto(r5, 0x3, 0x1, 0x0, &(0x7f00000000c0)=0x1) (async)
write$auto_tracing_mark_raw_fops_trace(r4, 0x0, 0x10)
close_range$auto(0x2, 0x8, 0x0)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x10, 0x2, 0x14)
r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x800, 0x5, 0x4}, 0x6, 0x3)
r5 = getpgrp(0xffffffffffffffff)
getpgrp(0x0)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0x2ec, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0xd1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffff8}, @NL802154_ATTR_PEER={0x2c8, 0x28, 0x0, 0x1, [@nested={0x2c2, 0x2c, 0x0, 0x1, [@nested={0x10b, 0xe3, 0x0, 0x1, [@typed={0x4, 0x9e}, @generic="d621e834e156835620d1fb5a7c72e4ab28397fe0ffdcbff0fa6aaa3b01b71d204a1c0f0bb0a436c46422dee0ba7b91ea9d3863a625bb26f98107d871074b4f2ae86f371091a658272c70dcb0ca63929ca199ecbb87439c00ed65ca8d893f98b0edfffc4b14bac07242b49ba6c89b707c57545cbec18c4cf0d945c601d5fedf3e2d736d16f6297ab0cfded209249826098f063c6de887c552dfe4ff97a5129cc1adc3690cfef97dadb98f423196b0bf6057a2ccbe40", @generic="6afdd070da26a6dcb7841f31376f4156af84905bf0e8705ecfb8138ca3c7a772d36170055f7b73fa61577f76499a11a53c2d", @typed={0x4, 0x100}, @typed={0x8, 0xbe, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x4e}, @nested={0x4, 0xa3}, @nested={0x4, 0xed}, @nested={0x4, 0x80}]}, @generic="a552db701aefd222ef90e8b199d5abc44be518e1aeba8facc5dc357ac861c87c49e14fbcac2aca1ba2df62ccf10bc51c21bad34e667d55022d0ca9aa1bb01b8a0010a81e2daca003cb368fc577f67fb9ecac68e9e39004f9782674371a55d55450", @typed={0x14, 0x49, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0xe3, 0x0, 0x0, @fd=r4}, @generic="c017d944903d756c3051ac6b5676e3fb4cad6bb21cfbef709f4f691606e4292704b5a6a5cb43728e8fc21d8260ca46f1ec450710ec9da23be6fddc306929d657fdf44b4cd3a87e4908612cc0519cb76a76bf1f36e728d1bb27c03e188638aa1ce7ff428c7cacf5495c4c2b24280876e2bb59e0bb5597f9572cd342166de76d7df93a3135aa2d7821228e24d7c5b1d1e67a2c2e1a6cb6133b2b2d7458ee15b55bc83d", @generic="4bfaf8ade1e83bedfb71d7a1b0fbe186dcb22e20f8e7edca440c50416b41848218819034f8f02eb3a6c7d6089dd7e0191c449aadf4969519bf61f3a19972553e703e21", @nested={0x4d, 0x6d, 0x0, 0x1, [@generic="92214bc00d9b50744b077f251ae1f7d0dba7ed4bdc3c87589f98ea928a136f0f7e90c878b6fa5db250e3d372be9101fa8715b2eb2bc3ca4d3625fd32535f5b86a4253f827dd9029704"]}]}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
clone$auto(0xffffffff00000001, 0x12, 0x0, 0x0, 0xfffffffffffffffd)
mlock$auto(0xfbe8, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_MON_GET(r6, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000000100)=ANY=[@ANYBLOB="bff41e0476e5fe6f1baf30ad0ebb1938de54b75eafacf4a5d0c443172c2eb188", @ANYRES16=r7, @ANYBLOB="2f032abd7000ffdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x3, 0x6)
socket(0x10, 0x2, 0xc)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0xe9, &(0x7f0000000040)=@iter_create={r6, 0x8ffa}, 0x1)
executing program 5:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0)
close_range$auto(r0, r0, 0x7)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/interrupts\x00', 0x40440, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000080)=""/121, 0x79)
r3 = socket(0xa, 0x2, 0x0)
sendto$auto(r3, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1b)
read$auto(0x3, 0x0, 0x8080)
executing program 5:
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r0 = socket(0x10, 0x4, 0xfffffffc)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010025bd7040ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffb, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x1d, 0x2, 0x2)
r3 = socket(0x1d, 0x2, 0x2)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x4, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x4fa, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xffffffffffffffff, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x88c0}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r5 = socket(0x1a, 0x4, 0x3a)
setsockopt$auto(r5, 0x29, 0x49, 0x0, 0x1ff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$auto_BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x4008000)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00'})
sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r0, 0xffffffffffffffff, 0x82)
close_range$auto(r3, r2, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fddbdf251f0000000600eb00010000004400c500663ee5062d489d263579fea6682f9525819b1cdb3b829700ce27890fbba7ce4e6604ee712efe0d3854f1a5bc24ac4024e7180aa80ca2a59f0ebdffb86e31707a"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(0xc0, &(0x7f0000000000)={{0x0, 0x22, 0x0, 0xa, 0x0, 0x989, 0x1}, 0x3}, 0x9a6, 0xfffffffe)
io_uring_setup$auto(0x3ff, 0x0)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, r0, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
fanotify_init$auto(0x5, 0x2)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x801, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109140, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0xa)
socket(0x2, 0x5, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x80043, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000011c0), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000012c0)={'veth0_macvtap\x00', <r3=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005439110000007540498bb48cfc89aed7e66c2064bc2c57c7fd5d044e3eb54fadda4dd90e66e5384bcaf317ebd758ee60990985f228e6925bdd841b534d2d6f5aad0600000046a28ba99ac541bffd7340053a7d5c05fc68ad6ada29ef0000000075a61ec222e560f4d46cef483ba3c13d87c760fdfbf3992a101f258053c35a57998d875f5d7a0353eeb0617636049f4f8717da2ef0d9dd7177", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250d00000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
socket(0x21, 0x2, 0xc798)
mincore$auto(0x1000, 0x8001, 0x0)
r4 = socket(0x2, 0x5, 0x0)
shutdown$auto(0x200000003, 0x2)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x2005, 0x2)
io_uring_setup$auto(0x877, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
io_uring_setup$auto(0x877, 0x0)
executing program 34:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, r0, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
fanotify_init$auto(0x5, 0x2)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x801, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109140, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0xa)
socket(0x2, 0x5, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x80043, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000011c0), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000012c0)={'veth0_macvtap\x00', <r3=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005439110000007540498bb48cfc89aed7e66c2064bc2c57c7fd5d044e3eb54fadda4dd90e66e5384bcaf317ebd758ee60990985f228e6925bdd841b534d2d6f5aad0600000046a28ba99ac541bffd7340053a7d5c05fc68ad6ada29ef0000000075a61ec222e560f4d46cef483ba3c13d87c760fdfbf3992a101f258053c35a57998d875f5d7a0353eeb0617636049f4f8717da2ef0d9dd7177", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250d00000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
socket(0x21, 0x2, 0xc798)
mincore$auto(0x1000, 0x8001, 0x0)
r4 = socket(0x2, 0x5, 0x0)
shutdown$auto(0x200000003, 0x2)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x2005, 0x2)
io_uring_setup$auto(0x877, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
io_uring_setup$auto(0x877, 0x0)
executing program 6:
r0 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffff7fffff0005, 0x8)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x204041, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r2 = socket(0x15, 0x5, 0x0)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x824402, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x4)
bind$auto(0x3, &(0x7f0000000040)=@rc={0x1f, @none, 0xfc}, 0x6a)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
r3 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r3, 0x114, 0x271c, 0xfffffffffffffffc, 0x0)
close_range$auto(0xffffffffffffffff, r0, 0x0)
socket(0x2, 0x3, 0x100)
r4 = socket(0x10, 0x2, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/security/tomoyo/profile\x00', 0x121c40, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
executing program 6:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x200000000000000)
r1 = socketpair$auto(0x6, 0x400, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x23, 0x5, 0x0) (async)
r2 = socket(0x23, 0x5, 0x0)
listen$auto(r1, 0x5ec)
connect$auto(r2, &(0x7f00000018c0)=@phonet={0x23, 0x65, 0xd3, 0x5}, 0x55)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x2000, 0x0) (async)
r3 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x2000, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x2, 0xfffff87b}, 0x8000, 0x0, 0x6) (async)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x2, 0xfffff87b}, 0x8000, 0x0, 0x6)
r4 = gettid()
rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8) (async)
rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8)
tkill$auto(r4, 0x7)
read$auto_tracing_pipe_fops_trace(r3, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x341200, 0xb2) (async)
open(&(0x7f0000000040)='./file0\x00', 0x341200, 0xb2)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x22001, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x121100, 0x0)
mmap$auto(0x634, 0x400005, 0xdc, 0x19b71, 0x5, 0x5)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004010}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004010}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_DEL_TX_TS(r5, 0x0, 0x4004010) (async)
sendmsg$auto_NL80211_CMD_DEL_TX_TS(r5, 0x0, 0x4004010)
executing program 6:
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x402001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000007180)='/sys/devices/virtual/block/zram0/debug_stat\x00', 0x80, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000071c0)=""/118, 0x76)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x5, 0x804, 0x2000074)
socket(0x2, 0x1, 0x84)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/uts\x00')
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
sigaltstack$auto(&(0x7f00000000c0)={&(0x7f0000000140)="2497ca05323e86d13fa64f2c108e58f586eff75c1fc250a9f39aa2ebe2511a9b221329ec055f7904c09970fdaf3b053f6acd93370a54462540b9e8a914b84f12456973646956675a8d770187eacb82174c8e206dcd8e1e5efd6ed3f10a930138e2d13534ceb7c852c44136825825359118e8e0f8bc46fe66fb1c666a1c8f3c2281d8aadcc9e588151740e4066cb3", 0x3, 0x7}, &(0x7f0000000240)={&(0x7f0000000340)="9047967eb6717e57206f99d38f96d333f9f26ba4e526f16a965a1ce74b215d6e4227de42450ec7bc7a9797b7e529dd96e46232fa6bcb89378cdf114ddc39867a587f68cc5941aeb27a7b090a39fdd4ddf73e660e102e3d21adfae0c70f2e1750e7a4d4bbc4a11e437c2048c28a25e6ce65e27a82ff0f4367d4d0c096a9aa487b2f39fd5a95e741e60c7c4f8247027d24f31d5151d4ff8ab57bc4afedec390fc1e2a24fe6276df2075523c85ebc45e822d0d3e2ee760953a2984a47c0de", 0x1000, 0xb})
ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0)
r4 = socket(0x23, 0x80805, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/topology/core_cpus\x00', 0x80000, 0x0)
read$auto(r5, 0x0, 0x20)
poll$auto(&(0x7f0000000000)={<r6=>r4, 0x1, 0x8}, 0x5, 0x400)
setsockopt$auto(r6, 0x113, 0x4, 0x0, 0x1)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sg0\x00', 0x181080, 0x0)
mincore$auto(0x0, 0x10000, 0x0)
write$auto(0x3, 0x0, 0xffd8)
executing program 6:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x82000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x80, 0x0)
r2 = io_uring_setup$auto(0x1, 0x0)
io_uring_enter$auto(r2, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff)
fcntl$getown(r0, 0x9)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0)
mbind$auto(0x4, 0x5, 0x1, 0x0, 0x4, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/pfkey\x00', 0x40, 0x0)
pread64$auto(r3, 0x0, 0x200000000003, 0x2f4a3a23)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
setsockopt$auto(0x3, 0x1, 0x4, 0x0, 0x3)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{@raw=0x8001, 0x9, 0x6, 0x7d2, "368ddd0f663567272af0d1992aa6abe572c1888ad14f15d1e21f8c9834b02816719d6dbfd1fc239426bdde4b", @raw=0x8}, 0x5, 0x9, 0x7141, @raw=0x6, @integer64={0x3, 0x6, 0x7fffffff}, "617b0d8a56e979bd47a2d75daab659a6f85bccdaa12c05c9f8a2499c700bd2bad917de6e95b3b821369589c1a74bfedb3686eb0035c4638311d8a8b3415367bd"})
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
r4 = socket(0x1d, 0x2, 0x7)
connect$auto(r4, &(0x7f00000000c0)=@phonet={0x23, 0xa, 0x4, 0xe3}, 0x8)
write$auto(0x3, 0x0, 0x100082)
open(0x0, 0x40000, 0x0)
select$auto(0xd, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x1, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0x6, 0x4000000000000002, 0xd, 0x3, 0x58d, 0x7, 0x1000000006]}, 0x0, 0x0)
r5 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x103000, 0x0)
statmount$auto(&(0x7f0000000080)={0x7, @inferred=r5, 0x7, 0xa, 0xa806}, &(0x7f00000002c0)={0x7, 0x7f, 0xb, 0x80, 0x9, 0x3, 0xff43, 0x101, 0x2, 0x9, 0x5, 0x9, 0x80, 0x3ff, 0x5, 0x9, 0x7, 0xfffffff8, 0xfffeffff, 0x2, 0xfc, 0x5, 0x8, 0x3, 0x8aa0, 0x2, [0x2, 0x7, 0x9, 0xe, 0x6, 0x3, 0x200, 0x7, 0xe4f, 0x1, 0xcf3, 0x7, 0x1, 0xfffffffffffff7f6, 0x3, 0xfffffffffffffff7, 0x6, 0x1, 0x101, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x7546, 0x9, 0x6, 0x0, 0x6, 0x4, 0x200, 0x200000, 0x10001, 0x1, 0x330, 0x4, 0x932b, 0x8, 0x0, 0x2, 0x9, 0x1, 0x100000001, 0x5, 0x10000, 0xe82, 0x6], "c29280121a92356de6ed965cf0ed56414ff4a9fac6c57fa712313b5d0f7ad5eef14cb7f343ed5693327ee54ff89630037be04061b0895da5d0e3c74f36c0fc8f1741a96e193134a080f7b2145f68dc428fa812c4c2bae54d013e2e8914c54a6c93247784131a801d150702323b4d16d618655c8ff8e5bf776761934c196986a1bc2f1219cf07f3807b164e6b41a1241a59c74a48187eb622c005"}, 0x4, 0x8)
