Extracting prog: 2h28m53.230688351s Minimizing prog: 19m43.718468013s Simplifying prog options: 0s Extracting C: 2m13.258901381s Simplifying C: 22m33.298967038s extracting reproducer from 38 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-read$auto-write$auto-openat$auto_rfkill_fops_core-openat$auto_tun_fops_tun-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_vmwgfx_driver_fops_vmwgfx_drv-socket-socket-sendmmsg$auto-openat$auto_proc_pid_maps_operations_internal-process_madvise$auto_MADV_GUARD_INSTALL-poll$auto-fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) program did not crash single: failed to extract reproducer bisect: bisecting 38 programs with base timeout 30s testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 6, 30, 9, 30, 30, 29, 27, 24, 23, 30, 30, 30, 30, 30, 25, 26, 30, 23, 9, 30, 4, 14, 19, 29, 5, 4, 16, 30, 19, 26, 21, 4, 9, 10, 20, 30, 40] detailed listing: executing program 3: mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$auto_FIFREEZE(r0, 0xc0045878, 0x0) r1 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000940)=ANY=[@ANYRESHEX=r5, @ANYRES8=r0, @ANYBLOB="00012cbd7000fcdbdf25020000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000300bb0c00001400020070696d72656700000000000000000000080003000400000008000100", @ANYRESOCT=r5, @ANYBLOB="3000018008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000100000014000200687372300000000000000000000000004000018008000100", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="0800030006000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3100000000180001801400020070696d72656700000000000000000000200001801400020070696d7265670000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1c000180080003000100000008000100", @ANYRES32=r3, @ANYBLOB="01000307000011000c001480", @ANYBLOB="2c0001801400020070696d726567300000000000000000001400020070696d72656731000000000000000000"], 0x15c}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000000) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7fffffffffffffff, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) bpf$auto(0x9, &(0x7f0000000100)=@bpf_attr_1={0xffffffffffffffff, 0x1000, @value=0x3, 0x400084047dc}, 0x8e) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x6, 0x1, 0x800) ioctl$auto_EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000280)=[0x94, 0x9]) executing program 3: r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322df6) open_by_handle_at$auto(r0, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x20008004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) executing program 3: sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x7, 0x4, 0x4000000000dd, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000c00)) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(0x3, 0x80004509, 0x10000000000402) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0xfffff000, 0x4, 0x2, 0x7, 0x1ff001) r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r2, 0x0, 0x400000, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) executing program 0: mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) r1 = memfd_secret$auto(0x0) flistxattr$auto(r1, 0x0, 0x80000001) mmap$auto(0xbe10, 0x80, 0xe, 0x1c, r0, 0x0) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000010c0)=""/4082, 0xff2) shmctl$auto_IPC_RMID(0x0, 0x0, 0x0) write$auto(0xca, &(0x7f00000002c0)='\x04>2\x1e!\xe2\x00\x94\xf2\xa2\x00\x00\x8d\xa9p\xcc\xccV\xf9ozi\xb2:\x19\x92r\xcc9\x99f\xc5\xed\x84fe\x8a\x8c\xd3*\xfe\x1dE\xa1W8\x03\xcb\tSK\xb4\x893\xf3Q\x7f\xd1|\xefp\xb1\xb3\xcer8\b=\xa4y\xd4\x88\xbc\xe0\xd1\x03\x108a\x90KG,\xf8\v\x88\xe2+\xcb\xf2v\x8bL\xa6\xaa}\x1b\xa5\xd8\x98\xc9\\f\xccT\xa1\x05\x14\x84\xbb\aF,\xc8\xc7u\x93\xe8?\x92\t\xa9`\xff\x93l\x93\xac\n\xdd\xa4\n\x8e\xec\x14\x02|\xf7\xc4\xa0\x06h\xc0\x8f\xf3g6\xb8\x1a\x18\xf2\x93\t\xe8ips\xa7\x9a\x1cFPi\x13\x89DRSO\x97\xb1\xc3\xb8Q\xa2\xb2\xa8\xc3\xd3\xf9\xd4Y\x8d\x8d\xad\x8f[\xbe\xe5\xf1\x9f\x01s\x8eg\x05\xe8\xf9\x8f\xa6g\v', 0x80) executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = timerfd_create$auto_CLOCK_REALTIME(0x0, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffffd, 0xb, 0xffb, 0x8000000008011, 0x3, 0x8000) io_uring_setup$auto(0x5, 0x0) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0) mmap$auto(0x0, 0x20000000400008, 0xdf, 0x9b72, r0, 0x7ffe) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu1\x00', 0x4fb603, 0x0) mmap$auto(0xa751, 0x4020005, 0x8b5, 0x10011, r1, 0xb2) syz_clone3(&(0x7f0000001180)={0x4000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x35}, &(0x7f0000000100)=""/14, 0xe, &(0x7f00000012c0)=""/4096, &(0x7f0000001140)}, 0x58) r3 = io_uring_setup$auto(0xa, 0x0) io_uring_setup$auto(0x6, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1022, 0x202, 0x10001, 0x8, r3, [], {0x6, 0x6, 0x2c, 0x5, 0x100, 0x7f, 0x101, 0x6, 0x800002}, {0x100, 0x10000008, 0x52, 0x1, 0x1, 0x40, 0x76c4, 0x80008, 0x5}}) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000001200)={0xa, 0x3}) prctl$auto(0x8, 0x5, r2, 0x6, 0x7) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r5, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r4, r4, 0x0, 0x2) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r6 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101800, 0x7) read$auto(r6, 0x0, 0x1) read$auto(0x3, 0x0, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffd, 0x80040000d, 0x5, 0x9b72, r7, 0x8000) dup$auto(r1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) executing program 3: socket(0xa, 0x3, 0x3b) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8a141, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x7fffffff, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x2b, 0x0, 0x2) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = socket(0x2, 0x801, 0x106) getsockopt$auto(r1, 0x11c, 0x3, 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x541c, r3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xebd, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xfffffffffffffffe, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) executing program 0: r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vivid.0/video4linux/swradio15/power/autosuspend_delay_ms\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x142, 0x0) read$auto(r1, 0x0, 0x4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x880, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) (async, rerun: 32) r3 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) fchown$auto(r3, 0xe5a, 0x5) (async) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r4, &(0x7f0000000000)='system.posix_acl_access\x00') (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) (async) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async, rerun: 32) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) (async, rerun: 32) statmount$auto(0x0, 0x0, 0x1fe, 0x5) (async, rerun: 64) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (rerun: 64) unshare$auto(0x40000080) (async) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000002c0)="b2d28dcd105c884f7686872854958b4bc14b568849dc3f5a49710ea8b152e3c552b4984cf1dbd9885b84c7b13076ad4a62310c54e0dd780d2569651aa62e8468d7b7592c8cd5d8863fe7eca8b18a904f149252dda8e1af5de94c4a", 0x5b) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r7, 0x0, 0x1) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), r8) executing program 3: mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x341a21}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2518000000050005000000000014040280b001418004003a809ec420b7d6de0fd3ed6d9320eaa388a2a1c1c69d6d5824ab6203d7a012a29930b66896bc454b6cbe3ec6b5b1cfeaf1895b29114b727950802bcd6d0db0cc4416855924c8c40558634ceb21d715bc7cda348706fdc315e8fbd0fae5a5e514c0f1a618bb896962fb4256558a9a8656d8a8d4c1bac0e8865c14f3419e80c870d1d29af999d8f6f4738624241bc7d93cfb100436d4ff14b8531a63597195d0431c7a1335cfa1ae903c110a4d53595f04005a800400328016003f002f6465762f736e642f6d6964694332443000000004008c8014002100fe800000000000000000000000000015b44f60ae7af7eaaf436034579e8139204ee58d7ed2315b04f1239d356ee027d4acec2fb9ccc92de7f8339c1f3cc91f9f6151ce12f9f3a985ae1c5bc889d72bd191d02b27678b04e9e2e9fe6ba70dffb311e8959bbd53239791a7d3b920c8f99ad9c491dfe4e0a24850929b5eb583afcd61d4c0c682c7203d0d3c83d72f19a2baa9f4c84b1b48f0a4e846abcddab5dfbd912fc5c68784cccd4915b34e02e7409aadca8a38eb26db9e19178457dc958ee1fcd80d29a0a755cc066912f617af388d4d5ce01400e000fe8800000000000000000000000001018d019c8008003200", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164763000000000000000000100f6ff000300090000000800", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0500060000000000c6000280f2dd72b145bd8a228623b822f95df183ce3f470612ca4b13cf74cd7c4d941b1cd7a71be91e78c88eb31ddb5ec965eff0dc96d610fd65748cf457de07736ad236dd78e36d70ea9e78bf44803cc92f0ea4bafdd688934a271de22e4987dd0250cf3f73a2eef3c5d3f5a2e265cf7e91c319a1a420365c4b3649ceb413b5f7b19970611719de9ce78618233852d08cdeaa0db5603cc79c09ea44d6aa83e51760808eb0905b10a7bee087af8979894eafce94f346fbb30432a08a", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x664}, 0x1, 0x0, 0x0, 0x8040}, 0x4048010) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xbff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) prctl$auto(0x1, 0x6, r3, 0xb117, 0x9) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) read$auto_fragmentation_threshold_ops_(r2, &(0x7f00000000c0)=""/118, 0x76) msync$auto(0x0, 0xe0, 0x6) r5 = io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) r6 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) pread64$auto(r6, 0x0, 0xd56c, 0xa84) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_pid_set_timerslack_ns_operations_base(r5, &(0x7f0000000440)=""/242, 0xf2) executing program 0: mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$auto_FIFREEZE(r0, 0xc0045878, 0x0) r1 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000940)=ANY=[@ANYRESHEX=r5, @ANYRES8=r0, @ANYBLOB="00012cbd7000fcdbdf25020000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000300bb0c00001400020070696d72656700000000000000000000080003000400000008000100", @ANYRESOCT=r5, @ANYBLOB="3000018008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000100000014000200687372300000000000000000000000004000018008000100", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="0800030006000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3100000000180001801400020070696d72656700000000000000000000200001801400020070696d7265670000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1c000180080003000100000008000100", @ANYRES32=r3, @ANYBLOB="01000307000011000c001480", @ANYBLOB="2c0001801400020070696d726567300000000000000000001400020070696d72656731000000000000000000"], 0x15c}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000000) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7fffffffffffffff, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) bpf$auto(0x9, &(0x7f0000000100)=@bpf_attr_1={0xffffffffffffffff, 0x1000, @value=0x3, 0x400084047dc}, 0x8e) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x6, 0x1, 0x800) ioctl$auto_EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000280)=[0x94, 0x9]) executing program 0: r0 = socket(0x2, 0x2, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@raw_tracepoint={0x5548, r0, 0x0, 0xbc43}, 0x7f4) socket(0x11, 0x3, 0x80000001) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8002, 0x0) select$auto(0x401, 0x0, 0x0, 0x0, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x1, 0x100000001, 0x9, 0x6, 0x20000000000001ff, 0x6, 0x5, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x4, 0x5, 0xe7, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0x10000000ce}) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptyw0\x00', 0xe2c0, 0x0) recvmmsg$auto(0x3, 0x0, 0x4, 0x8704, 0x0) prctl$auto(0x3e, 0x3, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x6, 0x3, 0x0, 0x6, 0xb21c) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd8\x00', 0x65d81, 0x0) executing program 3: socket(0x11, 0x80003, 0x300) socket(0x11, 0xa, 0x300) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r0 = open(0x0, 0x169443, 0x114) pipe$auto(&(0x7f0000000000)) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4-n\xf85\xc3\x18\xe6\xc7\x92${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3000c, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x5402, r1) getrandom$auto(0x0, 0x6000000, 0x3) fcntl$auto(r0, 0x40a, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) socket(0x18, 0xa, 0x1) executing program 0: mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0xffffffffffffffff, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x3, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = socket(0x2c, 0x1, 0x3) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r3, 0x4b45, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0xffffffffffffffff, 0xfffffffffffffff7, 0x20000000000005, 0x18, r1, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) bpf$auto(0x1780000, &(0x7f0000001100)=@query={@target_fd=r2, 0x8, 0x1, 0x8, 0xfffffffffffffffc, @prog_cnt=0x3, 0x0, 0x111, 0x8b4, 0x8, 0x101}, 0xf) r4 = socket(0x15, 0x5, 0x0) ioctl$auto_FIOCLEX(r4, 0x5451, 0x7) pipe$auto(&(0x7f0000000000)=r4) socket(0xa, 0x3, 0x3a) setreuid$auto(0x8, 0x9d7) setresuid$auto(0xffffffffffffffff, 0x8, 0xffffffff) executing program 32: mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0xffffffffffffffff, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x3, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = socket(0x2c, 0x1, 0x3) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r3, 0x4b45, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0xffffffffffffffff, 0xfffffffffffffff7, 0x20000000000005, 0x18, r1, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) bpf$auto(0x1780000, &(0x7f0000001100)=@query={@target_fd=r2, 0x8, 0x1, 0x8, 0xfffffffffffffffc, @prog_cnt=0x3, 0x0, 0x111, 0x8b4, 0x8, 0x101}, 0xf) r4 = socket(0x15, 0x5, 0x0) ioctl$auto_FIOCLEX(r4, 0x5451, 0x7) pipe$auto(&(0x7f0000000000)=r4) socket(0xa, 0x3, 0x3a) setreuid$auto(0x8, 0x9d7) setresuid$auto(0xffffffffffffffff, 0x8, 0xffffffff) executing program 33: socket(0x11, 0x80003, 0x300) socket(0x11, 0xa, 0x300) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r0 = open(0x0, 0x169443, 0x114) pipe$auto(&(0x7f0000000000)) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4-n\xf85\xc3\x18\xe6\xc7\x92${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3000c, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x5402, r1) getrandom$auto(0x0, 0x6000000, 0x3) fcntl$auto(r0, 0x40a, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) socket(0x18, 0xa, 0x1) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000010) prctl$auto_PR_SET_TIMING(0xe, 0x3, 0x1, 0x2, 0xfffffffffffffff6) (async) readv$auto(r0, &(0x7f0000000200)={&(0x7f0000000140)="e610f0ccfe532dbb98d18fb46385dbc200aee487183de69337de381623e734e57f12a2cc8f6a22b8a540d20107308938a978d3657a6857513d71eaea6c7246247ccfa296ab3bed64a5c5aec48a1c57e4fb791a6812141fd854b7887145cc079b4c4e0da5ee1eeeef830f381e2c8d89781457ada9f36fa8b377f8ef0867adfacc40f891eb92b49d53dbff7e8a4d3d348b41fa8ddddf6d65fdd2984ffc715c2a2f94b77487b26472dd9770c9fc55773b4d4f76dd7a7471cd10", 0xa38}, 0x8) (async) r2 = getpgrp(0x0) r3 = fcntl$getown(r0, 0x9) kcmp$auto_KCMP_FILE(r2, r3, 0x0, r0, r0) (async, rerun: 64) r4 = getsockopt$auto(r0, 0x1, 0x8, &(0x7f0000000240)='l2tp\x00', &(0x7f0000000280)=0x2) (async, rerun: 64) ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r3, 0x6) (async) prctl$auto_PR_SET_TIMING(0xe, 0x0, 0x3, 0x100, 0x0) (async, rerun: 32) msgctl$auto_MSG_STAT(0xc011, 0xb, &(0x7f0000000340)={{0x15e, 0xee01, 0xffffffffffffffff, 0x4, 0x8, 0x2, 0x7f}, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0xe, 0x200, 0xfffffffffffffe00, 0x1, 0xffff, 0x0, 0x4b8, 0x6, 0x9, @raw=0x3, @inferred=r2}) (rerun: 32) newfstatat$auto(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x80000001, 0x6, 0x0, 0x3ff, 0xee01, 0xee00, 0x0, 0x6, 0x38e, 0x8000000000000001, 0x7fff, 0x3, 0x6f470d08, 0x7, 0x6a, 0x14, 0x80000000}, 0x3) (async) msgctl$auto_IPC_RMID(0x3, 0x0, &(0x7f0000000540)={{0x80000001, 0x0, 0x0, 0xf2, 0x6, 0x1ff, 0x2}, &(0x7f00000004c0)=0x15, &(0x7f0000000500)=0x59, 0x7, 0x40, 0x8, 0x3, 0x4, 0x3, 0x1, 0x8001, @inferred=r3, @inferred=r2}) setresuid$auto(r5, r6, r7) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) (async) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r0) sendmsg$auto_NL80211_CMD_TDLS_OPER(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x7fffffff}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x1ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40) prctl$auto_PR_SET_TIMING(0xe, 0x5, 0xaa, 0xe, 0x7) (async, rerun: 32) prctl$auto_PR_SET_TIMING(0xe, 0x6, 0xb9, 0x8, 0x2) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/platform/vhci_hcd.15/usb39/39-0:1.0/usb39-port5/disable\x00', 0x8100, 0x0) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000880), 0x90000, 0x0) select$auto(0x9, &(0x7f00000008c0)={[0x7, 0xb, 0x1000, 0x8, 0x7f, 0x3, 0xfff, 0x8, 0xfffffffffffffffe, 0x6, 0x6, 0xfffffffffffff801, 0xb4, 0x4, 0x571, 0x6]}, &(0x7f0000000940)={[0x3, 0xa000, 0x6b10, 0x1, 0x1, 0x5, 0x36f, 0x1, 0x4, 0x0, 0x8000000000000001, 0xffffffffffffff00, 0x7, 0x40, 0xef, 0x5]}, &(0x7f00000009c0)={[0x0, 0x9, 0x3, 0x4, 0x0, 0x6, 0x5, 0x7fff, 0x4, 0x5, 0x562, 0x1, 0xde4, 0x3, 0x9, 0x6]}, &(0x7f0000000a40)={0x8, 0x4}) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000ac0), r4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'veth1_virt_wifi\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b40)={'nr0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b80)={'bond_slave_1\x00', 0x0}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'virt_wifi0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000d40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0x100, r9, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5c7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3e}]}, @ETHTOOL_A_CHANNELS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) write$auto_tty_fops_tty_io(r4, &(0x7f0000000d80)="24c6281f3b334bb3e9d8b8c2d497140e2fa709c0d0a21164c44aeccc4d010e739c4ba06473c0e559a3c8df67da2cb6bc5dbe78ffd2977eaa274a1f080b7cb61c113a63a3c357cd94241583b10b5cfba91900ffc8c68de57149d5d06e774e8aa223ed6433d41fff5468c7cea253fa8cb48da6dc62f7581cf55d2f0e6f68b2203f60241daf343907829ba9f2ef19ce6a305f1fe378cf633f5f19fe0ca8bc89dea770a06803ad5565ca25f2ccaeb65a6ff7585f677d5fea58b6d89c9444b5275e3b2467479f09a3aadb1d6896fb6925412b8afbc7103aa717fe8f5ce4be42a907b6801a6df42cc7", 0xe6) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) userfaultfd$auto(0x1) mmap$auto(0x0, 