executing program 6:
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\x00\x00\x00\xf0I\xba\xc9\xae\x80HcH\x00\xe8VF\x9e', 0x8587)
r2 = io_uring_setup$auto(0x2, 0x0)
ioperm$auto(0x7ff, 0x1, 0x4000005)
mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0)
write$auto(r3, 0x0, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
munlock$auto(0x9, 0x29b9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getresuid$auto(0x0, 0x0, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2)
sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74000000db49655232a974fa3f157d3fe57aee509dbba2c8d3", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf2592000000080001000000000005008a00ff0000000400340104000b0008004d010e0000000c009900020000000000000005001900070000002b006e8070d76926ce4552c1c92326d0f78b95cd49a76564ba112f34ccd35f7cc71b10b07c023f7d2da98b00"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
mincore$auto(0x0, 0x10000, 0x0)
write$auto(0x3, 0x0, 0xffd8)
executing program 6:
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0)
socket(0xa, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x19, 0x0, 0x9)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000001700)=""/4096, 0x1000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x801, 0x84)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
socket(0x1, 0x2, 0x0)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
getrandom$auto(&(0x7f0000000500)='nl80211\x00', 0xf7a5, 0x1)
socketpair$auto(0xffffffff, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3)
open(0x0, 0x14f140, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x15, 0x1ff, 0x47, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x6]}, 0x0, 0x0)
mmap$auto(0xffffffffffffff19, 0xdb7, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
connect$auto(r1, &(0x7f00000004c0)=@llc={0x1a, 0x306, 0xd, 0xcb, 0x4, 0xff, @multicast}, 0xf)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='\'\x00 \x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x20004080)
close_range$auto(0x2, 0x8, 0x0)
memfd_secret$auto(0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f)
r3 = bpf$auto(0x10, &(0x7f00000000c0)=@link_detach={r2}, 0x40)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r3)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2404c084) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2404c084)
socket(0x1e, 0x1, 0x0) (async)
r0 = socket(0x1e, 0x1, 0x0)
getsockname$auto(r0, &(0x7f0000000000)=@qipcrtr={0x2a, 0xfffffffc, 0x7fff}, &(0x7f0000000040)=0x5)
close_range$auto(0x2, 0xa, 0x0)
socket(0x11, 0x2, 0x300) (async)
r1 = socket(0x11, 0x2, 0x300)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8001)
bpf$auto(0x97, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc)
modify_ldt$auto(0x40000001, &(0x7f0000000100)="c5a2044e3826c2a9487cc82c4a9351332f37475e5a63d7c80000", 0x10)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x7, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
unshare$auto(0x20000080)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x840, 0x0) (async)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x840, 0x0)
ioctl$auto(r2, 0xc10c5541, 0xffffffffffffffff) (async)
ioctl$auto(r2, 0xc10c5541, 0xffffffffffffffff)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x880)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
mkdir$auto(0x0, 0xc001)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x3, 0x16, 0x1001, 0xffffffffffffffff, 0xf, 0x9, 0xb, 0x1, 0x7ff, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0x80000001]}, 0x0, 0x0)
executing program 4:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r0, 0x910, 0x5, 0x0, 0x6)
executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open_tree$auto(0x6, 0x0, 0x101) (async)
r1 = open_tree$auto(0x6, 0x0, 0x101)
setfsuid$auto(0xee01) (async)
r2 = setfsuid$auto(0xee01)
fchown$auto(0xffffffffffffffff, r2, 0x0)
lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xb2, 0x100000001, 0x101, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x9, 0x80, 0xbd, 0xc40, 0x4, 0xcd75, 0x8, 0x5723}) (async)
lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xb2, 0x100000001, 0x101, 0x9, 0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x8, 0x9, 0x80, 0xbd, 0xc40, 0x4, 0xcd75, 0x8, 0x5723})
landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x3, 0x2e1b}, 0xf7, 0x0) (async)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x3, 0x2e1b}, 0xf7, 0x0)
lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x8, 0x8, 0x7fff, 0xfda4, r2, r3, 0x0, 0x2, 0x0, 0x400, 0x8, 0x4, 0xfffffffffffffff7, 0x0, 0x4, 0x0, 0x2})
newfstatat$auto(r1, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x60, 0xe, 0x8, 0x81, r2, 0xffffffffffffffff, 0x0, 0x3b, 0x5, 0x4, 0x97, 0xb0c, 0x5, 0x10001, 0x2, 0x5, 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x334, r4, 0x100, 0x2, 0x25dfdbfd, {}, [@HWSIM_ATTR_TX_INFO={0x6, 0x7, [{0x2, 0x6}]}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x2}, @HWSIM_ATTR_FRAME={0x30d, 0x3, "a12d2445559b9f843d43f5dc2fd90460f51af59917c2e4c0c9b532c42ad767bc4b5fbe99d989323030fdd39ff20443348a8f006c2d83d8fbbd913c4044d6cd5a314494c1f133f12b2d13446a96a9a2521d9ca1d35f0b938224b87ebdf1e82c160602d8c3bbe18ee55e0c09ad8f1efd5509d6aeec08a5b9c8f4e64a6b66dec89a8e92998405359ed1c14e51212b19795d8962462defbd42377d6685cc6ccdbaecc838381dad51cc41cfce57e7d1b09009b281f953b81881f5b61f6beb2afb1b2e18f13ab2c462611adf05474aefade9568271d912f69ff9f2b6b24b8958e156c50f5c5d00e84716d32cf5a8c6b30a86b673e5edcdd44bea544a6c95b09d5bea7591b85d5f9112ba61c4a8551fd8d9fbd6cda595168f66cdccca9f89dc34dd90ac5d23d2958fe3a261a098aaa879e5a8e1f5b6fd17858e9660754d9d868a933f80dd0b08b36fcf562fb7042d1afd35ce0c34ce1f734f081786b7acbaa70bdcc70a2273afbd134919023fbb017c9871801d3d644c6c93c20867012701f2c3cbff0b4a7ddb953138a530763419a3bb0453a32f54519cab5c765167c4f9e6f411db80eff51213cfcb791ecf737cb0f3e899e6ea11a3dbaaf18062ef07ea17ce76b90935ee15f0e0e49622a77a01529f51d8f98fbd4144378e51c9feb991becb664e7a2a82a2505eb2cc251aba2eb589c6e998f80536ab6057e6b6a0f81962cac50ca52390ee6d2692135dc8264d06d1bc144ee19e20ce96a9c07b75a84254f390240f15e158453fed059ebd4ece82ed13480949ec2d0029662d830a6074dc10c66674e632fa8dcb182983817a1525b8708ce6d6997b442ca17e60cb131a6c41d7986f3a5913750eee8c55caad88e9800f3cbd24180cc780f80ae3b8727f2c54ff2dcb7cfbfe26f5c5f23865d4c6f3f606ff8a9a4ae909180a3462c2b2755e7a895e84e7c41642cf9d87a364ab2f8f909764f81d91c8721e624d9ed74d306d991fffa0e8c3d45ebc39d6df6ef8b47936cbcbc3dfe4db1e9599ad8b08f1e5683168eb668c28414679d65f12174fdbbdd745c3d8dd70af910ea0ea4a8ba0879b8244b2b2d03123e3fd2d99b585"}]}, 0x334}, 0x1, 0x0, 0x0, 0x4}, 0x4004004)
r5 = open$auto(&(0x7f00000001c0)='./file0\x00', 0x7, 0x9)
r6 = getpgid$auto(0xffffffffffffffff)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000580)={{@inferred=r6, 0x5, 0x5, 0x0, "e7233f501e533b6c58a1876bcc4edcbb38658d5ad9cac9df193d3c04352f6721c5a0d70770eb784535d71640", @raw=0x8}, 0x0, @integer=@value_ptr=&(0x7f0000000540)=0x1, "a3ef27c7d71136cfceb3c5b2cdef847e5d88beb9bd07517a831c2a9dc3740ccdd47e8f88bd6f0fae60cc6405ad3c0dc38b1cca2f437e85b1c9dbe579ea815f887381c1c259137cbe9850571129233f5201b05efb7680be61ed4ddcd15d9b534e6d2ef6db529215f2edf33c9f6a48412661ec13349a3d1dfc6f95f0c7bcbf0190"})
lgetxattr$auto(0xfffffffffffffffd, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r4, 0x800, 0x70bd3a, 0x25dfdbfe, {}, [@HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c081}, 0x40000) (async)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r4, 0x800, 0x70bd3a, 0x25dfdbfe, {}, [@HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c081}, 0x40000)
executing program 4:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x3)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x2000008000)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000340)='/dev/usbmon28\x00', 0x101800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
socket(0x29, 0x2, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000040)='+\x00', 0x74d)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0)
mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, &(0x7f00000000c0))
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x2, 0x0)
io_uring_register$auto(0x2, 0x16, &(0x7f0000000180), 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
r0 = socket(0x29, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x2000011)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r3=>r2, 0x7, 0x6}, 0x6, 0x100000)
r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2)
r5 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci5/hci5:200/power/control\x00', 0x40200, 0x0)
close_range$auto(r5, r1, 0x4)
writev$auto(r3, &(0x7f0000000140)={&(0x7f00000000c0)="a139ea22766b28f7aeafffb9f9ab3192ffec55d579ea160953dda210a80c3cddc69318512b3eed8499d35bb0f55768900e4f8aad3c2c9e6ce1d6e2dee2565c5f3572a3439eacd4b58fe166b8d3262f8f76534f98a6d74924fe24dc6006f0e17a330e", 0x8}, 0xc76)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032bbd7000fddbdf250a00000008000200", @ANYRES32=0x0, @ANYBLOB="08000100fbffffff08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0800eeea17c0f9000300060185a152fa02000000"], 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4)
sendmmsg$auto(0x3, 0x0, 0x29f, 0x3ec0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32, @ANYBLOB='\b\x00}'], 0x24}}, 0x4000000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x184, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x2}, @NL80211_ATTR_WIPHY_NAME={0x3f, 0x2, '/sys/devices/virtual/bluetooth/hci5/hci5:200/power/control\x00'}, @NL80211_ATTR_MLO_TTLM_DLINK={0x7d, 0x148, "be380ba6e4c8fd33b8e618ceeba104a45228097c3e16e3f4275737b6211ea83d4df01e2f9602223a9ee7fdfbf6d7334feba739fc12d446aa8647a414a887c4cf702915855eb1f2e160bfee8e77bb4af11be3b46444efa78a8cb923c14d71bcc137e88e511deccc97fa8938ceecce52d987f3c5bac597c5b89f"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x1ae}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "24bce48e44cf548d5a1aabf9d2637ad1164705ae9c8b49e4"}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, "6500a748"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x6b, 0x129, "41e832386cef527cdd28bff494ef41f77d5cc38e385362b1854db779f65c1481eb9b10abdebacf9c61697f462e10163312d57e02f5198c4faceb30c74951a64cb20078573e86c0c47f93cef2fd41a702476822fa0ceaba4927792cd8753584acd12f2ae304e00b"}]}, 0x184}, 0x1, 0x0, 0x0, 0x8001}, 0x40000000)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x4, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
read$auto_tracing_buffers_fops_trace(r6, &(0x7f0000000080)=""/123, 0x7b)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="6524c7aac083b05c1173a1174ad8f52418f12c", 0x13)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000480), 0x8440, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mlock$auto(0xfbe8, 0x4)
personality$auto(0xfffffffc)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0xc)
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, r0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x80000000, 0x80000000, 0x120000009b76, 0x7, 0x28001)
mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mprotect$auto(0x10000001ffff000, 0x8000000000000001, 0xb)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0)
read$auto(0x3, 0x0, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$auto_NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x20000080)
close_range$auto(0x2, 0xa, 0x0)
executing program 1:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.rpcsec.context/flush\x00', 0x60400, 0x0) (async)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
socket(0x2, 0x5, 0x0) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
r1 = getpgid(0x0)
pidfd_open$auto(r1, 0x0) (async)
socket(0xa, 0x3, 0x100) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x2a, 0x2, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
eventfd$auto(0x3)
eventfd$auto(0x0)
syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), r2)
pipe$auto(0x0) (async)
socketpair$auto(0x1e, 0x1, 0x4, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
nanosleep$auto(0x0, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
unshare$auto(0x20000080) (async)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0) (async)
r0 = io_uring_setup$auto(0x877, 0x0)
io_uring_enter$auto(r0, 0xcd00, 0xcd00, 0x7, 0x0, 0x8000000000000000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r1, 0x114, 0x1d, 0x0, 0x4)
executing program 3:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0)
mremap$auto(0x1, 0x101, 0x3fd6, 0x100, 0xd5f4)
r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x142, 0x0)
write$auto_random_fops_random(r1, &(0x7f0000000240)="3ced35a03ce59df9ec0df90827e77cc34afa0cc529932446ba93682709d8d931636ea09d50209b4c7e9d814e8c5bfeb63ae52886d4f014c99b84bd7e7a3c57c3442c3bc5a10674fc05a8b516b91880aa957ada7806f4827465f52cfb20ffeb157f3174c1a1cc1cb13916f8075e3e26df8db80a88619df4d7889f2918dd82c30d9ac1ba3d03127e28f31d896e18363803fedaa3e442283acb142028525c8665f2b8c2a26a017ada7490", 0xa9)
madvise$auto(0x0, 0x200, 0x15)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0)
select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40040)
getdents64$auto(0xffffffffffffffff, &(0x7f0000000900)={0x8, 0x6, 0x6, 0x2, "55f699a1ed1dfd84816e46d5a3142db6e186b2300308e64494f33ceb2785a2f01116a0cfb9b26afa5137fb7b9c3e18c023"}, 0x15fb)
sendmsg$auto_NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4440010}, 0xc, &(0x7f0000000b00)={&(0x7f0000000540)={0xb0, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_6GHZ_CAPABILITY={0x65, 0x125, "ccc2a42ec9349fde767bb4a3b0ba34cb78ea4d5c5df3817f700a447abf2476f6b0832cc3f3b4fa387099f497d6e7fa0b2d879f69fed120fcad29cc2889f88e982c80bb58934be9a780f28352b7904e619c1eda9a1b8eb22ae21ddf313314d4f19d"}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "1f85"}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x800}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x69, 0x0, 0x0, @pid}, @typed={0x8, 0x12c, 0x0, 0x0, @uid}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040001}, 0x30000045)
r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$auto_IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008800)
sendmsg$auto_IEEE802154_SCAN_REQ(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_ED_LIST={0x1f, 0x16, "4ca77dde9374b318db9802adaccfba287e5c55bcfc2b04e6d51bba"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x9}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0x7}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40805)
fcntl$auto(0x8000000000000001, 0x26, 0x8)
fcntl$auto(r3, 0x2007, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2540, 0x0)
move_pages$auto(0x0, 0x4000000000000009, 0x0, 0x0, 0x0, 0x1)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}})
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x701000, 0x0)
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/resource1\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/33, 0x21)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=<r1=>0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff7c, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0xae31e9c9e702e50}, 0x40001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video43\x00', 0x181782, 0x0)
setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6})
eventfd$auto(0x6)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x4e20}, 0x55)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy9/netdev:wlan1/stations/08:02:11:00:00:00/airtime\x00', 0x408000, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
io_uring_setup$auto(0x6, 0x0)
semctl$auto(0x80001ff, 0x804, 0x3, 0x5)
setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x10001)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000)
mremap$auto(0x0, 0x7, 0x10000000003fd6, 0x3, 0x20000000)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x0)
executing program 1:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0xeccdb0b86aeeec73, 0x0)
memfd_create$auto(0x0, 0x16)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
move_mount$auto(r0, 0x0, 0x4, 0x0, 0x176)
executing program 1:
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='jfs\x00', 0x8000009, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000003c9c3bef3be1f01650346b2d51c115b1868437ab82da54b9cfa8f4df20efeb0ecad3bc19f827dcb81551a066475c4beb92b6e31bb0", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf251400000005000b00060000000c00018008000100", @ANYRES32=r2, @ANYBLOB="080010000400000008000a0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4089c}, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r4, &(0x7f0000000400)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000440)="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", 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x163c}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = wait4$auto(0x0, &(0x7f0000000000)=0xf, 0x53e00000, &(0x7f0000000040)={{0x5, 0x9}, {0x6, 0x3fe000000000}, 0x6, 0xfffffffffffffffb, 0x1, 0x1, 0x0, 0x3, 0x2, 0xfffffffffffffffd, 0xe0, 0xb, 0x9, 0xf1, 0xe032, 0x5})
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x2, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
prctl$auto(0x59616d61, 0xdaffffffffffffff, r5, 0xfffffffffffff7ff, 0x8)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
executing program 3:
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x400, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
ioctl$auto(0x3, 0x5412, 0x38)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r0, 0xfffffffffffff000, 0x2)
socket(0x15, 0x5, 0x0)
select$auto(0x6, 0x0, &(0x7f00000000c0)={[0xbb0, 0x8101, 0x80, 0x1, 0xb, 0x4db11da, 0x3, 0x7f, 0x2, 0x0, 0x32, 0x1, 0x10000, 0x7, 0x6, 0xb83]}, 0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
executing program 1:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub2/xrun_injection\x00', 0x4a040, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = open(0x0, 0x22240, 0x155)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)
bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x55)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x100000, &(0x7f0000001d80)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x0, 0x3, 0x1)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
timer_create$auto(0xfffffff8, 0x0, 0x0)
timer_gettime$auto(0x0, 0x0)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto_safesetid_gid_file_fops_securityfs(r0, &(0x7f0000000380)="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", 0xffe)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/mtd-0/min_bytes\x00', 0xc0002, 0x0)
read$auto(0x3, 0x0, 0x80)
write$auto(0x3, 0x0, 0xfdef)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x7, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb2, 0xfffffffffffffffc, 0x1, 0x1000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x1000000, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x2]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
executing program 4:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/type\x00', 0x101900, 0x0)
bind$auto(r0, &(0x7f0000000080)=@sco={0x1f, @none}, 0x8)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(r0, 0x0, 0x7fffffffffffffff)
mmap$auto(0x0, 0xa, 0xdb, 0x1c, 0x5, 0x8000)
pidfd_send_signal$auto(0xfffffffffffffff3, 0xe31, 0xfffffffffffffffd, 0x0)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/power/control\x00', 0x80302, 0x0)
sendfile$auto(r2, r2, 0x0, 0x3)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0x2000000000000000, 0xffffffff, 0x2, 0x18000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2b, 0x1, 0x0)
socket(0x29, 0x1, 0x73)
r4 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x0, 0x0)
read$auto_tracing_stats_fops_trace(r4, &(0x7f0000000180)=""/166, 0xa6)
bind$auto(0x3, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0xd434193a0c40f2f}, 0x6a)
connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x55)
socket(0x11, 0x3, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
mincore$auto(0x1000, 0x8001, 0x0)
io_uring_setup$auto(0x2, 0x0)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x82000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x80, 0x0)
r2 = io_uring_setup$auto(0x1, 0x0)
io_uring_enter$auto(r2, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff)
fcntl$getown(r0, 0x9)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0)
mbind$auto(0x4, 0x5, 0x1, 0x0, 0x4, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/pfkey\x00', 0x40, 0x0)
pread64$auto(r3, 0x0, 0x200000000003, 0x2f4a3a23)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
setsockopt$auto(0x3, 0x1, 0x4, 0x0, 0x3)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{@raw=0x8001, 0x9, 0x6, 0x7d2, "368ddd0f663567272af0d1992aa6abe572c1888ad14f15d1e21f8c9834b02816719d6dbfd1fc239426bdde4b", @raw=0x8}, 0x5, 0x9, 0x7141, @raw=0x6, @integer64={0x3, 0x6, 0x7fffffff}, "617b0d8a56e979bd47a2d75daab659a6f85bccdaa12c05c9f8a2499c700bd2bad917de6e95b3b821369589c1a74bfedb3686eb0035c4638311d8a8b3415367bd"})
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
r4 = socket(0x1d, 0x2, 0x7)
connect$auto(r4, &(0x7f00000000c0)=@phonet={0x23, 0xa, 0x4, 0xe3}, 0x8)
write$auto(0x3, 0x0, 0x100082)
open(0x0, 0x40000, 0x0)
select$auto(0xd, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x1, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0x6, 0x4000000000000002, 0xd, 0x3, 0x58d, 0x7, 0x1000000006]}, 0x0, 0x0)
r5 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x103000, 0x0)
statmount$auto(&(0x7f0000000080)={0x7, @inferred=r5, 0x7, 0x1, 0xa806}, &(0x7f00000002c0)={0x7, 0x7f, 0xb, 0x80, 0x9, 0x3, 0xff43, 0x101, 0x2, 0x9, 0x5, 0x9, 0x80, 0x3e, 0x5, 0x9, 0x6, 0xfffffff8, 0xc, 0x2, 0x100, 0x5, 0x8, 0x3, 0x8aa0, 0x2, [0x2, 0x7, 0x9, 0xe, 0x6, 0x3, 0x200, 0x7, 0xe4f, 0x1, 0xcf3, 0x7, 0x1, 0xfffffffffffffff6, 0x3, 0xfffffffffffffff7, 0x6, 0x1, 0x101, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x7546, 0x9, 0x6, 0x0, 0x6, 0x4, 0x200, 0x200000, 0x10001, 0x1, 0x330, 0x4, 0x932b, 0x8, 0x0, 0x2, 0x9, 0x1, 0x100000001, 0x5, 0x10000, 0xe82, 0x6], "c29280121a92356de6ed965cf0ed56414ff4a9fac6c57fa712313b5d0f7ad5eef14cb7f343ed5693327ee54ff89630037be04061b0895da5d0e3c74f36c0fc8f1741a96e193134a080f7b2145f68dc428fa812c4c2bae54d013e2e8914c54a6c93247784131a801d150702323b4d16d618655c8ff8e5bf776761934c196986a1bc2f1219cf07f3807b164e6b41a1241a59c74a48187eb622c005"}, 0x4, 0x8)

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30, 30, 33, 30, 20, 20, 11, 26, 30, 26, 15, 11, 11, 28, 28, 30, 27, 26, 13, 30, 30, 5, 29, 13, 21, 30, 3, 30, 30]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mknod$auto(0x0, 0x1081, 0x3)
open(0x0, 0xa240, 0x15e)
socket(0xa, 0x801, 0x84)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
fstatfs$auto(0x3, 0x0)
shutdown$auto(0x200000003, 0x2)
setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x632b491c)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0xa00, 0x100)
sysfs$auto(0x2, 0x1e, 0x0)
executing program 0:
setrlimit$auto(0x2, 0x0)
mlockall$auto(0x7)
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0x10000}, 0x1, 0x0, 0x3, 0x9}, 0x100007}, 0x31cd3c7c, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_clone(0x21242011, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2)
prctl$auto(0x8, 0x8, r3, 0x7, 0x3)
ioctl$auto(0xffffffffffffffff, 0x7, r0)
rt_sigpending$auto(&(0x7f00000000c0), 0x8)
ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x7)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
socket(0x2, 0x3, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x2, 0x73)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sysfs$auto(0x2, 0x3, 0x0)
setsockopt$auto(0x3, 0x1, 0x3f, 0x0, 0x9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
executing program 0:
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x2, 0x14)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) (async)
write$auto(0x3, 0x0, 0x3f00)
r0 = socket(0x10, 0x2, 0x0) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x3f, 0x4909b6f8, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x81}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xe}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @HSR_A_IF1_AGE={0x8, 0x3, 0x2e}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) (async)
socket(0x2, 0x2, 0x88)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', <r2=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) (async)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf250a00000008000200", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000400000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="0800190004000000a659dd94ca2e27c087e2637c93bf3a037ad8861e9a1618dc7958e110e886"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40000080)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
mlock$auto(0x8001, 0xb)
ioperm$auto(0x800, 0x5, 0xd) (async)
ioperm$auto(0x800, 0x5, 0xd)
ioperm$auto(0x5, 0x8000000000000000, 0xea5c)
lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x5, 0x1, 0x3063, 0x3, 0xee00, 0xee00, 0x0, 0x368b, 0x4, 0x8f, 0xb, 0x83, 0x2, 0xffffffffffff7dc1, 0x3, 0x7117c580, 0x734})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x18, 0x5, 0x2) (async)
socket(0x18, 0x5, 0x2)
getpeername$auto(0x3, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(&(0x7f0000000040)={0x80000001, 0x1b15ae02, 0x0, 0xc6, 0x2b4e, 0x3f8a1795, 0x4c2, 0x5, 0xfffffffeffffffff, 0x2000, 0x8}, 0xd7ab)
r1 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
epoll_create$auto(0x4) (async)
epoll_create$auto(0x4)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
r2 = getsockopt$auto(0x100000006, 0x971c, 0x4, 0xfffffffffffffffe, 0x0)
write$auto_proc_setgroups_operations_base(r2, &(0x7f0000000000)="11cc74c8e9a1", 0x6)
mlock$auto(0x7c88, 0x7fff) (async)
mlock$auto(0x7c88, 0x7fff)
executing program 0:
openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000002100)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="840f0000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0xf84}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000)
mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x8000, &(0x7f0000001580))
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x200007, 0x8)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0x1, 0x0)
fanotify_init$auto(0x8c, 0x1)
fanotify_mark$auto(0x400000000000, 0x102, 0x9, 0x0, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
mmap$auto(0x800000000000, 0x12f, 0xdf, 0x9b72, 0x7, 0x1)
socket(0x1e, 0x5, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x1, 0x8000000000008000)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
listen$auto(0x3, 0xfffffffa)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000ac0), 0xffffffffffffffff)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon15\x00', 0x400, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x85, 0x0)
ioctl$auto(0x4000000000000c8, 0x400454e2, 0x3)
openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/block/nullb0/hctx0/cpu0/poll_rq_list\x00', 0x400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd2/mq/0/cpu_list\x00', 0xa0440, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:01.0/driver_override\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f00000003c0)=',l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_A\x87[\xd1{\xe6\x10\x1aX\xe0\xebQL\xe6&[\xa9X6\x86\x9c\a\x00\b\x00\x00\x00\x00\x00\x00\x00%m_\x96A\"\xdd\xe40\xa7\xc3\x00\x00\x00\x00\x00\x00\x00\x00\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\xbeC+$V\x91\xab\xf7\xf57\xe8\a\x15\xcb\x8e\xb1\n\x13HY\xf79b\xc2\x00\x82m\xdcz\x17\xfa\x8d\\\xe8(\x81\x96N\rZ\xf1E\x85\xe3#D\xfd\xa9\n3%p\xdc\xab\n%\x84\x1e\x05\x8cm\xe3\xd6\xa4\xab\x9fr\xc2\xef\xf4\tu\xdd\x16\xc3T\x1a\x11[@a\xa2\x19rO\xeb\xb4d\xc4\f=)\xba\x19\x83\x87+\x00'/206, 0x1000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setpriority$auto(0x2, 0x0, 0x200)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r0)
sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048)
openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000006a80)='/sys/kernel/tracing/timestamp_mode\x00', 0x42, 0x0)
executing program 32:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000ac0), 0xffffffffffffffff)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon15\x00', 0x400, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x85, 0x0)
ioctl$auto(0x4000000000000c8, 0x400454e2, 0x3)
openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/block/nullb0/hctx0/cpu0/poll_rq_list\x00', 0x400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd2/mq/0/cpu_list\x00', 0xa0440, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:01.0/driver_override\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f00000003c0)=',l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_A\x87[\xd1{\xe6\x10\x1aX\xe0\xebQL\xe6&[\xa9X6\x86\x9c\a\x00\b\x00\x00\x00\x00\x00\x00\x00%m_\x96A\"\xdd\xe40\xa7\xc3\x00\x00\x00\x00\x00\x00\x00\x00\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\xbeC+$V\x91\xab\xf7\xf57\xe8\a\x15\xcb\x8e\xb1\n\x13HY\xf79b\xc2\x00\x82m\xdcz\x17\xfa\x8d\\\xe8(\x81\x96N\rZ\xf1E\x85\xe3#D\xfd\xa9\n3%p\xdc\xab\n%\x84\x1e\x05\x8cm\xe3\xd6\xa4\xab\x9fr\xc2\xef\xf4\tu\xdd\x16\xc3T\x1a\x11[@a\xa2\x19rO\xeb\xb4d\xc4\f=)\xba\x19\x83\x87+\x00'/206, 0x1000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setpriority$auto(0x2, 0x0, 0x200)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r0)
sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048)
openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000006a80)='/sys/kernel/tracing/timestamp_mode\x00', 0x42, 0x0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = getpid()
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x800)
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0xe0080, 0x0)
openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_I2C_RDWR(r1, 0x707, 0x0)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f0000000080)="632d1bfe595046ab5c98399adf270600de80fee6009ca2ac32428953fffd000000000000e0ffffff13cc853e96caa75ec5b8c9a340224b1fad0a1afd4c4633217eb6eafea273c04e1ebe0a187d285c3c80ea6f5e", 0x54)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@nested={0x8, 0xb5, 0x0, 0x1, [@nested={0x4, 0x3ffb}]}, @typed={0xc, 0x10f, 0x0, 0x0, @u64=0x6}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000084)
executing program 2:
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x800)
write$auto(0x3, 0x0, 0xfffffdef)
prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
userfaultfd$auto(0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = socket(0xa, 0x801, 0x84)
socket(0xa, 0x3, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=r0, 0x4, @old_prog_fd=r1}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
write$auto(0x3, 0x0, 0x1)
executing program 2:
statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x0, 0x5ae, 0x5, 0x7, 0x4, 0x800, 0x4000010, 0x1, 0x4, 0x7, 0x9, 0x8, 0x9, 0x1ff, 0x7698, 0x5, 0x10000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x10001, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20000000000000, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfbfffffffffffffc, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x4, 0x0, 0x9]}, 0x40000000008, 0x0) (async)
r0 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0x301000, 0x0)
utimes$auto(0x0, &(0x7f0000000040)={0x800, 0x591}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) (async)
madvise$auto(0x0, 0x9, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
select$auto(0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64)
socket(0x1, 0x1, 0x1) (async)
mmap$auto(0x7, 0x8000000000000, 0x3, 0x910, r0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x264a80, 0x0) (async, rerun: 64)
get_robust_list$auto(0x0, 0x0, 0x0) (async, rerun: 64)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r1, 0x10000000084, 0x4, 0x0, 0x4) (async)
capget$auto(0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84) (async)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) (async)
readv$auto(0x0, 0x0, 0x3)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video34\x00', 0x123000, 0x0)
ioctl$auto_v4l2_fops_v4l2_dev(r2, 0x80085617, 0x0) (async)
close_range$auto(r2, r2, 0x30a1)
mmap$auto(0x0, 0x10000e983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
io_uring_setup$auto(0x1, 0x0) (async, rerun: 32)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (rerun: 32)
mincore$auto(0x3, 0x5, &(0x7f0000000000)='+]%\x00') (async, rerun: 32)
socket(0x2, 0xa, 0x80000001) (rerun: 32)
executing program 2:
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/0000:00:02.0/internal_clients\x00', 0x2000, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/1:4/max_ratio_fine\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000004180)=""/104, 0x68)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x18, 0x80000, 0x600)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x3, 0x0)
eventfd$auto(0x3)
r1 = socket(0xa, 0x2, 0x88)
r2 = socket(0x2a, 0x2, 0x1)
connect$auto(r2, &(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80)
connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x55)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=<r3=>0x4, 0x8, @old_map_fd}, 0xa3)
mmap$auto(0x3, 0x40009, 0xdf, 0x9b72, r0, 0xfffffffffffffffd)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x2040, 0x0)
sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800)
r5 = setfsuid$auto(0xee01)
fchown$auto(r4, r5, 0x0)
setpriority$auto(0x3, r5, 0x8)
read$auto(0x3, 0x0, 0x6)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
timer_create$auto(0x3, 0x0, 0x0) (async)
ppoll$auto(&(0x7f0000000040)={r1, 0x7ff}, 0x7, 0x0, 0x0, 0x8)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(0x0, 0x1000)
r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/uid_map\x00', 0x5cebbfbc3e3a7931, 0x0)
pread64$auto(r0, &(0x7f0000000080)='/proc/thread-self/uid_map\x00', 0x2, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x0, 0x1, 0x6}]}, 0xf8}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb781}, @CTRL_ATTR_FAMILY_NAME={0x1e, 0x2, '/proc/thread-self/uid_map\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40000)
executing program 33:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(0x0, 0x1000)
r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/uid_map\x00', 0x5cebbfbc3e3a7931, 0x0)
pread64$auto(r0, &(0x7f0000000080)='/proc/thread-self/uid_map\x00', 0x2, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x0, 0x1, 0x6}]}, 0xf8}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb781}, @CTRL_ATTR_FAMILY_NAME={0x1e, 0x2, '/proc/thread-self/uid_map\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40000)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x3)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x2000008000)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000340)='/dev/usbmon28\x00', 0x101800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
socket(0x29, 0x2, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000040)='+\x00', 0x74d)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0)
mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, &(0x7f00000000c0))
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x2, 0x0)
io_uring_register$auto(0x2, 0x16, 0x0, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 4:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x3)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x2000008000)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000340)='/dev/usbmon28\x00', 0x101800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
socket(0x29, 0x2, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000040)='+\x00', 0x74d)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0)
mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, &(0x7f00000000c0))
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x2, 0x0)
io_uring_register$auto(0x2, 0x16, &(0x7f0000000180), 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
r0 = socket(0x29, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x2000011)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r3=>r2, 0x7, 0x6}, 0x6, 0x100000)
r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2)
r5 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci5/hci5:200/power/control\x00', 0x40200, 0x0)
close_range$auto(r5, r1, 0x4)
writev$auto(r3, &(0x7f0000000140)={&(0x7f00000000c0)="a139ea22766b28f7aeafffb9f9ab3192ffec55d579ea160953dda210a80c3cddc69318512b3eed8499d35bb0f55768900e4f8aad3c2c9e6ce1d6e2dee2565c5f3572a3439eacd4b58fe166b8d3262f8f76534f98a6d74924fe24dc6006f0e17a330e", 0x8}, 0xc76)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032bbd7000fddbdf250a00000008000200", @ANYRES32=0x0, @ANYBLOB="08000100fbffffff08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0800eeea17c0f9000300060185a152fa02000000"], 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4)
sendmmsg$auto(0x3, 0x0, 0x29f, 0x3ec0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32, @ANYBLOB='\b\x00}'], 0x24}}, 0x4000000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x184, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x2}, @NL80211_ATTR_WIPHY_NAME={0x3f, 0x2, '/sys/devices/virtual/bluetooth/hci5/hci5:200/power/control\x00'}, @NL80211_ATTR_MLO_TTLM_DLINK={0x7d, 0x148, "be380ba6e4c8fd33b8e618ceeba104a45228097c3e16e3f4275737b6211ea83d4df01e2f9602223a9ee7fdfbf6d7334feba739fc12d446aa8647a414a887c4cf702915855eb1f2e160bfee8e77bb4af11be3b46444efa78a8cb923c14d71bcc137e88e511deccc97fa8938ceecce52d987f3c5bac597c5b89f"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x1ae}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "24bce48e44cf548d5a1aabf9d2637ad1164705ae9c8b49e4"}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, "6500a748"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x6b, 0x129, "41e832386cef527cdd28bff494ef41f77d5cc38e385362b1854db779f65c1481eb9b10abdebacf9c61697f462e10163312d57e02f5198c4faceb30c74951a64cb20078573e86c0c47f93cef2fd41a702476822fa0ceaba4927792cd8753584acd12f2ae304e00b"}]}, 0x184}, 0x1, 0x0, 0x0, 0x8001}, 0x40000000)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x4, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
read$auto_tracing_buffers_fops_trace(r6, &(0x7f0000000080)=""/123, 0x7b)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="6524c7aac083b05c1173a1174ad8f52418f12c", 0x13)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000480), 0x8440, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mlock$auto(0xfbe8, 0x4)
personality$auto(0xfffffffc)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0xc)
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, r0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x80000000, 0x80000000, 0x120000009b76, 0x7, 0x28001)
mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mprotect$auto(0x10000001ffff000, 0x8000000000000001, 0xb)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0)
read$auto(0x3, 0x0, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$auto_NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x20000080)
close_range$auto(0x2, 0xa, 0x0)
executing program 1:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.rpcsec.context/flush\x00', 0x60400, 0x0) (async)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
socket(0x2, 0x5, 0x0) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
r1 = getpgid(0x0)
pidfd_open$auto(r1, 0x0) (async)
socket(0xa, 0x3, 0x100) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x2a, 0x2, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
eventfd$auto(0x3)
eventfd$auto(0x0)
syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), r2)
pipe$auto(0x0) (async)
socketpair$auto(0x1e, 0x1, 0x4, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
nanosleep$auto(0x0, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
unshare$auto(0x20000080) (async)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0) (async)
r0 = io_uring_setup$auto(0x877, 0x0)
io_uring_enter$auto(r0, 0xcd00, 0xcd00, 0x7, 0x0, 0x8000000000000000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r1, 0x114, 0x1d, 0x0, 0x4)
executing program 3:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0)
mremap$auto(0x1, 0x101, 0x3fd6, 0x100, 0xd5f4)
r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x142, 0x0)
write$auto_random_fops_random(r1, &(0x7f0000000240)="3ced35a03ce59df9ec0df90827e77cc34afa0cc529932446ba93682709d8d931636ea09d50209b4c7e9d814e8c5bfeb63ae52886d4f014c99b84bd7e7a3c57c3442c3bc5a10674fc05a8b516b91880aa957ada7806f4827465f52cfb20ffeb157f3174c1a1cc1cb13916f8075e3e26df8db80a88619df4d7889f2918dd82c30d9ac1ba3d03127e28f31d896e18363803fedaa3e442283acb142028525c8665f2b8c2a26a017ada7490", 0xa9)