0x15, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1fe, 0x7, 0x3, 0x8fd6, 0x3, 0x4, 0x15f4da0a, 0x3, 0xd, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x1, 0x200]}, 0x0) mmap$auto(0x73f9, 0x3, 0x201, 0x4000000eb0, 0xffffffffffffffff, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_prog_fd=0x77, 0xa, @old_map_fd=r3}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) executing program 2: mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x341a21}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="64060000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2518000000050005000000000014040280b001418004003a809ec420b7d6de0fd3ed6d9320eaa388a2a1c1c69d6d5824ab6203d7a012a29930b66896bc454b6cbe3ec6b5b1cfeaf1895b29114b727950802bcd6d0db0cc4416855924c8c40558634ceb21d715bc7cda348706fdc315e8fbd0fae5a5e514c0f1a618bb896962fb4256558a9a8656d8a8d4c1bac0e8865c14f3419e80c870d1d29af999d8f6f4738624241bc7d93cfb100436d4ff14b8531a63597195d0431c7a1335cfa1ae903c110a4d53595f04005a800400328016003f002f6465762f736e642f6d69646943324430", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164763000000000000000000100f6ff000300090000000800", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0500060000000000c6000280f2dd72b145bd8a228623b822f95df183ce3f470612ca4b13cf74cd7c4d941b1cd7a71be91e78c88eb31ddb5ec965eff0dc96d610fd65748cf457de07736ad236dd78e36d70ea9e78bf44803cc92f0ea4bafdd688934a271de22e4987dd0250cf3f73a2eef3c5d3f5a2e265cf7e91c319a1a420365c4b3649ceb413b5f7b19970611719de9ce78618233852d08cdeaa0db5603cc79c09ea44d6aa83e51760808eb0905b10a7bee087af8979894eafce94f346fbb30432a08a0b2b08001b00", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x664}, 0x1, 0x0, 0x0, 0x8040}, 0x4048010) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xbff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) prctl$auto(0x1, 0x6, r3, 0xb117, 0x9) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) read$auto_fragmentation_threshold_ops_(r2, &(0x7f00000000c0)=""/118, 0x76) r4 = io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) pread64$auto(r5, 0x0, 0xd56c, 0xa84) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_pid_set_timerslack_ns_operations_base(r4, &(0x7f0000000440)=""/242, 0xf2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) executing program 1: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0xffffffffffffff78, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000) (async) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf, @inferred=0x0, @inferred=0x0}) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_FD={0x8, 0x17, r5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x400c004) openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/hci2/msft_opcode\x00', 0x2, 0x0) (async) r7 = socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x20055) (async) close_range$auto(0x2, 0x8, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket(0x1e, 0x4, 0x0) (async) msgctl$auto_MSG_INFO(0x3, 0xc, &(0x7f0000000340)={{0x5, r1, r2, 0x166e4, 0x7fff, 0x2, 0x2c0c}, &(0x7f0000000180)=0xfb, &(0x7f0000000300)=0x8, 0x6, 0x10, 0x7, 0x4, 0x7, 0x8, 0x8, 0x6, @inferred=r4, @raw=0x1}) (async) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r7, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000003380)=ANY=[@ANYBLOB="000000007b01000000000000eff9572052692b8d21624400d379294ce398e3f3ab72cba8e77c1e6624ed74", @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf2508000000a01402802343c300e36d9d35664707ca695b6780703d51f821b8d8fa95d0eaac62974ad2fb32f858df25c68801d00db3f2987ffa73bd3a5763afd4907efddda2d8ff2a29d38b9ef11c1167a16d11e0182cf5e6b85903193e4f9284d7c8e93796f416c2732e8a90d8d1a903579c9a9b5540e735a727afbcc4f512bc898b4da86c8f9cc3ef9b8cfb1a64cb6dbea2dee32857bd2147cbe4be980b40c42c5957d12adb6930ed28ba2b490f4c442cef6cd886e5875e51c2b010e13264a1d7597bfa4e72c91d48dba387631a66f9964726731a98f4a8182fedcf65f9be44bc4f33468d154bd5977e4f852618e54748deeefb64b5b03b0d8f0765d8946781c9c8d37d3fcae907b1dfa26b65f586937a57e2ce0e6b798045d2a28a18ea43daa2f1d11dce38d551cf97b1da1aeb4afba82ffbb9348fba7446dd06b440a7f2351efe6ef6677c5c8cb27d071c1b98706c1539ef5b79b981752574885d17b212d151935acc5585aae7be70fd6c0fbd3ff00ac15f1b2dbfaea703d6f3232366715a8a4333cc16d0a0d8704e5c423867cbbe45c7fff208e399683bf17ce0d5745a2596737fd25771816c1f979664900258ebe8363ee53ed13cc69075cc27c7764fdae617d786032c90c68dfc0d703ccfcdf611f7ff8a6794284f9c2034af2f2cc40ef687653d6e6abb26fd37f1cadffe08014a475dc36c86dbd1feceb24632044cd822db220fcedb3ef4a4aef9b9e92fafa750c0d3e410a901f12648a09d601247f321b14e0443a110dbcd6540f7d00cec224e994365482976c7871b780e5355ba772dd7724cc11252efecbfbdd9564e5c5f6c2dc62c60ac54f6490537e88316e8f661974cd4ce864c70986838894185504838999a2535b1ed2b58fbc1f68ec8963986dbac0b7ec50980a236cf4b02492cf95c5a51e7bfaf4f9a4c2e89b3a6e83c5b3c42a4a2ca080dc33bc78f6dfde7dbfb93a85398ff4c5839c623b0d4b323862fb3d26dd4da5493aff51a06a5f8707aa67780b22dc7ea6237ed3db8d2654e8b56825e9f6b19045818eb291b4f13fb9a82b0d46a8e942c8b02f1e2f689d51fc3355ba119879ed5b7c8fab9fafc567f4978c88fb4a9f5553a8fb654bedaeb4dd08701ccba2257dac749cdcad003b8c60bde3b4724689c384a290bba34a6f18f50a97181e0d17b94ff0e45d6a09f27399d03551cd2d701714d607ff425956dbed026283faa05f64ab406d5eb709ddd09aa624d44665b3f470692433af35073855ff23a09b6695d0b02bdc20ad5dce1d9c43e688294e19a39394f5ea9ea0ff3f57e4bf7ca51b8631b3b0218544ba44b165552952c9d1d5b4c7d3237c424a6200fb92c8fee74a91daa3416aac490c092f21491f113ee9b9489fc9686e83e2a0b69cb04eaaa4dc9fe67c3d3864980f139310cd11d8250a84eb26d94096709f1c36e2131f62fa7c2ff1699ab9a8846878c2d0aac6c99875758db9c473ec7e0c173a5592f8fa016b8d6851bc78cc3c4faaab844e17e015621b68029646a027900307cd40265a18493d2575f4860fd8413a5fa909af0ce444c585666feddf81dd3a47312bfdf782ca1b24065f10e78ad0ec51d6620e6fb24bbaff83cda4f7588d0af25fdcc139b48aafc5023d4f78332c45d60a7ad8c7d6efe93d4d28ad93b1929329c50f116dbce55f3ed29260f1b83405e4f55ea79bef6b165b81185074f3ccfbb340db6eae2006ca4a8bc159b704e662c7057f1c52a13aa5a0bd58d126bbb1e88282c9a6c9e1f6c609d099ecc553441733863275f3b910c784e02100210fc26d9768d4913c2241bb15c75a95b99d506d99e69b4d949c7a70f58505fce4a5cf9ab135dbe7eda6e61acec8a9161446cd832ed4cd0af42cddda338bd090544952a49360fc6401e6c70260e98158d85518dfbcafe85d7d03019bf5e5a512a57865a33692fec3c0a56e3220f1f60b7d7f57353edecda4f932121f6eccf1c46cd53995c95a467eda11e7b95774109a41f794097bb0439143704e4e247792f8e2b2a2453ae09192f6c4fea9393e317617ada4063cfa0a60ee8b2d0c7404da81a34b1f0fe2e767e2a24c3edfc19bee77078ed1ad965965bfb503d3fb4ab3aff508ec0c2eb8b6391fa7c9370b55dc99897e7479cf84c67951c017fb9a59aed6848b7652737f1835af2b0f4f428b4501a644db4483d2ec82276b1df7f672f8ead6d8040f61692cbf9a24ef3e551446efa245e0aeeecbfa44fd26c7502eba883117aa06e7842fdf1367bfd0ccb44660c44528535cf5c56072c4891c7bb2393a2a27d977714fb1cfcf5b47e922f305809f4d971df12883e159b86c461afbebf565d2797996819ac1c7c7b654cf8a612b45ce00ac8fd52a077236844c3d4fbbfdbac0b1e20aabd6cbd6adb99cad63c4290da2c133fd01ee449fae873b9a741f991c0107f4e7eb4758f7f1e3a8965102c325c20c843760e644f5d794edf73e638f40d5df9499d3fd632aaf743fa3a90d87f318383521e229239ef0f697b274487e7a2d3b1117a39483e7d71eb5772a7cec1fc83cbf8c3778cdcfc19e96259ac393a586aa01d6f7d4be5b204761e842824452a1ebce66c676e839124b5f94ef127d18166df7d9317195911edf1d9d6a0f5475067aee1e1b0a52551720c0a851946770e544fac0f45e9a01bee6dac7818993cfe3c529e51b365d1d53f7c25a28880b8d83f356a8a26e6fd9475f5260e9b4950b8a29470cc56657dccbe4842ef30641cbaa0763511336167b741d5b5e9e394d468325dac1b75bbf1953a0bb38a359793ba32b36d72394ed085043e57dbb6605a489805f2a16ba050de13405c8052e04978297462a00bb2cc3cfe97ca75ea2841992dd63ae059441046e2fb28dd8109070d5cada8a6cc2bab685b5e530eba289f491caef17449d9ee4c6624bb1fb3f577db3134bcf7f1ed0a0620dcd65e736b20aad057baf6d513a6e00341b6d22f622395b9de7ed1f8cb007e0db826aeabbabf6968ae7c75df7eae76136dab7f708e5d9008ccd618d3330017016601323a6a60db5c0898ea3e0e0c16ccceed14a8a747aa7e7c49b4e37e5f7324326276e6f77bdd3649235749cb35cf01ebf811b61f5bca59110cb3ca489cf9c9cb1487563da86e3fd64591673b8eaf490991d87c863651ffa971a83871b1a613cd3be3e33e8c6c2c11c6f5b04ee9574a66ed159a0dbe82df326e0c4d871ccb445f380393073c2983f171b44083d53481c16cc634c5d44db84d81f74c17aeebdfacd2651f12e334209c7dc68a152693dc150694084be8afc86b2ca6e9d9590d87ef89cc4ce65298a475aaca5c414a84550050bc9668797da41af5facd07be9e24fd7c46abae93a6190cfda06331ba10e788df6b35935c931a7a28b6be1dfc20616be0534d318ae05b00904ea5af30190164c0ae6b74c2ca7c7978153524c0108cea521538edd1656664e9b023670f83291d81539eb878e1bdb3dc3b71a3dc23c0dac19806fe70c2793af3bc58ef990f06d3502ecdcd4bfdbeece68b7b07567d1cf582a971b88473a49efa240e0a47f0233970c3649c17cba1979cecdbaee35f4c7074885febc6601650fec472cb53db14874f6967afc1dd9fb903a516a73b170a36ab4f5b092e06aa6469f6b33eace9f7923707fcb3cd15e78e0eb6145b9a2ad133f1bdf5629381b5bb0c98463ab86c4ee370dcac955e7b0c0615b67d287d491c20753ae5d801a754defa4e3fdd4ea09a4cdbfe50b2bcf054c1b2c9cc0f99166f3b979993d5dd79410cee7190ac6a62441d8a9348c40dbc1418f7823cb0b550f6d7c2331a8c1f9322376f4d29dc05c35243bd82775b838a44e536e17b24e61d3b4fcc2d0e5d21e18f3929bcba1f1af0906c593126638e788f5053c6f058079a7507058a982ea9a80556d72599871e234b09092a50b86202efed53dea26d7d6b2385b056bae0794d14c5eee6b7117de44a44812ba8bab61f722303c80c0ec41da6280ea5a6101e01b4e54b6ae1a45784209c0e27d5925b2eaf1c0da26764e4bfb632761a46881ff927ad83bf05feb2e590bf498bcbb3e473b423c75a206305fccc86e604e3e9bee26d7ebb563a535dfe0b89e6a900b925baf4d5d64765edc92d4d6cb2fa1033e6dd8cd2883cdef2a3752b75d09fe57c84a5e46eb2d84be9baf252cde9d67a9a5cb231