madvise$auto(0x0, 0x200, 0x15)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0)
select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40040)
getdents64$auto(0xffffffffffffffff, &(0x7f0000000900)={0x8, 0x6, 0x6, 0x2, "55f699a1ed1dfd84816e46d5a3142db6e186b2300308e64494f33ceb2785a2f01116a0cfb9b26afa5137fb7b9c3e18c023"}, 0x15fb)
sendmsg$auto_NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4440010}, 0xc, &(0x7f0000000b00)={&(0x7f0000000540)={0xb0, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_6GHZ_CAPABILITY={0x65, 0x125, "ccc2a42ec9349fde767bb4a3b0ba34cb78ea4d5c5df3817f700a447abf2476f6b0832cc3f3b4fa387099f497d6e7fa0b2d879f69fed120fcad29cc2889f88e982c80bb58934be9a780f28352b7904e619c1eda9a1b8eb22ae21ddf313314d4f19d"}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "1f85"}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x800}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x69, 0x0, 0x0, @pid}, @typed={0x8, 0x12c, 0x0, 0x0, @uid}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040001}, 0x30000045)
r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$auto_IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008800)
sendmsg$auto_IEEE802154_SCAN_REQ(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_ED_LIST={0x1f, 0x16, "4ca77dde9374b318db9802adaccfba287e5c55bcfc2b04e6d51bba"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x9}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0x7}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40805)
fcntl$auto(0x8000000000000001, 0x26, 0x8)
fcntl$auto(r3, 0x2007, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2540, 0x0)
move_pages$auto(0x0, 0x4000000000000009, 0x0, 0x0, 0x0, 0x1)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}})
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x701000, 0x0)
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/resource1\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/33, 0x21)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=<r1=>0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff7c, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0xae31e9c9e702e50}, 0x40001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video43\x00', 0x181782, 0x0)
setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6})
eventfd$auto(0x6)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x4e20}, 0x55)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy9/netdev:wlan1/stations/08:02:11:00:00:00/airtime\x00', 0x408000, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
io_uring_setup$auto(0x6, 0x0)
semctl$auto(0x80001ff, 0x804, 0x3, 0x5)
setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x10001)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000)
mremap$auto(0x0, 0x7, 0x10000000003fd6, 0x3, 0x20000000)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x0)
executing program 1:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0xeccdb0b86aeeec73, 0x0)
memfd_create$auto(0x0, 0x16)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
move_mount$auto(r0, 0x0, 0x4, 0x0, 0x176)
executing program 1:
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='jfs\x00', 0x8000009, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000003c9c3bef3be1f01650346b2d51c115b1868437ab82da54b9cfa8f4df20efeb0ecad3bc19f827dcb81551a066475c4beb92b6e31bb0", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf251400000005000b00060000000c00018008000100", @ANYRES32=r2, @ANYBLOB="080010000400000008000a0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4089c}, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r4, &(0x7f0000000400)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000440)="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", 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x163c}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = wait4$auto(0x0, &(0x7f0000000000)=0xf, 0x53e00000, &(0x7f0000000040)={{0x5, 0x9}, {0x6, 0x3fe000000000}, 0x6, 0xfffffffffffffffb, 0x1, 0x1, 0x0, 0x3, 0x2, 0xfffffffffffffffd, 0xe0, 0xb, 0x9, 0xf1, 0xe032, 0x5})
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x2, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
prctl$auto(0x59616d61, 0xdaffffffffffffff, r5, 0xfffffffffffff7ff, 0x8)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
executing program 3:
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x400, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
ioctl$auto(0x3, 0x5412, 0x38)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r0, 0xfffffffffffff000, 0x2)
socket(0x15, 0x5, 0x0)
select$auto(0x6, 0x0, &(0x7f00000000c0)={[0xbb0, 0x8101, 0x80, 0x1, 0xb, 0x4db11da, 0x3, 0x7f, 0x2, 0x0, 0x32, 0x1, 0x10000, 0x7, 0x6, 0xb83]}, 0x0, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
executing program 1:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub2/xrun_injection\x00', 0x4a040, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = open(0x0, 0x22240, 0x155)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)
bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x55)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x100000, &(0x7f0000001d80)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x0, 0x3, 0x1)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
timer_create$auto(0xfffffff8, 0x0, 0x0)
timer_gettime$auto(0x0, 0x0)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto_safesetid_gid_file_fops_securityfs(r0, &(0x7f0000000380)="4a5a2ef40e9ea3aa99b7c2754b1af36515dc8f4ee2f5300330a4bd4e58bbc012d91d19f7e52d52486c5016dd5dd0ac6ba4e32551b0a1fa61fd74d3ec8cd175af91ef70df99e7ca39014d12ffead41c35fe598a5aa3c31600359f56a931261c81ce4902da26c0f9280acd684823ff326e54cba2a0b3c016004ce06b216d424e0187ff7c5cbdb8932aa7d5c7a8124b77b33843a9ffd5b03184c053a184492b65cd5faefd5fc508abde7f2e903fcf1780000f972169eabef9fb3dbe6e99a9e69ff6e1575b7381988f150dcbd0fae582901cd0060c65a258df8d4e70faab33fb86ddf832ec4f03a89cdf9b1a32c325455b555e4f5f5ca9658cd9401a1ea3f9dab8e0b68e67f7b52db44cc4313334b3564c673adc1f9dfd4cb0faacd609bbc15fe6c1c42463e6d6d03891f3e2838b0b9e72719f77ef76f70862296817c097d90d680d74bdab8a130af7eecc2e4bc18df08ca511f93486408e79b1024e835180f1c7330b50c28b4b43419f621eb742ba79b0b06cc36237792e5909612caa41df558b1531186c24397de15f0d61f433e1e5ff2439ea55f5fe6f4b2d678eb2a7928ac8d6c2f654a17cc66601eb861856578948f9874827633407588e351766870a9b455140b0df1c3615dd5a6b210763641913196966b338b48d8150dcbc2428ff5f3890c66b834c44c201324b15f34f085fee9e489787767bf2aa58602a407b6e791160292f48313fb0b39c0c8c78bafe7e1227b41cb91d519fe85891f97646c6004bf5d02490db879fc99b36a0e9f3222f713c14bbd75f6d1c9058549325ee1ed0efb9ab4bc1430db4de943919dedf91abb6c93b6fc62687d91fa0e7ebd2d963e282d6003fee4324e3391368c5c4cf6c7457dd109b9ea4817b4772431f6c10fd7b8c8acd86ba4864cb76c65a770a08118bc030f9566a1dc634dfdfd3e14e810456959114a9c9efdcc8a84c7a7a8d9d7cafc0c7304c51f86592c69ba0412f497d730b16438a234d232e2f635c9d6089873c0a991ce25092dc4d152a3bd74274a6b31a9b18e6c370f148b82826a4643673761270d3706b58fd7647c285ed9a3c7b6e2c4e4d45f74d7f27d12987f16a0f93ef7a20f84a9932f038acf05b7a2621a19d74f47e0f8f3bb6e1b4f62461f45bc8571d1bfcdc8a3334662c180b314c1cefa80c6a6e010adb0709fc2c7286564b3379254e090aa86aa99a8e1eaf57bcd8b9498b6d57a2677c543b25e3d11a1f862fb04abdb31fddec90d5dde5e97281852e53351c0173827574b90d3a54c7ab77ae6fec2c01bdfcb250c6f5dfdd1a0fe3157a9935eda4e17e28bd22ab0e1fa2dc7191fca68a49300a7d567aaa9bfdcc0e8f44e2cc17f3d89c3ca73129ba5883eac32d2378d9a6c19c7b7d38908f07df3fdf13523bb289078a10bead228b2f0a235aa6d753856edbc1df3c751fb6d84bf7c03b4dd5672811e71e637732489e44f1c6c367b49774a82c54d7b60641ed7874abd940bad0d866cf47ce92181262de8b3bb4b6de5a314844c9373191b24889f4bb01e8e4877f29cef63598782dff81557bdd475502f67786ceb1625c57b202c5c544da4e7d513ce71b5c379aab2711ba57cc703f8911c0b81b3c93b6dd4760e6877ba51ae244fb648b5a701486d366a3b5a0904ad7d9d2ef92051161cd7ab5c9489e299777c2010a662f5b2ef8bcfaa08ecc44d4a4b3cb6857485d0997e1f805bff468fde6798d54edb669e27060cc3882e621f367b6975918831975482668816550b7f1fe94ee2568f2439208990ff1caa0434b921ca7cdbeef9d8103dab10f7aef37ecfd4f5db88a8889ef9a4476c8a680027d22b9217779e5ff177378e8c165d2d9ab3ebac2cc5a833a12a4a17700b1b5725d9d216b421d5df8cdef54d7843e554fcec51ea23a8d81605735177efd6acd72bb54f2d826443df71e66c73cfcc3a82b949afa43f7ad9fdbea4dc1c296b44065d29916842c20c74d9215d249b257cbc0ef4f194d7799d033b718d1a3293ea596a1f76c7730cbb7727c46d3ef554cc20bfe4be2b5daf98f3283e824c5e9436dec33a21f2daaa4f54d0a85b494b3ea19399b770c301fa47c2c2f24b66828b509b21b1dc3661d2acb9c5355f1e6fb8cb8022367e92b0c1226bd6e3df39e17f1527cb8aefb463fec5ed121ad177c246c64d530f0739acf8be19baca1a5b723a17695c1362d59da0e043224ed6652050c894c1970fa565e1eab0eb970f763acee884ab351ff573e4a9213ca1a83e0571303f025e6a4ac7c00ca7f84fdfa78312a16a9d53da0e0827602a11630810e3f39b8a3dae466daf789bb6f40bdaab903c02b5cc209432697ce63a61cd7c6366d6ff5fa35ab00e6ccfbb2e05ff5f35d84670daa1a21985e16afcb61e500a2c55e2b26891e21203b6d656430a07bc7286b3293170df5c268838b5ceb8936ebe98b2d1dbc6984df064806dc8ff831976feb7f5a59c3ad38c44b5c38330976859defa35b24945f1828f1779adf2326bb949b9b1c02d9fc3ad9be1224888be8f2bce6b51be9f47baf05ad6e478ccadda7b80bf0b0397ae4bcdbf217e9eb338d9aab771709737b3bc382469177e7a384ba9fd4eb2e7cb4d008546fe1372156dfd878c9fda67a48474025c0308e251c632975abf7564f82428d716a6b9e4c835fae09f2206203a6259a596a0afff13b5aa649b4c03b35c59306dd54dc88d3e3b9a56c1ed59ad69b7dcb10811b09764abe4fc6e723e252985716430329f380d0b3cc789cd9b6dc6f39c3d2eb970f2397fc7f9f302c9de2dd10f9477fab5d829668b8c3eb145e28b20739b916236747394af8819ecb93f0557f090b260f536fa5ca7b4ac6b7404aa9dcfaaf5e1c8ff04bdb1aafdb943afc1b01d749f4a9ea1625f61510e05ea61b4dbcb214d34d44a771afaedb0053a14e8c13a85aaaa2bb52127e715ba2242a4cb18614db806e44180fe9f5c26180c925903fa1e1ac112eca3c956ab52b8ced51e39efc1567969fa65e4a7eef6a1b7a5f28438d7f121e02afd233e04ee110cc873ff6dd5dfc4c074aed2916d1aa68b62439d47e75676f3d24dfa2acab563d0d55a6bfea64fcffea4143da1c525ba71f4d289bd5095b142fd490ce9fa6d9ea1407393c039244cea9777eca2bfea3b2838c1910194649ee392554180abfd8e9cf77c644eaf0d03b1a9e3f4021bb8416702131f62ed08879c9841e008166f093c6c89b5666d507d9f0b3649928ffb1d4625b6c413b115e297d74f0eda178da011d581d3c3c45af58d98a92ec1e81437476b411102435a02f39cede5c9939091d100bd26b1af0608632b483aaee5ddbfd7eedf9e94a6038b9a14d8f9587e566bca55e85a968935947f152f0f7290651488ec74e1e77ba288b1e2b8e510764a585056edad8493bee59abcc8d7aeceb3f9149466bfbd2cf75e6373ad887d48de9b4dc325ffc57c507df56e0a89941809784bac225af145a46342141211c53e54f0121679469c0953ae9394b37ba434a9d303a974ac7ae6efee21a2cd62dd41e1f05b529b1b469835049e07480fa62bf7f141f940bcd213ecc590ffd57e5ad40901eed0c9efd06afec92f014426ec6688ad3e55e20b19969fffa5ac0663111c4d967b0d194301427a96d4d1571708dd2a477e3fb691784bcf00cda6ff24bb00a95a19d28bc4ac93a5807767219d6dd37059c0e668adc774100b4f5d77ffff4b4151b4727caf499a97cc7a9ed29a944627aa1b9c1605df25c3d435d174906080a64f864db8300324a086d328fda3c2c07b846d391828332f4ddaaabbd4bfed58e1069defacd80d7523eb9fe4724ce4a350eb3da6d7201dd03d736aa9375134e6d0d85d59e6021c57bf0e5da7f8b9f0bbe00ca604aab22e8d2b33c990c7e1808255a6ab7798d2724abba062d0855edff7f86d629eefe2f29d1f38d6dbf172ca6b9fc8d6ac554f5311d3eb69b52d8733808e7af6c16a7740762c31b6681e2e114a0539eda1f9b2344dd38a872d98a9230b5775cf4cae2ad765d16e293a12d7b2f65bb74efaa3f540754f80baa1ab01306352106c3cf1fea1a52b4228c95739a3dcecbcb65aabcf1b17e1af0675a71a8ffa5887776b4690606f8d3fa3c9adaca221f6498fad7fe9da2a2b416cdf00468884b7fdaac75eba836d27a413b10ec74763625c851a6fc9c74937b0f5e2f67395cb08b8e56d8e417e00f0ce0078edcacb3b1f2b3125f16da94374bc8899b8b9f19a0b69b4c24bcd7dced060f1068d19303b14305383b22f55dd72c5f0826866b0347b7a4b123755ff69a91f14005902a7ae834630889eb55f531b0496e165858ad3d3db64f8f75684f77515ff8bc6e2c58880a0917017f6709414bfc669e3b262cb2d18d3525e6499242c052d448065fb14fbb2d86a57f4c31c6a6f657139c903aaf7ada08fa776193d4ae070901005e5397540f1262cc269907e5a436cf043902c7a1b129865b555ab07875b0ce8c826dd90d39490ae47d2daf65200fad0b689cc796489363ee825993af8f86bf3bb5721eed1c0369bfb5e28edaf1b455e7c9ab7bd3332edc8274dd754871e7de2f5ced71cbd3b521cd7dc15dd7b5cd3037210f2d53ab7572bc0936d17aa8e0d2a193aa7e981a77d024ee22e45a399eeba5fd9bbcf71797bbbf55e93b81d81c53255bf914b1959f7ea34db13453903965d4db5f889c0ed07a8ac959cc675adde329a7c6bac21354afb13ae43f5d2cdf835c7aea59526b53c323683abd7ee509e5b7444b871d8807c24c0bf54c48ed5b2a3605de3725e51c84d5a91d245314b66e404249373ce4a05df0a97fd28a4959e17538673b47c025b9d6d3885d224c2619b119da56657cd0c4aaa0329259eb4e3b61bc38e43601042bb85adb4492f9c13d293ace583b86f2d3b8f5d7529e5aa937d342ea9425b0eb2353da0897b1668727ef2597764639deeacd34f2f866afcc58862e0176e942871f27d37594571450a8fb5a4073c64d82730f5facebe84899e43a2ade2a59459062785ac19d25964a8b5f1c34c08549bd945734e9654be007848c820c85a2086d8396845cbd145b1e1611878c513cae6ee7551f00a495f0f5688343487c560f3711878e27ea4e6d94b017602b2d5f8ba776b9813f661c870c8f50bb8c022bceab7c2142a5863e89f3eb54b0ee129b2e6e07dacadace6ec12a0fc7ee8087ee8b7415c63f21d1328206c80ecdc071445fc1a521e015d45a88eb623fddcbabe39ba1b60e3ce2f2e52e33549a120cf311bca78378e920823ae90d5ece64e9483244806a354cc98559a75ca99627d93ea33713b849ede1ed3be7358c61f2ec392770bf393f28e56b6d177e58dbf4070eb0324d6c9c5582dbb467c25c109821d7bc5ab170f569f25b7a6f08d599ad48cc465daf50185be99b8fd9eb31540b9707f4b326400835a931d632be36e07af4d85958293a0157e23473e28c553720b5dffcb1212bf18bf17a4d75c397fb2dc2e197cde05cffaa728223ed593aaeb21c2344f64667cca3bcc03e39db31ea49cf3d98cb4d4fc9d377f91677eec7c6b4398b216ba9f9d1349742294ba554b78da9439b433a2650aa7f7ffd11066242f82713dd9822e50d5b9d93b9636da2a68b65e834ea5eedc203882be040586a5a784a32d82e417c2c950d7496f0584da0189b252cd3a17014b41e54cfb388d1e2fd6221ffc8f1e98bd14a043a6201e7a53b4852b5f83569da72bb3e56bb52df1514d83d10b55e05c6789914d576a4eb96def05c5daf2d6a66ccbc91b524a7db1784416e7d3280032a20f29a021701db56ec82de40d29e", 0xffe)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/mtd-0/min_bytes\x00', 0xc0002, 0x0)