bfe354c386350b504694599b930ac3ae18313d55e77b29c1ce8a68310b029c9741869a123634cda61bba02c16bf03c5bb7f0e7dab63f7b5c70bfa763b143ea781f9ef875207208ff36b671fe5bf925217e6b0c495998ab0d9e1f4117221ec967d89e7646b2f0a789a4d94e0e32c13601f1015f8a93343ebf0bdd8829187d2f5965e05cb8a51dcaf0f657dc73f20ddced9a70c6723721747aa34580e05a05ffccaa401bacae5407f926f6dbb65d53c190c3995f6de95dff550548a8779114fbc4b2e73925733f19831bf04eb3a4c65e9b7024d1fe756b6835b6d941b32ebfd01e5ecc898611d6c0c08473aeaddd49ce6b9b889d97791d75a91d33c50278fd3a60f106f912035608d6c3aa966cd81669b84775617c41d0512bc68079329d3a5fa2a966701aa38715769cccda1bedfc565e490a52a9ac4da4093db44dd79ee532494929809444198399e604076c716e580270a1daa92a7168e0c269d0fe1eef1c5c91cb94e94e1deaeecb21979d9aad62ae9dba1a9b2ccf2cf755d2e7ab301351702badbb7fa484c4aa193d04ebb7900c7fad2bd1b4c04093d2f681f00b1c9b1332c4bf094d905a6d7e84cd9639435cf4ed1f89e3882a1a788da97db0bb30ab68867eaa5070eacda744d730f0622db0861ec77bf448ea91e54292c0975fd1a57b43e6da057555fa8c0443deaed40e5c6fec2b0133ed6ad18df3379eba37cdd6707bef5a8e9b4a5ead34f2a9fe79e6ecb15d284b265c17ff228fbdc78d7f2bbb83e7749db0b4d940dbda126f813358572f3578f0cb5ee4d0d4812897dd0e02ca8928e686e8454d227919d9dd99c95c43c9a0fb2274694e376b5182bd7ea2c924a018e6c46461de36c2ae751b056409e19e348ece207b6478dfb9783452a29f3744a33437cd50cffa7547b15893539c6d6f0960128771bf20e03469c1a1b52fa2092b1da6a0f127c83fc989687f4c0541bc919ed10963e53b680b9dc6e4b8570dc4cd8b96cf9679d1a41c67f78ce37c67ad5a88de34e4a4298db2215f5a08df5c0aecff23349966b582dc996e348a6cad9315b3ad4d3c96ca752f49c3bf08d90e29192d46ade24272cab4e91255178b8e6634144ec877f949b3b27c9a208f8de1b0644561709a9b31833e7f0b7a32468956f30b459c261f417592b45423aff228768e010276dd34a59158f5d745ba57d03624b1831e6262c3cb964d9edf12c796a4baa7f43477bf560d2efc192957b932dde78e4741a6313061882fef4ea29f6884479bffe9c3037aee7b8653503f9ff6958dad87e1799e7303b3fcff2f3138ceb6b832e0a6cc8a43b9c738712e122388a47accf84fcb638fa901335a679d3c219e4e5d32bb5780d02a342d34637f65b9bb6288a631fb66a6c8f9ee4ea3bdf7ced7d807435ed96868d3a7ef254b1299ecdcb717d0d8f4daf987795d8a79502580e058d5bdfade970348f9fcdffc0265cdfb48a210cfd8fcbaff73319acd85c3f415e5df64beb345a08e8be36dfd4d40140078df39a95b2b817315ff176a4cd8c1cd3dce10baf220ab46b8716228310c6114a18f35f0e1aec299c8f7af0e1390c84b257f401f68c010f8bd3f4b18c5fe79f3cc06cd514c77e2e5caf5899954123c1a511be60d0b73f8b022a6f9ce9dfd37675dcd94d7fb17136361520a281f7b1496cd2f9c178ddc9096c98b74026fb2dba74af503f6953c84b713f736c4a08b3f31592e01253e1e1d38be707fda562c1d7dae20d0608aa3687fd703b6a95cf09955f701f5dced7a5181a2402a66d738ea8fb41df9499d3c6890db7bb4a317fa5eb7c2ffbc19c310e1ddd67e92e2127e2ade20e01aff0fe6bfe1985410299b87de72a748a9a0d7666bbd7e4aed704e9dc4134962dcd353b0ea3d76ddaa4a00009c14d31010ad5e0d8433a1d7fa6cd780ea1c4d51bc95da8f7c306b0140357b41e83c173354787683da4dc79aa1f7fd607347b818b274c375585fdba6a7af08009000", @ANYRES32, @ANYBLOB="924dd4230ad2ac8d7b0727852b0db588b9006a832d5262f4fb9129e53cd5fb5bb91a51c3779e85fc517f31a7b61bcfbc78665b5415697a57ca7a7029b861d21d8784cecf513dbba317291695d82e0f175964fe39769a504c212bfa808459333564e4f101510882d4bede73eddf7de45ac7ae325a52035671b0661d118dd69cbc2833ffea01a797153a9d6660a73673bdbc3b16f9cc6ca520d7e2bf4da368814dc1979ad0afcce932f06e98a759a30af89b4065be754630553e1eafe40094af1901575d9c10012d80c3bf7ededc3bc49d031b55128a453a1b9c0d6eb1aeb84ecfa288a2437c84c7be08004300", @ANYRES32=r0, @ANYBLOB="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"], 0x1930}}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r11 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r12 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) (async) ioctl$auto_PPPIOCSMRU(r11, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r11, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x7, 0xf1, 0xad}}) (async) r13 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r13, 0x10f, 0x87, 0x0, 0x14) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r9, &(0x7f0000003340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003300)={&(0x7f0000001f00)={0x13e4, 0x0, 0x420, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STATS_SRC={0x8, 0x5, 0xfff}, @ETHTOOL_A_STATS_GROUPS={0x10b3, 0x3, 0x0, 0x1, [@typed={0x1004, 0x65, 0x0, 0x0, @binary="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"}, @generic="8027fb446be1442e8adf7205ebb7266de1bd84d86c41d8973439c316ca580d6ec48602fdde43ab24a5d9d1f8b3d03ad663cb3b6b710e043aefcf9de3193f508faefb45cc05f8f2e846b8297be9cd7b24c7b1f1c4809c0828cd60006b77c8900286cbf8f345bc25d1337783a9226f9729193570c9585cfee00fcbc7f672c8c442b0b0275f3b8e4a8858a4d9e4d16f028d57fadc852fb1e98be69b244caede05", @typed={0x8, 0xad, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0xe8}]}, @ETHTOOL_A_STATS_HEADER={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_STATS_HEADER={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_STATS_GROUPS={0x4c, 0x3, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @fd=r12}, @nested={0x3c, 0x24, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r8}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x14, 0xaa, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xce, 0x0, 0x0, @uid=r10}]}, @typed={0x4, 0xf8, 0x0, 0x0, @binary}]}, @ETHTOOL_A_STATS_GROUPS={0xcc, 0x3, 0x0, 0x1, [@nested={0xc8, 0x44, 0x0, 0x1, [@nested={0x4, 0x47}, @generic="08420a21362b0c0c6d3a139429ec91626da1dd4c618d538b09b8fd4c62aa436bbba97090a699c0f41cdb4c1c803d417757eac5864d428c80968d88c50ebdab02446568062d95ffe04d8090783b7145c62002c178fdc75cd537ccf405f5e604db62ec3cf144bac1defe9727778088850cc7455e2531c79124518238de37bd950e3ec30da12ea8ff3abbdc0a7d230aa6eb3c0ae807ec1244f73eeebd789396659af0d96be65583bf44390bd05ea96fd051bba2c080", @typed={0x4, 0xaf}, @nested={0x4, 0x10a}, @nested={0x4, 0xd0}]}]}, @ETHTOOL_A_STATS_GROUPS={0x148, 0x3, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @fd}, @nested={0x7c, 0x25, 0x0, 0x1, [@nested={0x4, 0x149}, @generic="19d0460ee4b8a823be0138dbf5eff747a059fdae684a0a0c8e5b52c9554ccfc0531fa5a80606d263a451675a25089978a9443c16c76823f9d7d1d14746302a2655958131d47b854f7ea076fffab50ff543e4a4971fa8b33ac16d9a3cbafb5e5804db959af334328e452629c1", @nested={0x4, 0x106}, @nested={0x4, 0x2d}]}, @typed={0x8, 0x142, 0x0, 0x0, @pid=r3}, @nested={0xaf, 0x73, 0x0, 0x1, [@nested={0x4, 0x1d}, @generic="c6fdfc2ac660c187197d05994c8efc738b32efc0073042f616a10124fc0a7fd11ec5d2f22a9c984cca9825e2027c8187d9342e0e6ecee29c21d31ee81ea8d9109f0fa7501c59d7bf13be2433b87bd836bfaa77853516440f6fe896c9d07d47a27af6af833d0e90c1d0900edfd20dd23543a562ff5c9c37e59e1267ada9b4ed16437e7a7cd247245608645265", @nested={0x4, 0xca}, @generic="4d268e3ff82fb0650a1926", @typed={0xc, 0xda, 0x0, 0x0, @u64}]}, @typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@private=0xa010100}]}]}, 0x13e4}, 0x1, 0x0, 0x0, 0x80}, 0xc0) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) recvmmsg$auto(r13, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4d7}, 0x6, 0x0, 0x8, 0x10007fe}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) executing program 5: mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x341a21}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="64060000", @ANYBLOB="200027bd7000fbdbdf2518000000050005000000000014040280b001418004003a809ec420b7d6de0fd3ed6d9320eaa388a2a1c1c69d6d5824ab6203d7a012a29930b66896bc454b6cbe3ec6b5b1cfeaf1895b29114b727950802bcd6d0db0cc4416855924c8c40558634ceb21d715bc7cda348706fdc315e8fbd0fae5a5e514c0f1a618bb896962fb4256558a9a8656d8a8d4c1bac0e8865c14f3419e80c870d1d29af999d8f6f4738624241bc7d93cfb100436d4ff14b8531a63597195d0431c7a1335cfa1ae903c110a4d53595f04005a800400328016003f002f6465762f736e642f6d6964694332443000000004008c8014002100fe800000000000000000000000000015b44f60ae7af7eaaf436034579e8139204ee58d7ed2315b04f1239d356ee027d4acec2fb9ccc92de7f8339c1f3cc91f9f6151ce12f9f3a985ae1c5bc889d72bd191d02b27678b04e9e2e9fe6ba70dffb311e8959bbd53239791a7d3b920c8f99ad9c491dfe4e0a24850929b5eb583afcd61d4c0c682c7203d0d3c83d72f19a2baa9f4c84b1b48f0a4e846abcddab5dfbd912fc5c68784cccd4915b34e02e7409aadca8a38eb26db9e19178457dc958ee1fcd80d29a0a755cc066912f617af388d4d5ce01400e000fe8800000000000000000000000001018d019c8008", @ANYRES32=0x0, @ANYBLOB="358a2c955721a15e6af4c0cd39753ed6590da6fcfdb4efad2564485fe5a62caf7c0898175b27f07b1c85730133e949efa807d8e735087fe0f8042bc045280b7ab272986759eb9e87d26e370132de17357418c6fc8c7ab5fd82e49ec57cc7469fdfea1c5b11f1e7b7487e14005100fe8000000000000000000000000000bbf38260e6b3a502e76360b37d89d3c982ce43ed58686f5bc3b23ca5a319b633b9251d5be0ac2b9fe0920b9e0a26f211dab8a766342bbc84e046b4c55a63a4c507de549fab77dccdd3f2ce86bb16beac82ce78f66af159058e18e7e2377788e1ed06723b45ef76aa47ddff855ab89a31bafc7a2520627b3b82b80ec48569cae31e1ac6d06c94aa9abf8d4537a5962e465433b34c1801757582dd85f475a858aaa39fe10f197b1c9baa448864613855e5eeb47fe27e8108463a4f7f2a10bf13e2ba8c2cc82df2e26847d0f8df2af25d60454717a806a9d43c6f007999309720205daed28eed9366962393bde63cbe1631da8320ff9d162c2d5dbc4db715e30b550400d880000000bda20048047414e05609382ca52e910ca66fbfea399b832b3e408f8503b49f61321c0ff295c03a9ee52f359bcec5cbfa81a0000def4e63c427570e24bc62046d0c4c9d9356b9efc3c8524184b1e81bb014e52250aa61e6ea1fbd34aec8bb51f8d61e3c70cf61cc53a3ce4e80bde4bac0cd2d05746edeea629e814f0800fe80abff413603c3debe24d481d4a45cf55f7472cf815b1b672d6f2cf8f9b8861de06ed796dfa58d2698ede4eea859a977416c586558fe19af3272935d11c1f400028008000d0003000000dd0007800400328004002c0014007800fe88000000000000000000000000010104009c8004002480dd95afd616ece44c7793ef38072e089e82cc4caabc1d98f434a71d49b7120e3300f40937789792d510c89f40832070a9d58c4f04f13c537659cb249cfe2375ffce7c6d6cf245b5a806272318e67c520d4c2933394d0763882e8f9b5bcc8e363faa92e5f0b0c2588210afd7a69bbeccc71babc1f59b5c63c2aace31a464e879ed8727c72ab4b4004201d153d2615e9ceb1e57afd1c6736f48ae040075800400000014009700fc020000000000000000000000000000000000080053800400d5807000018008000300000000001400020064766d72703100000000000000000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164763000000000000000000100f6ff000300090000000800", @ANYBLOB="0500060000000000c6000280f2dd72b145bd8a228623b822f95df183ce3f470612ca4b13cf74cd7c4d941b1cd7a71be91e78c88eb31ddb5ec965eff0dc96d610fd65748cf457de07736ad236dd78e36d70ea9e78bf44803cc92f0ea4bafdd688934a271de22e4987dd0250cf3f73a2eef3c5d3f5a2e265cf7e91c319a1a420365c4b3649ceb413b5f7b19970611719de9ce78618233852d08cdeaa0db5603cc79c09ea44d6aa83e51760808e", @ANYBLOB='\x00\x00'], 0x664}, 0x1, 0x0, 0x0, 0x8040}, 0x4048010) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xbff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) prctl$auto(0x1, 0x6, r3, 0xb117, 0x9) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) read$auto_fragmentation_threshold_ops_(r2, &(0x7f00000000c0)=""/118, 0x76) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) pread64$auto(r5, 0x0, 0xd56c, 0xa84) executing program 4: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x200009, 0x20e, 0x8000000000000010, 0x602, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg1\x00', 0x4000, 0x0) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0) ioctl$auto_UI_SET_KEYBIT(r1, 0x40045565, &(0x7f0000000040)=0xe) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) (async) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f0000000900)=""/4096, 0x1000) executing program 2: mmap$auto(0x800000, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x80002) mprotect$auto(0x200000000000, 0x806121, 0x8) prlimit64$auto(0x0, 0x7f, &(0x7f0000000680)={0x4, 0x7}, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) write$auto_fops_x64_ro_(r0, &(0x7f0000000500)="f6823dce1aae9dd5df49b3cf31c97fa9a69454db52feed534eb6a13c43106e06a582039b3fc09be6ddf64c949a314c367ecdda86aea07d52e605532cc9d525b67373c119e8a13fde23d728a78a18060a5e02531feddb0982fccd9af6a33bd32a5e7a4b5cf5976dfae6da1e85507b4e2e774aa8c547dc68108ed684911ffe82f4b16497d174cf6fd351abc405e5ae6264a9fbacf36d8bd3fce6db8a4c09b7573185ae6b17b3be030245f4e63a09958719444995b589562e16f0e694d1b40413571191f8f121491902e30d2e731dae54e674258e4e2bb6603cd01b9b475f875e61", 0xe0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r3, 0x0, 0x1ff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r2, 0x0, 0x4) rseq$auto(0x0, 0x40, 0x0, 0x6) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0x0, 0x0, 0x0, 0x440a48d2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000040)=0x220, &(0x7f0000000100)=0x8) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/122, 0x7a) mmap$auto(0x3, 0x4, 0x1000000000de, 0x12, 0x2, 0x0) socket(0x26, 0x1, 0x4) r6 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0) pread64$auto(r6, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/allop_area/format\x00\x00\x00\x00\x00\x00\x0f:\xe23j\xb2\x93\x99\r\x02\xd0f\x87Wz\x1b\xc7\x9f\x0f7\xe8\x94\xac(,\x03\x03\xff\xc4*o\xcbf\xe4\x8a\x10\xf3\x7fA\x02:Y\xcf\x1b\x8e\x91%\x00\xf9\xff6\xa6\\\x80\x0f\xfa\xd4\xec\xa6\x0e\x1c,\'\\Aq\xae\x8e\x9c_ \x0f\v\xd3\xcb\xe4\"\xf2\x95\x8e\xc0q\x03;\x16\x84apq\xb4\x88o\xe2\x8c\xb2\xbf\x18z\xee\x8f\x05\x84\xdb\xcbP\xfa\xcec\xa4\xec\xd3\xa9[\x91xV\xd5g\xdf)\xfbJ\xaeNI\x13o\xb8\x98\xc9\x06yP>N\xe7\xf4e\xc2\x97\x02_\xeaV\xc9Vk\xaff\v\xc7\x7f\xdc\xd4\xca\xcf\x94\xb6\x1dK\xc0\xdd\x83w\xe0\x8dx\f\x17>\xa1\riQ\xb7\x03=1\xb7\xed\x1e&t\xffHx>\xc9\xac\x17/\x16\x92y\x87\xc6\x90\x8c\xcb\x86H5\n\xa2\xe8\x03\x92\xc3\xa9\xfb\x9eh\xec\xa9\x8d\xb80\x86\xa6\xa5\xd4I\xfe\xc6]F\xbe\xa0\xda\xa2\x13\xc6\xfb\xe6\xee\xf4Z,\x10\x10C0\x8b\xfd\xfb\xee\x93\x125\xfe\xc4z\"\xc6=Z\xacM\x14\x8f?w\x88S;eNL\xcd.(\xccT\xfaI\a\x1c\xb5\x8d\xf8\xccd\x1f\x1b\xb48\xb1\xbc\xfb\x13f\xa5\xd2\xfb\x17\xff\xe8\xd9\b3\x95\xa7\x85\xb1\x98\xd0\xcf\xbf=\xf7\xd0q1\b\xd2|\xc1B\xcc#5', 0x100000001, 0x8) shutdown$auto(0x200000003, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x3, 0xfff, 0xf, 0xfffffffffffffff3, 0x1, 0x5, 0x7, 0x9, 0x7, 0x0, 0x0, 0x0, 0x204, 0xfffffffe, 0x0, 0xffff, 0xffffffff, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001]}, 0x1fe, 0x9) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x8, 0xe) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9", @raw}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x4, 0x7, 0x6, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x7, 0x3, 0x4f3, 0xc, 0x4, 0xe02, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x4, 0xa, 0x0, 0x6, 0x800, 0x0, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x5, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1ff, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x7, 0x8000000000000001, 0x7, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0x1, 0x40, 0x1, 0x7, 0x2, 0x3, 0x8, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) madvise$auto(0x0, 0x2003f0, 0x17) executing program 4: statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0x4b8, 0x4}, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) io_destroy$auto(0xfffffffffffffffb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) executing program 1: mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r0 = gettid() r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) copy_file_range$auto(r1, 0x0, r1, 0x0, 0x8001, 0x1b208608) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r0, 0x11) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/rto_max\x00', 0x101201, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) executing program 2: sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x2) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x7409359dd5865fac) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x1, 0x4c, 0x0, 0x0) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x40802, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x10000043403d05, 0x0) lseek$auto(r0, 0x7, 0xc) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b66, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) socket(0x15, 0x800, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x3ff, 0x80200000007, 0x22, 0x5f, 0x20000000000803}, 0x6f0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) fcntl$auto_F_RDLCK(r3, 0xc4, 0x0) executing program 5: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x27, 0x1, 0xdc, 0x10, 0x401, 0x0) modify_ldt$auto(0xe, 0x0, 0xf) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/034/001\x00', 0x1a1040, 0x0) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x28, r1, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x800}]}, 0x28}, 0x1, 0x0, 0x8000000000000, 0x48c1}, 0xc000) executing program 2: r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x21, 0x2, 0x2) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x1, 0x0) socket(0x11, 0x80003, 0x300) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x8, 0x2, 0x9b72, r2, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sysvipc/sem\x00', 0x303c02, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x5, 0x1, 0x2) executing program 5: mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x4, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, 0x0, 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) write$auto_proc_mem_operations_base(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = socket(0x10, 0x1, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYRES8=r1, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) executing program 4: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0xffffffffffffffff, 0xe, 0x146) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) listen$auto(0x3, 0x83) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x29, 0x4e, 0x0, 0x10000110) clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) sysfs$auto(0x2, 0xd, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="070986acbdecd86de29e8200000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000080) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000002240)='/proc/thread-self/environ\x00', 0x8400, 0x0) read$auto_proc_environ_operations_base(r4, &(0x7f0000002280)=""/169, 0xa9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/sub3/hw_params\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000002100)=""/15, 0xf) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r7 = memfd_create$auto(&(0x7f00000026c0)='\'#\x00', 0x6) ioctl$auto_FIBMAP(r7, 0x1, 0x4) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) executing program 2: r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) (async) io_cancel$auto(0x3, &(0x7f0000000000)={0x3, 0x9, 0x0, 0x10, 0x8, 0x2, 0xff, 0x1, 0x7ff, 0x0, 0x3}, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) close_range$auto(0x2, 0x8, 0x0) (async) utimensat$auto(0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0) (async) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) (async) syz_clone3(0x0, 0x0) (async) mincore$auto(0x1000, 0x4000000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000580)="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", 