read$auto(0x3, 0x0, 0x80)
write$auto(0x3, 0x0, 0xfdef)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x7, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb2, 0xfffffffffffffffc, 0x1, 0x1000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x1000000, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x2]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
executing program 4:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/type\x00', 0x101900, 0x0)
bind$auto(r0, &(0x7f0000000080)=@sco={0x1f, @none}, 0x8)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(r0, 0x0, 0x7fffffffffffffff)
mmap$auto(0x0, 0xa, 0xdb, 0x1c, 0x5, 0x8000)
pidfd_send_signal$auto(0xfffffffffffffff3, 0xe31, 0xfffffffffffffffd, 0x0)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/power/control\x00', 0x80302, 0x0)
sendfile$auto(r2, r2, 0x0, 0x3)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0x2000000000000000, 0xffffffff, 0x2, 0x18000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2b, 0x1, 0x0)
socket(0x29, 0x1, 0x73)
r4 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x0, 0x0)
read$auto_tracing_stats_fops_trace(r4, &(0x7f0000000180)=""/166, 0xa6)
bind$auto(0x3, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0xd434193a0c40f2f}, 0x6a)
connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x55)
socket(0x11, 0x3, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
mincore$auto(0x1000, 0x8001, 0x0)
io_uring_setup$auto(0x2, 0x0)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x82000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x80, 0x0)
r2 = io_uring_setup$auto(0x1, 0x0)
io_uring_enter$auto(r2, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff)
fcntl$getown(r0, 0x9)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0)
mbind$auto(0x4, 0x5, 0x1, 0x0, 0x4, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/pfkey\x00', 0x40, 0x0)
pread64$auto(r3, 0x0, 0x200000000003, 0x2f4a3a23)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
setsockopt$auto(0x3, 0x1, 0x4, 0x0, 0x3)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{@raw=0x8001, 0x9, 0x6, 0x7d2, "368ddd0f663567272af0d1992aa6abe572c1888ad14f15d1e21f8c9834b02816719d6dbfd1fc239426bdde4b", @raw=0x8}, 0x5, 0x9, 0x7141, @raw=0x6, @integer64={0x3, 0x6, 0x7fffffff}, "617b0d8a56e979bd47a2d75daab659a6f85bccdaa12c05c9f8a2499c700bd2bad917de6e95b3b821369589c1a74bfedb3686eb0035c4638311d8a8b3415367bd"})
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
r4 = socket(0x1d, 0x2, 0x7)
connect$auto(r4, &(0x7f00000000c0)=@phonet={0x23, 0xa, 0x4, 0xe3}, 0x8)
write$auto(0x3, 0x0, 0x100082)
open(0x0, 0x40000, 0x0)
select$auto(0xd, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x1, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0x6, 0x4000000000000002, 0xd, 0x3, 0x58d, 0x7, 0x1000000006]}, 0x0, 0x0)
r5 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x103000, 0x0)
statmount$auto(&(0x7f0000000080)={0x7, @inferred=r5, 0x7, 0x1, 0xa806}, &(0x7f00000002c0)={0x7, 0x7f, 0xb, 0x80, 0x9, 0x3, 0xff43, 0x101, 0x2, 0x9, 0x5, 0x9, 0x80, 0x3e, 0x5, 0x9, 0x6, 0xfffffff8, 0xc, 0x2, 0x100, 0x5, 0x8, 0x3, 0x8aa0, 0x2, [0x2, 0x7, 0x9, 0xe, 0x6, 0x3, 0x200, 0x7, 0xe4f, 0x1, 0xcf3, 0x7, 0x1, 0xfffffffffffffff6, 0x3, 0xfffffffffffffff7, 0x6, 0x1, 0x101, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x7546, 0x9, 0x6, 0x0, 0x6, 0x4, 0x200, 0x200000, 0x10001, 0x1, 0x330, 0x4, 0x932b, 0x8, 0x0, 0x2, 0x9, 0x1, 0x100000001, 0x5, 0x10000, 0xe82, 0x6], "c29280121a92356de6ed965cf0ed56414ff4a9fac6c57fa712313b5d0f7ad5eef14cb7f343ed5693327ee54ff89630037be04061b0895da5d0e3c74f36c0fc8f1741a96e193134a080f7b2145f68dc428fa812c4c2bae54d013e2e8914c54a6c93247784131a801d150702323b4d16d618655c8ff8e5bf776761934c196986a1bc2f1219cf07f3807b164e6b41a1241a59c74a48187eb622c005"}, 0x4, 0x8)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30, 30, 33, 30, 20, 20, 11, 26, 30, 26, 15, 11, 11, 28, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mknod$auto(0x0, 0x1081, 0x3)
open(0x0, 0xa240, 0x15e)
socket(0xa, 0x801, 0x84)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
fstatfs$auto(0x3, 0x0)
shutdown$auto(0x200000003, 0x2)
setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x632b491c)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0xa00, 0x100)
sysfs$auto(0x2, 0x1e, 0x0)
executing program 0:
setrlimit$auto(0x2, 0x0)
mlockall$auto(0x7)
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0x10000}, 0x1, 0x0, 0x3, 0x9}, 0x100007}, 0x31cd3c7c, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_clone(0x21242011, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2)
prctl$auto(0x8, 0x8, r3, 0x7, 0x3)
ioctl$auto(0xffffffffffffffff, 0x7, r0)
rt_sigpending$auto(&(0x7f00000000c0), 0x8)
ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x7)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
socket(0x2, 0x3, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x2, 0x73)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sysfs$auto(0x2, 0x3, 0x0)
setsockopt$auto(0x3, 0x1, 0x3f, 0x0, 0x9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
executing program 0:
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x2, 0x14)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) (async)
write$auto(0x3, 0x0, 0x3f00)
r0 = socket(0x10, 0x2, 0x0) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x3f, 0x4909b6f8, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x81}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xe}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @HSR_A_IF1_AGE={0x8, 0x3, 0x2e}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) (async)
socket(0x2, 0x2, 0x88)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', <r2=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) (async)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf250a00000008000200", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000400000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="0800190004000000a659dd94ca2e27c087e2637c93bf3a037ad8861e9a1618dc7958e110e886"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40000080)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
mlock$auto(0x8001, 0xb)
ioperm$auto(0x800, 0x5, 0xd) (async)
ioperm$auto(0x800, 0x5, 0xd)
ioperm$auto(0x5, 0x8000000000000000, 0xea5c)
lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x5, 0x1, 0x3063, 0x3, 0xee00, 0xee00, 0x0, 0x368b, 0x4, 0x8f, 0xb, 0x83, 0x2, 0xffffffffffff7dc1, 0x3, 0x7117c580, 0x734})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x18, 0x5, 0x2) (async)
socket(0x18, 0x5, 0x2)
getpeername$auto(0x3, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(&(0x7f0000000040)={0x80000001, 0x1b15ae02, 0x0, 0xc6, 0x2b4e, 0x3f8a1795, 0x4c2, 0x5, 0xfffffffeffffffff, 0x2000, 0x8}, 0xd7ab)
r1 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
epoll_create$auto(0x4) (async)
epoll_create$auto(0x4)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
r2 = getsockopt$auto(0x100000006, 0x971c, 0x4, 0xfffffffffffffffe, 0x0)
write$auto_proc_setgroups_operations_base(r2, &(0x7f0000000000)="11cc74c8e9a1", 0x6)
mlock$auto(0x7c88, 0x7fff) (async)
mlock$auto(0x7c88, 0x7fff)
executing program 0:
openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000002100)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="840f0000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0xf84}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000)
mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x8000, &(0x7f0000001580))
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x200007, 0x8)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0x1, 0x0)
fanotify_init$auto(0x8c, 0x1)
fanotify_mark$auto(0x400000000000, 0x102, 0x9, 0x0, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
mmap$auto(0x800000000000, 0x12f, 0xdf, 0x9b72, 0x7, 0x1)
socket(0x1e, 0x5, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x1, 0x8000000000008000)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
listen$auto(0x3, 0xfffffffa)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000ac0), 0xffffffffffffffff)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon15\x00', 0x400, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x85, 0x0)
ioctl$auto(0x4000000000000c8, 0x400454e2, 0x3)
openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/block/nullb0/hctx0/cpu0/poll_rq_list\x00', 0x400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd2/mq/0/cpu_list\x00', 0xa0440, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:01.0/driver_override\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f00000003c0)=',l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_A\x87[\xd1{\xe6\x10\x1aX\xe0\xebQL\xe6&[\xa9X6\x86\x9c\a\x00\b\x00\x00\x00\x00\x00\x00\x00%m_\x96A\"\xdd\xe40\xa7\xc3\x00\x00\x00\x00\x00\x00\x00\x00\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\xbeC+$V\x91\xab\xf7\xf57\xe8\a\x15\xcb\x8e\xb1\n\x13HY\xf79b\xc2\x00\x82m\xdcz\x17\xfa\x8d\\\xe8(\x81\x96N\rZ\xf1E\x85\xe3#D\xfd\xa9\n3%p\xdc\xab\n%\x84\x1e\x05\x8cm\xe3\xd6\xa4\xab\x9fr\xc2\xef\xf4\tu\xdd\x16\xc3T\x1a\x11[@a\xa2\x19rO\xeb\xb4d\xc4\f=)\xba\x19\x83\x87+\x00'/206, 0x1000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setpriority$auto(0x2, 0x0, 0x200)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r0)
sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048)
openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000006a80)='/sys/kernel/tracing/timestamp_mode\x00', 0x42, 0x0)
executing program 32:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000ac0), 0xffffffffffffffff)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon15\x00', 0x400, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x85, 0x0)
ioctl$auto(0x4000000000000c8, 0x400454e2, 0x3)
openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/block/nullb0/hctx0/cpu0/poll_rq_list\x00', 0x400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd2/mq/0/cpu_list\x00', 0xa0440, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:01.0/driver_override\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f00000003c0)=',l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_A\x87[\xd1{\xe6\x10\x1aX\xe0\xebQL\xe6&[\xa9X6\x86\x9c\a\x00\b\x00\x00\x00\x00\x00\x00\x00%m_\x96A\"\xdd\xe40\xa7\xc3\x00\x00\x00\x00\x00\x00\x00\x00\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\xbeC+$V\x91\xab\xf7\xf57\xe8\a\x15\xcb\x8e\xb1\n\x13HY\xf79b\xc2\x00\x82m\xdcz\x17\xfa\x8d\\\xe8(\x81\x96N\rZ\xf1E\x85\xe3#D\xfd\xa9\n3%p\xdc\xab\n%\x84\x1e\x05\x8cm\xe3\xd6\xa4\xab\x9fr\xc2\xef\xf4\tu\xdd\x16\xc3T\x1a\x11[@a\xa2\x19rO\xeb\xb4d\xc4\f=)\xba\x19\x83\x87+\x00'/206, 0x1000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setpriority$auto(0x2, 0x0, 0x200)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r0)
sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048)
openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000006a80)='/sys/kernel/tracing/timestamp_mode\x00', 0x42, 0x0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = getpid()
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x800)
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0xe0080, 0x0)
openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_I2C_RDWR(r1, 0x707, 0x0)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f0000000080)="632d1bfe595046ab5c98399adf270600de80fee6009ca2ac32428953fffd000000000000e0ffffff13cc853e96caa75ec5b8c9a340224b1fad0a1afd4c4633217eb6eafea273c04e1ebe0a187d285c3c80ea6f5e", 0x54)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@nested={0x8, 0xb5, 0x0, 0x1, [@nested={0x4, 0x3ffb}]}, @typed={0xc, 0x10f, 0x0, 0x0, @u64=0x6}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000084)
executing program 2:
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x800)
write$auto(0x3, 0x0, 0xfffffdef)
prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
userfaultfd$auto(0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = socket(0xa, 0x801, 0x84)
socket(0xa, 0x3, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=r0, 0x4, @old_prog_fd=r1}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
write$auto(0x3, 0x0, 0x1)
executing program 2:
statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x0, 0x5ae, 0x5, 0x7, 0x4, 0x800, 0x4000010, 0x1, 0x4, 0x7, 0x9, 0x8, 0x9, 0x1ff, 0x7698, 0x5, 0x10000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x10001, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20000000000000, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfbfffffffffffffc, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x4, 0x0, 0x9]}, 0x40000000008, 0x0) (async)
r0 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0x301000, 0x0)
utimes$auto(0x0, &(0x7f0000000040)={0x800, 0x591}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) (async)
madvise$auto(0x0, 0x9, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
select$auto(0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64)
socket(0x1, 0x1, 0x1) (async)
mmap$auto(0x7, 0x8000000000000, 0x3, 0x910, r0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x264a80, 0x0) (async, rerun: 64)