0x100) (async) io_uring_setup$auto(0xefa9, &(0x7f0000000080)={0xfffffffe, 0x8, 0x6, 0x1, 0x1, 0xffff939b, r0, [0x1ff, 0x5, 0x1], {0x4, 0x200, 0x9, 0x7fff, 0x2, 0x1, 0x8, 0x9, 0x9}, {0xd4, 0x1, 0x81, 0xdb, 0xc, 0x10000, 0x2, 0x0, 0x8}}) (async) write$auto(r0, 0x0, 0x0) executing program 4: r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) ioctl$auto(r0, 0x80045113, 0xffffffffffffffff) openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101741, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x2) executing program 1: openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0x4) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) executing program 5: openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0) write$auto(r0, &(0x7f0000000380)='+\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r1 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/loginuid\x00', 0xf8928411f183eac, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb2, r1, 0xfffffffffffffffe) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r2, 0x0, 0x20000000001, 0x7fff) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 5: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xcc843, 0x0) statmount$auto(0x0, &(0x7f00000004c0)={0x8, 0x1, 0x9, 0xa, 0x43e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x405, 0x7f, 0x3, 0x6, 0x4, 0xb2, 0x627, 0xa838, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40087, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40009, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0xffffffffffffffff, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x6, 0x0, 0x1, 0x2]}, 0x1fe, 0x200c) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x8, 0x5, 0x7fffffff, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="bd5a", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000480)='-_', 0x2) r4 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) times$auto(0xfffffffffffffffc) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xffffffff) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r5, 0x7fd, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) sendfile$auto(0x1, r6, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000480), r4) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24006011}, 0x400004a) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program did not crash program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit bisect: bisecting 38 programs bisect: split chunks (needed=false): <37> bisect: split chunk #0 of len 37 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 25, 26, 30, 23, 9, 30, 4, 14, 19, 29, 5, 4, 16, 30, 19, 26, 21, 4, 9, 10, 20, 30, 40] detailed listing: executing program 33: socket(0x11, 0x80003, 0x300) socket(0x11, 0xa, 0x300) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r0 = open(0x0, 0x169443, 0x114) pipe$auto(&(0x7f0000000000)) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4-n\xf85\xc3\x18\xe6\xc7\x92${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3000c, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x5402, r1) getrandom$auto(0x0, 0x6000000, 0x3) fcntl$auto(r0, 0x40a, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) socket(0x18, 0xa, 0x1) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000010) prctl$auto_PR_SET_TIMING(0xe, 0x3, 0x1, 0x2, 0xfffffffffffffff6) (async) readv$auto(r0, &(0x7f0000000200)={&(0x7f0000000140)="e610f0ccfe532dbb98d18fb46385dbc200aee487183de69337de381623e734e57f12a2cc8f6a22b8a540d20107308938a978d3657a6857513d71eaea6c7246247ccfa296ab3bed64a5c5aec48a1c57e4fb791a6812141fd854b7887145cc079b4c4e0da5ee1eeeef830f381e2c8d89781457ada9f36fa8b377f8ef0867adfacc40f891eb92b49d53dbff7e8a4d3d348b41fa8ddddf6d65fdd2984ffc715c2a2f94b77487b26472dd9770c9fc55773b4d4f76dd7a7471cd10", 0xa38}, 0x8) (async) r2 = getpgrp(0x0) r3 = fcntl$getown(r0, 0x9) kcmp$auto_KCMP_FILE(r2, r3, 0x0, r0, r0) (async, rerun: 64) r4 = getsockopt$auto(r0, 0x1, 0x8, &(0x7f0000000240)='l2tp\x00', &(0x7f0000000280)=0x2) (async, rerun: 64) ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r3, 0x6) (async) prctl$auto_PR_SET_TIMING(0xe, 0x0, 0x3, 0x100, 0x0) (async, rerun: 32) msgctl$auto_MSG_STAT(0xc011, 0xb, &(0x7f0000000340)={{0x15e, 0xee01, 0xffffffffffffffff, 0x4, 0x8, 0x2, 0x7f}, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0xe, 0x200, 0xfffffffffffffe00, 0x1, 0xffff, 0x0, 0x4b8, 0x6, 0x9, @raw=0x3, @inferred=r2}) (rerun: 32) newfstatat$auto(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x80000001, 0x6, 0x0, 0x3ff, 0xee01, 0xee00, 0x0, 0x6, 0x38e, 0x8000000000000001, 0x7fff, 0x3, 0x6f470d08, 0x7, 0x6a, 0x14, 0x80000000}, 0x3) (async) msgctl$auto_IPC_RMID(0x3, 0x0, &(0x7f0000000540)={{0x80000001, 0x0, 0x0, 0xf2, 0x6, 0x1ff, 0x2}, &(0x7f00000004c0)=0x15, &(0x7f0000000500)=0x59, 0x7, 0x40, 0x8, 0x3, 0x4, 0x3, 0x1, 0x8001, @inferred=r3, @inferred=r2}) setresuid$auto(r5, r6, r7) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) (async) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r0) sendmsg$auto_NL80211_CMD_TDLS_OPER(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x7fffffff}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x1ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40) prctl$auto_PR_SET_TIMING(0xe, 0x5, 0xaa, 0xe, 0x7) (async, rerun: 32) prctl$auto_PR_SET_TIMING(0xe, 0x6, 0xb9, 0x8, 0x2) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/platform/vhci_hcd.15/usb39/39-0:1.0/usb39-port5/disable\x00', 0x8100, 0x0) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000880), 0x90000, 0x0) select$auto(0x9, &(0x7f00000008c0)={[0x7, 0xb, 0x1000, 0x8, 0x7f, 0x3, 0xfff, 0x8, 0xfffffffffffffffe, 0x6, 0x6, 0xfffffffffffff801, 0xb4, 0x4, 0x571, 0x6]}, &(0x7f0000000940)={[0x3, 0xa000, 0x6b10, 0x1, 0x1, 0x5, 0x36f, 0x1, 0x4, 0x0, 0x8000000000000001, 0xffffffffffffff00, 0x7, 0x40, 0xef, 0x5]}, &(0x7f00000009c0)={[0x0, 0x9, 0x3, 0x4, 0x0, 0x6, 0x5, 0x7fff, 0x4, 0x5, 0x562, 0x1, 0xde4, 0x3, 0x9, 0x6]}, &(0x7f0000000a40)={0x8, 0x4}) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000ac0), r4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'veth1_virt_wifi\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b40)={'nr0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b80)={'bond_slave_1\x00', 0x0}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'virt_wifi0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000d40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0x100, r9, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5c7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3e}]}, @ETHTOOL_A_CHANNELS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) write$auto_tty_fops_tty_io(r4, &(0x7f0000000d80)="24c6281f3b334bb3e9d8b8c2d497140e2fa709c0d0a21164c44aeccc4d010e739c4ba06473c0e559a3c8df67da2cb6bc5dbe78ffd2977eaa274a1f080b7cb61c113a63a3c357cd94241583b10b5cfba91900ffc8c68de57149d5d06e774e8aa223ed6433d41fff5468c7cea253fa8cb48da6dc62f7581cf55d2f0e6f68b2203f60241daf343907829ba9f2ef19ce6a305f1fe378cf633f5f19fe0ca8bc89dea770a06803ad5565ca25f2ccaeb65a6ff7585f677d5fea58b6d89c9444b5275e3b2467479f09a3aadb1d6896fb6925412b8afbc7103aa717fe8f5ce4be42a907b6801a6df42cc7", 0xe6) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) userfaultfd$auto(0x1) mmap$auto(0x0, 0x15, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1fe, 0x7, 0x3, 0x8fd6, 0x3, 0x4, 0x15f4da0a, 0x3, 0xd, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x1, 0x200]}, 0x0) mmap$auto(0x73f9, 0x3, 0x201, 0x4000000eb0, 0xffffffffffffffff, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_prog_fd=0x77, 0xa, @old_map_fd=r3}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) executing program 2: mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x341a21}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="64060000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2518000000050005000000000014040280b001418004003a809ec420b7d6de0fd3ed6d9320eaa388a2a1c1c69d6d5824ab6203d7a012a29930b66896bc454b6cbe3ec6b5b1cfeaf1895b29114b727950802bcd6d0db0cc4416855924c8c40558634ceb21d715bc7cda348706fdc315e8fbd0fae5a5e514c0f1a618bb896962fb4256558a9a8656d8a8d4c1bac0e8865c14f3419e80c870d1d29af999d8f6f4738624241bc7d93cfb100436d4ff14b8531a63597195d0431c7a1335cfa1ae903c110a4d53595f04005a800400328016003f002f6465762f736e642f6d69646943324430", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164763000000000000000000100f6ff000300090000000800", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0500060000000000c6000280f2dd72b145bd8a228623b822f95df183ce3f470612ca4b13cf74cd7c4d941b1cd7a71be91e78c88eb31ddb5ec965eff0dc96d610fd65748cf457de07736ad236dd78e36d70ea9e78bf44803cc92f0ea4bafdd688934a271de22e4987dd0250cf3f73a2eef3c5d3f5a2e265cf7e91c319a1a420365c4b3649ceb413b5f7b19970611719de9ce78618233852d08cdeaa0db5603cc79c09ea44d6aa83e51760808eb0905b10a7bee087af8979894eafce94f346fbb30432a08a0b2b08001b00", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x664}, 0x1, 0x0, 0x0, 0x8040}, 0x4048010) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xbff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) prctl$auto(0x1, 0x6, r3, 0xb117, 0x9) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) read$auto_fragmentation_threshold_ops_(r2, &(0x7f00000000c0)=""/118, 0x76) r4 = io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) pread64$auto(r5, 0x0, 0xd56c, 0xa84) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_pid_set_timerslack_ns_operations_base(r4, &(0x7f0000000440)=""/242, 0xf2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) executing program 1: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0xffffffffffffff78, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000) (async) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf, @inferred=0x0, @inferred=0x0}) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_FD={0x8, 0x17, r5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x400c004) openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/hci2/msft_opcode\x00', 0x2, 0x0) (async) r7 = socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x20055) (async) close_range$auto(0x2, 0x8, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket(0x1e, 0x4, 0x0) (async) msgctl$auto_MSG_INFO(0x3, 0xc, &(0x7f0000000340)={{0x5, r1, r2, 0x166e4, 0x7fff, 0x2, 0x2c0c}, &(0x7f0000000180)=0xfb, &(0x7f0000000300)=0x8, 0x6, 0x10, 0x7, 0x4, 0x7, 0x8, 0x8, 0x6, @inferred=r4, @raw=0x1}) (async) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r7, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000003380)=ANY=[@ANYBLOB="000000007b01000000000000eff9572052692b8d21624400d379294ce398e3f3ab72cba8e77c1e6624ed74", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="924dd4230ad2ac8d7b0727852b0db588b9006a832d5262f4fb9129e53cd5fb5bb91a51c3779e85fc517f31a7b61bcfbc78665b5415697a57ca7a7029b861d21d8784cecf513dbba317291695d82e0f175964fe39769a504c212bfa808459333564e4f101510882d4bede73eddf7de45ac7ae325a52035671b0661d118dd69cbc2833ffea01a797153a9d6660a73673bdbc3b16f9cc6ca520d7e2bf4da368814dc1979ad0afcce932f06e98a759a30af89b4065be754630553e1eafe40094af1901575d9c10012d80c3bf7ededc3bc49d031b55128a453a1b9c0d6eb1aeb84ecfa288a2437c84c7be08004300", @ANYRES32=r0, @ANYBLOB="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"], 0x1930}}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r11 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r12 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) (async) ioctl$auto_PPPIOCSMRU(r11, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r11, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x7, 0xf1, 0xad}}) (async) r13 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r13, 0x10f, 0x87, 0x0, 0x14) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r9, &(0x7f0000003340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003300)={&(0x7f0000001f00)={0x13e4, 0x0, 0x420, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STATS_SRC={0x8, 0x5, 0xfff}, @ETHTOOL_A_STATS_GROUPS={0x10b3, 0x3, 0x0, 0x1, [@typed={0x1004, 0x65, 0x0, 0x0, @binary="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"}, @generic="8027fb446be1442e8adf7205ebb7266de1bd84d86c41d8973439c316ca580d6ec48602fdde43ab24a5d9d1f8b3d03ad663cb3b6b710e043aefcf9de3193f508faefb45cc05f8f2e846b8297be9cd7b24c7b1f1c4809c0828cd60006b77c8900286cbf8f345bc25d1337783a9226f9729193570c9585cfee00fcbc7f672c8c442b0b0275f3b8e4a8858a4d9e4d16f028d57fadc852fb1e98be69b244caede05", @typed={0x8, 0xad, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0xe8}]}, @ETHTOOL_A_STATS_HEADER={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_STATS_HEADER={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_STATS_GROUPS={0x4c, 0x3, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @fd=r12}, @nested={0x3c, 0x24, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r8}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x14, 0xaa, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xce, 0x0, 0x0, @uid=r10}]}, @typed={0x4, 0xf8, 0x0, 0x0, @binary}]}, @ETHTOOL_A_STATS_GROUPS={0xcc, 0x3, 0x0, 0x1, [@nested={0xc8, 0x44, 0x0, 0x1, [@nested={0x4, 0x47}, @generic="08420a21362b0c0c6d3a139429ec91626da1dd4c618d538b09b8fd4c62aa436bbba97090a699c0f41cdb4c1c803d417757eac5864d428c80968d88c50ebdab02446568062d95ffe04d8090783b7145c62002c178fdc75cd537ccf405f5e604db62ec3cf144bac1defe9727778088850cc7455e2531c79124518238de37bd950e3ec30da12ea8ff3abbdc0a7d230aa6eb3c0ae807ec1244f73eeebd789396659af0d96be65583bf44390bd05ea96fd051bba2c080", @typed={0x4, 0xaf}, @nested={0x4, 0x10a}, @nested={0x4, 0xd0}]}]}, @ETHTOOL_A_STATS_GROUPS={0x148, 0x3, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @fd}, @nested={0x7c, 0x25, 0x0, 0x1, [@nested={0x4, 0x149}, @generic="19d0460ee4b8a823be0138dbf5eff747a059fdae684a0a0c8e5b52c9554ccfc0531fa5a80606d263a451675a25089978a9443c16c76823f9d7d1d14746302a2655958131d47b854f7ea076fffab50ff543e4a4971fa8b33ac16d9a3cbafb5e5804db959af334328e452629c1", @nested={0x4, 0x106}, @nested={0x4, 0x2d}]}, @typed={0x8, 0x142, 0x0, 0x0, @pid=r3}, @nested={0xaf, 0x73, 0x0, 0x1, [@nested={0x4, 0x1d}, @generic="c6fdfc2ac660c187197d05994c8efc738b32efc0073042f616a10124fc0a7fd11ec5d2f22a9c984cca9825e2027c8187d9342e0e6ecee29c21d31ee81ea8d9109f0fa7501c59d7bf13be2433b87bd836bfaa77853516440f6fe896c9d07d47a27af6af833d0e90c1d0900edfd20dd23543a562ff5c9c37e59e1267ada9b4ed16437e7a7cd247245608645265", @nested={0x4, 0xca}, @generic="4d268e3ff82fb0650a1926", @typed={0xc, 0xda, 0x0, 0x0, @u64}]}, @typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@private=0xa010100}]}]}, 0x13e4}, 0x1, 0x0, 0x0, 0x80}, 0xc0) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) recvmmsg$auto(r13, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4d7}, 0x6, 0x0, 0x8, 0x10007fe}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) executing program 5: mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x341a21}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="64060000", @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="358a2c955721a15e6af4c0cd39753ed6590da6fcfdb4efad2564485fe5a62caf7c0898175b27f07b1c85730133e949efa807d8e735087fe0f8042bc045280b7ab272986759eb9e87d26e370132de17357418c6fc8c7ab5fd82e49ec57cc7469fdfea1c5b11f1e7b7487e14005100fe8000000000000000000000000000bbf38260e6b3a502e76360b37d89d3c982ce43ed58686f5bc3b23ca5a319b633b9251d5be0ac2b9fe0920b9e0a26f211dab8a766342bbc84e046b4c55a63a4c507de549fab77dccdd3f2ce86bb16beac82ce78f66af159058e18e7e2377788e1ed06723b45ef76aa47ddff855ab89a31bafc7a2520627b3b82b80ec48569cae31e1ac6d06c94aa9abf8d4537a5962e465433b34c1801757582dd85f475a858aaa39fe10f197b1c9baa448864613855e5eeb47fe27e8108463a4f7f2a10bf13e2ba8c2cc82df2e26847d0f8df2af25d60454717a806a9d43c6f007999309720205daed28eed9366962393bde63cbe1631da8320ff9d162c2d5dbc4db715e30b550400d880000000bda20048047414e05609382ca52e910ca66fbfea399b832b3e408f8503b49f61321c0ff295c03a9ee52f359bcec5cbfa81a0000def4e63c427570e24bc62046d0c4c9d9356b9efc3c8524184b1e81bb014e52250aa61e6ea1fbd34aec8bb51f8d61e3c70cf61cc53a3ce4e80bde4bac0cd2d05746edeea629e814f0800fe80abff413603c3debe24d481d4a45cf55f7472cf815b1b672d6f2cf8f9b8861de06ed796dfa58d2698ede4eea859a977416c586558fe19af3272935d11c1f400028008000d0003000000dd0007800400328004002c0014007800fe88000000000000000000000000010104009c8004002480dd95afd616ece44c7793ef38072e089e82cc4caabc1d98f434a71d49b7120e3300f40937789792d510c89f40832070a9d58c4f04f13c537659cb249cfe2375ffce7c6d6cf245b5a806272318e67c520d4c2933394d0763882e8f9b5bcc8e363faa92e5f0b0c2588210afd7a69bbeccc71babc1f59b5c63c2aace31a464e879ed8727c72ab4b4004201d153d2615e9ceb1e57afd1c6736f48ae040075800400000014009700fc020000000000000000000000000000000000080053800400d5807000018008000300000000001400020064766d72703100000000000000000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164763000000000000000000100f6ff000300090000000800", @ANYBLOB="0500060000000000c6000280f2dd72b145bd8a228623b822f95df183ce3f470612ca4b13cf74cd7c4d941b1cd7a71be91e78c88eb31ddb5ec965eff0dc96d610fd65748cf457de07736ad236dd78e36d70ea9e78bf44803cc92f0ea4bafdd688934a271de22e4987dd0250cf3f73a2eef3c5d3f5a2e265cf7e91c319a1a420365c4b3649ceb413b5f7b19970611719de9ce78618233852d08cdeaa0db5603cc79c09ea44d6aa83e51760808e", @ANYBLOB='\x00\x00'], 0x664}, 0x1, 0x0, 0x0, 0x8040}, 0x4048010) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xbff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) prctl$auto(0x1, 0x6, r3, 0xb117, 0x9) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) read$auto_fragmentation_threshold_ops_(r2, &(0x7f00000000c0)=""/118, 0x76) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) pread64$auto(r5, 0x0, 0xd56c, 0xa84) executing program 4: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x200009, 0x20e, 0x8000000000000010, 0x602, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg1\x00', 0x4000, 0x0) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0) ioctl$auto_UI_SET_KEYBIT(r1, 0x40045565, &(0x7f0000000040)=0xe) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) (async) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f0000000900)=""/4096, 0x1000) executing program 2: mmap$auto(0x800000, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x80002) mprotect$auto(0x200000000000, 0x806121, 0x8) prlimit64$auto(0x0, 0x7f, &(0x7f0000000680)={0x4, 0x7}, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) write$auto_fops_x64_ro_(r0, &(0x7f0000000500)="f6823dce1aae9dd5df49b3cf31c97fa9a69454db52feed534eb6a13c43106e06a582039b3fc09be6ddf64c949a314c367ecdda86aea07d52e605532cc9d525b67373c119e8a13fde23d728a78a18060a5e02531feddb0982fccd9af6a33bd32a5e7a4b5cf5976dfae6da1e85507b4e2e774aa8c547dc68108ed684911ffe82f4b16497d174cf6fd351abc405e5ae6264a9fbacf36d8bd3fce6db8a4c09b7573185ae6b17b3be030245f4e63a09958719444995b589562e16f0e694d1b40413571191f8f121491902e30d2e731dae54e674258e4e2bb6603cd01b9b475f875e61", 