get_robust_list$auto(0x0, 0x0, 0x0) (async, rerun: 64)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r1, 0x10000000084, 0x4, 0x0, 0x4) (async)
capget$auto(0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84) (async)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) (async)
readv$auto(0x0, 0x0, 0x3)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video34\x00', 0x123000, 0x0)
ioctl$auto_v4l2_fops_v4l2_dev(r2, 0x80085617, 0x0) (async)
close_range$auto(r2, r2, 0x30a1)
mmap$auto(0x0, 0x10000e983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
io_uring_setup$auto(0x1, 0x0) (async, rerun: 32)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (rerun: 32)
mincore$auto(0x3, 0x5, &(0x7f0000000000)='+]%\x00') (async, rerun: 32)
socket(0x2, 0xa, 0x80000001) (rerun: 32)
executing program 2:
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/0000:00:02.0/internal_clients\x00', 0x2000, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/1:4/max_ratio_fine\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000004180)=""/104, 0x68)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x18, 0x80000, 0x600)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x3, 0x0)
eventfd$auto(0x3)
r1 = socket(0xa, 0x2, 0x88)
r2 = socket(0x2a, 0x2, 0x1)
connect$auto(r2, &(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80)
connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x55)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=<r3=>0x4, 0x8, @old_map_fd}, 0xa3)
mmap$auto(0x3, 0x40009, 0xdf, 0x9b72, r0, 0xfffffffffffffffd)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x2040, 0x0)
sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800)
r5 = setfsuid$auto(0xee01)
fchown$auto(r4, r5, 0x0)
setpriority$auto(0x3, r5, 0x8)
read$auto(0x3, 0x0, 0x6)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
timer_create$auto(0x3, 0x0, 0x0) (async)
ppoll$auto(&(0x7f0000000040)={r1, 0x7ff}, 0x7, 0x0, 0x0, 0x8)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(0x0, 0x1000)
r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/uid_map\x00', 0x5cebbfbc3e3a7931, 0x0)
pread64$auto(r0, &(0x7f0000000080)='/proc/thread-self/uid_map\x00', 0x2, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x0, 0x1, 0x6}]}, 0xf8}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb781}, @CTRL_ATTR_FAMILY_NAME={0x1e, 0x2, '/proc/thread-self/uid_map\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40000)
executing program 33:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(0x0, 0x1000)
r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/uid_map\x00', 0x5cebbfbc3e3a7931, 0x0)
pread64$auto(r0, &(0x7f0000000080)='/proc/thread-self/uid_map\x00', 0x2, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x0, 0x1, 0x6}]}, 0xf8}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb781}, @CTRL_ATTR_FAMILY_NAME={0x1e, 0x2, '/proc/thread-self/uid_map\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40000)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x3)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x2000008000)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000340)='/dev/usbmon28\x00', 0x101800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
socket(0x29, 0x2, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000040)='+\x00', 0x74d)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0)
mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, &(0x7f00000000c0))
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x2, 0x0)
io_uring_register$auto(0x2, 0x16, 0x0, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <15>
bisect: split chunk #0 of len 15 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30, 26, 15, 11, 11, 28, 21]
detailed listing:
executing program 2:
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x800)
write$auto(0x3, 0x0, 0xfffffdef)
prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
userfaultfd$auto(0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = socket(0xa, 0x801, 0x84)
socket(0xa, 0x3, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=r0, 0x4, @old_prog_fd=r1}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
write$auto(0x3, 0x0, 0x1)
executing program 2:
statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x0, 0x5ae, 0x5, 0x7, 0x4, 0x800, 0x4000010, 0x1, 0x4, 0x7, 0x9, 0x8, 0x9, 0x1ff, 0x7698, 0x5, 0x10000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x10001, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20000000000000, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfbfffffffffffffc, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x4, 0x0, 0x9]}, 0x40000000008, 0x0) (async)
r0 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0x301000, 0x0)
utimes$auto(0x0, &(0x7f0000000040)={0x800, 0x591}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) (async)
madvise$auto(0x0, 0x9, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
select$auto(0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64)
socket(0x1, 0x1, 0x1) (async)
mmap$auto(0x7, 0x8000000000000, 0x3, 0x910, r0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x264a80, 0x0) (async, rerun: 64)
get_robust_list$auto(0x0, 0x0, 0x0) (async, rerun: 64)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r1, 0x10000000084, 0x4, 0x0, 0x4) (async)
capget$auto(0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84) (async)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) (async)
readv$auto(0x0, 0x0, 0x3)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video34\x00', 0x123000, 0x0)
ioctl$auto_v4l2_fops_v4l2_dev(r2, 0x80085617, 0x0) (async)
close_range$auto(r2, r2, 0x30a1)
mmap$auto(0x0, 0x10000e983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
io_uring_setup$auto(0x1, 0x0) (async, rerun: 32)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (rerun: 32)
mincore$auto(0x3, 0x5, &(0x7f0000000000)='+]%\x00') (async, rerun: 32)
socket(0x2, 0xa, 0x80000001) (rerun: 32)
executing program 2:
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/0000:00:02.0/internal_clients\x00', 0x2000, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/1:4/max_ratio_fine\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000004180)=""/104, 0x68)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x18, 0x80000, 0x600)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x3, 0x0)
eventfd$auto(0x3)
r1 = socket(0xa, 0x2, 0x88)
r2 = socket(0x2a, 0x2, 0x1)
connect$auto(r2, &(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80)
connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x55)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=<r3=>0x4, 0x8, @old_map_fd}, 0xa3)
mmap$auto(0x3, 0x40009, 0xdf, 0x9b72, r0, 0xfffffffffffffffd)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x2040, 0x0)
sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800)
r5 = setfsuid$auto(0xee01)
fchown$auto(r4, r5, 0x0)
setpriority$auto(0x3, r5, 0x8)
read$auto(0x3, 0x0, 0x6)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
timer_create$auto(0x3, 0x0, 0x0) (async)
ppoll$auto(&(0x7f0000000040)={r1, 0x7ff}, 0x7, 0x0, 0x0, 0x8)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(0x0, 0x1000)
r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/uid_map\x00', 0x5cebbfbc3e3a7931, 0x0)
pread64$auto(r0, &(0x7f0000000080)='/proc/thread-self/uid_map\x00', 0x2, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x0, 0x1, 0x6}]}, 0xf8}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb781}, @CTRL_ATTR_FAMILY_NAME={0x1e, 0x2, '/proc/thread-self/uid_map\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40000)
executing program 33:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(0x0, 0x1000)
r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/uid_map\x00', 0x5cebbfbc3e3a7931, 0x0)
pread64$auto(r0, &(0x7f0000000080)='/proc/thread-self/uid_map\x00', 0x2, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x0, 0x1, 0x6}]}, 0xf8}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb781}, @CTRL_ATTR_FAMILY_NAME={0x1e, 0x2, '/proc/thread-self/uid_map\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40000)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x3)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x2000008000)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000340)='/dev/usbmon28\x00', 0x101800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
socket(0x29, 0x2, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000040)='+\x00', 0x74d)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0)
mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, &(0x7f00000000c0))
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x2, 0x0)
io_uring_register$auto(0x2, 0x16, 0x0, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <7>
bisect: split chunk #0 of len 7 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 11, 28, 21]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(0x0, 0x1000)
r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/uid_map\x00', 0x5cebbfbc3e3a7931, 0x0)
pread64$auto(r0, &(0x7f0000000080)='/proc/thread-self/uid_map\x00', 0x2, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x0, 0x1, 0x6}]}, 0xf8}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb781}, @CTRL_ATTR_FAMILY_NAME={0x1e, 0x2, '/proc/thread-self/uid_map\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40000)
executing program 33:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
clone3$auto(0x0, 0x1000)
r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/uid_map\x00', 0x5cebbfbc3e3a7931, 0x0)
pread64$auto(r0, &(0x7f0000000080)='/proc/thread-self/uid_map\x00', 0x2, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x0, 0x1, 0x6}]}, 0xf8}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb781}, @CTRL_ATTR_FAMILY_NAME={0x1e, 0x2, '/proc/thread-self/uid_map\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40000)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x3)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x2000008000)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000340)='/dev/usbmon28\x00', 0x101800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
socket(0x29, 0x2, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000040)='+\x00', 0x74d)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0)
mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, &(0x7f00000000c0))
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x2, 0x0)
io_uring_register$auto(0x2, 0x16, 0x0, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30, 26, 15, 21]
detailed listing:
executing program 2:
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x800)
write$auto(0x3, 0x0, 0xfffffdef)
prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
userfaultfd$auto(0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = socket(0xa, 0x801, 0x84)
socket(0xa, 0x3, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=r0, 0x4, @old_prog_fd=r1}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
write$auto(0x3, 0x0, 0x1)
executing program 2:
statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x0, 0x5ae, 0x5, 0x7, 0x4, 0x800, 0x4000010, 0x1, 0x4, 0x7, 0x9, 0x8, 0x9, 0x1ff, 0x7698, 0x5, 0x10000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x10001, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20000000000000, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfbfffffffffffffc, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x4, 0x0, 0x9]}, 0x40000000008, 0x0) (async)
r0 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0x301000, 0x0)
utimes$auto(0x0, &(0x7f0000000040)={0x800, 0x591}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) (async)
madvise$auto(0x0, 0x9, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
select$auto(0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64)
socket(0x1, 0x1, 0x1) (async)
mmap$auto(0x7, 0x8000000000000, 0x3, 0x910, r0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x264a80, 0x0) (async, rerun: 64)
get_robust_list$auto(0x0, 0x0, 0x0) (async, rerun: 64)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r1, 0x10000000084, 0x4, 0x0, 0x4) (async)
capget$auto(0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84) (async)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) (async)
readv$auto(0x0, 0x0, 0x3)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video34\x00', 0x123000, 0x0)
ioctl$auto_v4l2_fops_v4l2_dev(r2, 0x80085617, 0x0) (async)
close_range$auto(r2, r2, 0x30a1)
mmap$auto(0x0, 0x10000e983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
io_uring_setup$auto(0x1, 0x0) (async, rerun: 32)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (rerun: 32)
mincore$auto(0x3, 0x5, &(0x7f0000000000)='+]%\x00') (async, rerun: 32)
socket(0x2, 0xa, 0x80000001) (rerun: 32)
executing program 2:
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/0000:00:02.0/internal_clients\x00', 0x2000, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/1:4/max_ratio_fine\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000004180)=""/104, 0x68)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x18, 0x80000, 0x600)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x3, 0x0)
eventfd$auto(0x3)
r1 = socket(0xa, 0x2, 0x88)
r2 = socket(0x2a, 0x2, 0x1)
connect$auto(r2, &(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80)
connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x55)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=<r3=>0x4, 0x8, @old_map_fd}, 0xa3)
mmap$auto(0x3, 0x40009, 0xdf, 0x9b72, r0, 0xfffffffffffffffd)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x2040, 0x0)
sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800)
r5 = setfsuid$auto(0xee01)
fchown$auto(r4, r5, 0x0)
setpriority$auto(0x3, r5, 0x8)
read$auto(0x3, 0x0, 0x6)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
timer_create$auto(0x3, 0x0, 0x0) (async)
ppoll$auto(&(0x7f0000000040)={r1, 0x7ff}, 0x7, 0x0, 0x0, 0x8)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <4>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 15, 21]
detailed listing:
executing program 2:
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/0000:00:02.0/internal_clients\x00', 0x2000, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/1:4/max_ratio_fine\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000004180)=""/104, 0x68)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x18, 0x80000, 0x600)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x3, 0x0)
eventfd$auto(0x3)
r1 = socket(0xa, 0x2, 0x88)
r2 = socket(0x2a, 0x2, 0x1)
connect$auto(r2, &(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80)
connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x55)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=<r3=>0x4, 0x8, @old_map_fd}, 0xa3)
mmap$auto(0x3, 0x40009, 0xdf, 0x9b72, r0, 0xfffffffffffffffd)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x2040, 0x0)
sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800)
r5 = setfsuid$auto(0xee01)
fchown$auto(r4, r5, 0x0)
setpriority$auto(0x3, r5, 0x8)
read$auto(0x3, 0x0, 0x6)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
timer_create$auto(0x3, 0x0, 0x0) (async)
ppoll$auto(&(0x7f0000000040)={r1, 0x7ff}, 0x7, 0x0, 0x0, 0x8)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 21]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
timer_create$auto(0x3, 0x0, 0x0) (async)
ppoll$auto(&(0x7f0000000040)={r1, 0x7ff}, 0x7, 0x0, 0x0, 0x8)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 2 programs left: 

executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
timer_create$auto(0x3, 0x0, 0x0) (async)
ppoll$auto(&(0x7f0000000040)={r1, 0x7ff}, 0x7, 0x0, 0x0, 0x8)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)


bisect: trying to concatenate
bisect: concatenate 2 entries
minimizing program #0 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
timer_create$auto(0x3, 0x0, 0x0) (async)
ppoll$auto(&(0x7f0000000040)={r1, 0x7ff}, 0x7, 0x0, 0x0, 0x8)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
timer_create$auto(0x3, 0x0, 0x0) (async)
ppoll$auto(&(0x7f0000000040)={r1, 0x7ff}, 0x7, 0x0, 0x0, 0x8)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
timer_create$auto(0x3, 0x0, 0x0) (async)
ppoll$auto(&(0x7f0000000040)={r1, 0x7ff}, 0x7, 0x0, 0x0, 0x8)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
timer_create$auto(0x3, 0x0, 0x0) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: general protection fault in hci_devcd_register
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
sendfile$auto(r0, r0, 0x0, 0x7fffdffe) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
setresuid$auto(0x60, 0x1000, 0x8000) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
setresgid$auto(0x81, 0x800000a0, 0x8)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: WARNING in hci_devcd_register
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 21]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 21]
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
minimized 15 calls -> 1 calls
minimizing program #1 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 20]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 20]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x8)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 20]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
socket(0x1e, 0x3, 0xa) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 19]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
socket(0x1e, 0x3, 0xa) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 18]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 17]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 16]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 15]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 14]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 13]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 12]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 11]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
madvise$auto(0x3, 0xce2, 0x19) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 10]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 9]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
fanotify_init$auto(0x4f1, 0x1) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 8]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 7]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 5]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 4]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x80002, 0x73)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 3]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 2]
detailed listing:
executing program 2:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
minimized 21 calls -> 3 calls
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: concatenation succeeded
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=2m6.442395036s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=2m6.442395036s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-write$auto
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=2m6.442395036s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=2m6.442395036s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=2m6.442395036s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=2m6.442395036s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m6.442395036s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
simplifying guilty program options
testing program (duration=2m6.442395036s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=2m6.442395036s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
reproducing took 1h44m29.613027968s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff8881412fa000 by task syz.7.30/6314

CPU: 0 UID: 0 PID: 6314 Comm: syz.7.30 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0xfd/0x1b0 fs/debugfs/file.c:369
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f09ec385d29
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f09ed1cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f09ec576080 RCX: 00007f09ec385d29
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f09ec401b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f09ec576080 R15: 00007ffca3d3ddd8
 </TASK>

Allocated by task 6057:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:165
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0xf59/0x1ea0 fs/open.c:945
 vfs_open+0x82/0x3f0 fs/open.c:1075
 do_open fs/namei.c:3828 [inline]
 path_openat+0x1e6a/0x2d60 fs/namei.c:3987
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
 do_sys_open fs/open.c:1417 [inline]
 __do_sys_openat fs/open.c:1433 [inline]
 __se_sys_openat fs/open.c:1428 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1428
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 6263:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:582
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4613 [inline]
 kfree+0x14f/0x4b0 mm/slub.c:4761
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3f8/0xb60 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x2576/0x2610 kernel/signal.c:3017
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff8881412fa000
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff8881412fa000, ffff8881412fa400)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881412fb000 pfn:0x1412f8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 057ff00000000040 ffff88801ac41dc0 ffffea0005361600 dead000000000002
raw: ffff8881412fb000 000000000010000f 00000001f5000000 0000000000000000
head: 057ff00000000040 ffff88801ac41dc0 ffffea0005361600 dead000000000002
head: ffff8881412fb000 000000000010000f 00000001f5000000 0000000000000000
head: 057ff00000000003 ffffea000504be01 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2848360563, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558
 prep_new_page mm/page_alloc.c:1566 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3476
 __alloc_pages_noprof+0x223/0x25b0 mm/page_alloc.c:4753
 alloc_pages_mpol_noprof+0x2c8/0x620 mm/mempolicy.c:2269
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2589 [inline]
 new_slab+0x2c9/0x410 mm/slub.c:2642
 ___slab_alloc+0xce2/0x1650 mm/slub.c:3830
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3920
 __slab_alloc_node mm/slub.c:3995 [inline]
 slab_alloc_node mm/slub.c:4156 [inline]
 __do_kmalloc_node mm/slub.c:4297 [inline]
 __kmalloc_node_noprof+0x2f0/0x520 mm/slub.c:4304
 __kvmalloc_node_noprof+0xad/0x1a0 mm/util.c:645
 bucket_table_alloc.isra.0+0x86/0x460 lib/rhashtable.c:186
 rhashtable_init_noprof+0x43b/0x7d0 lib/rhashtable.c:1071
 netlink_proto_init+0xbc/0x320 net/netlink/af_netlink.c:2928
 do_one_initcall+0x128/0x630 init/main.c:1266
 do_initcall_level init/main.c:1328 [inline]
 do_initcalls init/main.c:1344 [inline]
 do_basic_setup init/main.c:1363 [inline]
 kernel_init_freeable+0x58f/0x8b0 init/main.c:1577
 kernel_init+0x1c/0x2b0 init/main.c:1466
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
page_owner free stack trace missing

Memory state around the buggy address:
 ffff8881412f9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff8881412f9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff8881412fa000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff8881412fa080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff8881412fa100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff8881412fa000 by task syz.7.30/6314

CPU: 0 UID: 0 PID: 6314 Comm: syz.7.30 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0xfd/0x1b0 fs/debugfs/file.c:369
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f09ec385d29
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f09ed1cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f09ec576080 RCX: 00007f09ec385d29
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f09ec401b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f09ec576080 R15: 00007ffca3d3ddd8
 </TASK>

Allocated by task 6057:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:165
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0xf59/0x1ea0 fs/open.c:945
 vfs_open+0x82/0x3f0 fs/open.c:1075
 do_open fs/namei.c:3828 [inline]
 path_openat+0x1e6a/0x2d60 fs/namei.c:3987
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
 do_sys_open fs/open.c:1417 [inline]
 __do_sys_openat fs/open.c:1433 [inline]
 __se_sys_openat fs/open.c:1428 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1428
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 6263:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:582
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4613 [inline]
 kfree+0x14f/0x4b0 mm/slub.c:4761
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3f8/0xb60 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x2576/0x2610 kernel/signal.c:3017
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff8881412fa000
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff8881412fa000, ffff8881412fa400)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881412fb000 pfn:0x1412f8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 057ff00000000040 ffff88801ac41dc0 ffffea0005361600 dead000000000002
raw: ffff8881412fb000 000000000010000f 00000001f5000000 0000000000000000
head: 057ff00000000040 ffff88801ac41dc0 ffffea0005361600 dead000000000002
head: ffff8881412fb000 000000000010000f 00000001f5000000 0000000000000000
head: 057ff00000000003 ffffea000504be01 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2848360563, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558
 prep_new_page mm/page_alloc.c:1566 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3476
 __alloc_pages_noprof+0x223/0x25b0 mm/page_alloc.c:4753
 alloc_pages_mpol_noprof+0x2c8/0x620 mm/mempolicy.c:2269
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2589 [inline]
 new_slab+0x2c9/0x410 mm/slub.c:2642
 ___slab_alloc+0xce2/0x1650 mm/slub.c:3830
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3920
 __slab_alloc_node mm/slub.c:3995 [inline]
 slab_alloc_node mm/slub.c:4156 [inline]
 __do_kmalloc_node mm/slub.c:4297 [inline]
 __kmalloc_node_noprof+0x2f0/0x520 mm/slub.c:4304
 __kvmalloc_node_noprof+0xad/0x1a0 mm/util.c:645
 bucket_table_alloc.isra.0+0x86/0x460 lib/rhashtable.c:186
 rhashtable_init_noprof+0x43b/0x7d0 lib/rhashtable.c:1071
 netlink_proto_init+0xbc/0x320 net/netlink/af_netlink.c:2928
 do_one_initcall+0x128/0x630 init/main.c:1266
 do_initcall_level init/main.c:1328 [inline]
 do_initcalls init/main.c:1344 [inline]
 do_basic_setup init/main.c:1363 [inline]
 kernel_init_freeable+0x58f/0x8b0 init/main.c:1577
 kernel_init+0x1c/0x2b0 init/main.c:1466
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
page_owner free stack trace missing

Memory state around the buggy address:
 ffff8881412f9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff8881412f9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff8881412fa000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff8881412fa080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff8881412fa100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================