0xe0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r3, 0x0, 0x1ff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r2, 0x0, 0x4) rseq$auto(0x0, 0x40, 0x0, 0x6) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0x0, 0x0, 0x0, 0x440a48d2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000040)=0x220, &(0x7f0000000100)=0x8) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/122, 0x7a) mmap$auto(0x3, 0x4, 0x1000000000de, 0x12, 0x2, 0x0) socket(0x26, 0x1, 0x4) r6 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0) pread64$auto(r6, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/allop_area/format\x00\x00\x00\x00\x00\x00\x0f:\xe23j\xb2\x93\x99\r\x02\xd0f\x87Wz\x1b\xc7\x9f\x0f7\xe8\x94\xac(,\x03\x03\xff\xc4*o\xcbf\xe4\x8a\x10\xf3\x7fA\x02:Y\xcf\x1b\x8e\x91%\x00\xf9\xff6\xa6\\\x80\x0f\xfa\xd4\xec\xa6\x0e\x1c,\'\\Aq\xae\x8e\x9c_ \x0f\v\xd3\xcb\xe4\"\xf2\x95\x8e\xc0q\x03;\x16\x84apq\xb4\x88o\xe2\x8c\xb2\xbf\x18z\xee\x8f\x05\x84\xdb\xcbP\xfa\xcec\xa4\xec\xd3\xa9[\x91xV\xd5g\xdf)\xfbJ\xaeNI\x13o\xb8\x98\xc9\x06yP>N\xe7\xf4e\xc2\x97\x02_\xeaV\xc9Vk\xaff\v\xc7\x7f\xdc\xd4\xca\xcf\x94\xb6\x1dK\xc0\xdd\x83w\xe0\x8dx\f\x17>\xa1\riQ\xb7\x03=1\xb7\xed\x1e&t\xffHx>\xc9\xac\x17/\x16\x92y\x87\xc6\x90\x8c\xcb\x86H5\n\xa2\xe8\x03\x92\xc3\xa9\xfb\x9eh\xec\xa9\x8d\xb80\x86\xa6\xa5\xd4I\xfe\xc6]F\xbe\xa0\xda\xa2\x13\xc6\xfb\xe6\xee\xf4Z,\x10\x10C0\x8b\xfd\xfb\xee\x93\x125\xfe\xc4z\"\xc6=Z\xacM\x14\x8f?w\x88S;eNL\xcd.(\xccT\xfaI\a\x1c\xb5\x8d\xf8\xccd\x1f\x1b\xb48\xb1\xbc\xfb\x13f\xa5\xd2\xfb\x17\xff\xe8\xd9\b3\x95\xa7\x85\xb1\x98\xd0\xcf\xbf=\xf7\xd0q1\b\xd2|\xc1B\xcc#5', 0x100000001, 0x8) shutdown$auto(0x200000003, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x3, 0xfff, 0xf, 0xfffffffffffffff3, 0x1, 0x5, 0x7, 0x9, 0x7, 0x0, 0x0, 0x0, 0x204, 0xfffffffe, 0x0, 0xffff, 0xffffffff, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001]}, 0x1fe, 0x9) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x8, 0xe) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9", @raw}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x4, 0x7, 0x6, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x7, 0x3, 0x4f3, 0xc, 0x4, 0xe02, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x4, 0xa, 0x0, 0x6, 0x800, 0x0, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x5, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1ff, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x7, 0x8000000000000001, 0x7, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0x1, 0x40, 0x1, 0x7, 0x2, 0x3, 0x8, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) madvise$auto(0x0, 0x2003f0, 0x17) executing program 4: statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0x4b8, 0x4}, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) io_destroy$auto(0xfffffffffffffffb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) executing program 1: mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r0 = gettid() r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) copy_file_range$auto(r1, 0x0, r1, 0x0, 0x8001, 0x1b208608) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r0, 0x11) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/rto_max\x00', 0x101201, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) executing program 2: sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x2) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x7409359dd5865fac) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x1, 0x4c, 0x0, 0x0) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x40802, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x10000043403d05, 0x0) lseek$auto(r0, 0x7, 0xc) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b66, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) socket(0x15, 0x800, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x3ff, 0x80200000007, 0x22, 0x5f, 0x20000000000803}, 0x6f0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) fcntl$auto_F_RDLCK(r3, 0xc4, 0x0) executing program 5: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x27, 0x1, 0xdc, 0x10, 0x401, 0x0) modify_ldt$auto(0xe, 0x0, 0xf) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/034/001\x00', 0x1a1040, 0x0) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x28, r1, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x800}]}, 0x28}, 0x1, 0x0, 0x8000000000000, 0x48c1}, 0xc000) executing program 2: r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x21, 0x2, 0x2) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x1, 0x0) socket(0x11, 0x80003, 0x300) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x8, 0x2, 0x9b72, r2, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sysvipc/sem\x00', 0x303c02, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x5, 0x1, 0x2) executing program 5: mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x4, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, 0x0, 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) write$auto_proc_mem_operations_base(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = socket(0x10, 0x1, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYRES8=r1, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) executing program 4: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0xffffffffffffffff, 0xe, 0x146) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) listen$auto(0x3, 0x83) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x29, 0x4e, 0x0, 0x10000110) clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) sysfs$auto(0x2, 0xd, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="070986acbdecd86de29e8200000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000080) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000002240)='/proc/thread-self/environ\x00', 0x8400, 0x0) read$auto_proc_environ_operations_base(r4, &(0x7f0000002280)=""/169, 0xa9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/sub3/hw_params\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000002100)=""/15, 0xf) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r7 = memfd_create$auto(&(0x7f00000026c0)='\'#\x00', 0x6) ioctl$auto_FIBMAP(r7, 0x1, 0x4) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) executing program 2: r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) (async) io_cancel$auto(0x3, &(0x7f0000000000)={0x3, 0x9, 0x0, 0x10, 0x8, 0x2, 0xff, 0x1, 0x7ff, 0x0, 0x3}, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) close_range$auto(0x2, 0x8, 0x0) (async) utimensat$auto(0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0) (async) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) (async) syz_clone3(0x0, 0x0) (async) mincore$auto(0x1000, 0x4000000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000580)="8c69afb02b3c00966523093dc13c01f93f402db0b0fdef032c8ab2ec860a96202254b197d50ca83f46d1101bfd73600a6647bcee20709ae25cededabd338ee913acb7321f49ff7456d4d41c602e6a6cd519335336ee0ec3edf9529516e76b683596877028410d54411ed6689fa080000000000000026e77305d491ce76bf29b9d1519855bf2734a7d672768cefc39af1da24f1a137e87c2b0b01791baaf4f5ff84f2cc073d2b111c4ef46913804616dde90016d7aa350086a479959118e981920916da03e172b0607ca2bb96593204f529162c483c8b481b80b27785586ee3e1f659e99e535750c4bc9edd3b9da765a98d9342a09390ea68a6ac6fcc2bcbd91b", 0x100) (async) io_uring_setup$auto(0xefa9, &(0x7f0000000080)={0xfffffffe, 0x8, 0x6, 0x1, 0x1, 0xffff939b, r0, [0x1ff, 0x5, 0x1], {0x4, 0x200, 0x9, 0x7fff, 0x2, 0x1, 0x8, 0x9, 0x9}, {0xd4, 0x1, 0x81, 0xdb, 0xc, 0x10000, 0x2, 0x0, 0x8}}) (async) write$auto(r0, 0x0, 0x0) executing program 4: r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) ioctl$auto(r0, 0x80045113, 0xffffffffffffffff) openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101741, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x2) executing program 1: openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0x4) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) executing program 5: openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0) write$auto(r0, &(0x7f0000000380)='+\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r1 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/loginuid\x00', 0xf8928411f183eac, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb2, r1, 0xfffffffffffffffe) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r2, 0x0, 0x20000000001, 0x7fff) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 5: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xcc843, 0x0) statmount$auto(0x0, &(0x7f00000004c0)={0x8, 0x1, 0x9, 0xa, 0x43e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x405, 0x7f, 0x3, 0x6, 0x4, 0xb2, 0x627, 0xa838, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40087, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40009, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0xffffffffffffffff, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x6, 0x0, 0x1, 0x2]}, 0x1fe, 0x200c) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x8, 0x5, 0x7fffffff, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="bd5a", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000480)='-_', 0x2) r4 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) times$auto(0xfffffffffffffffc) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xffffffff) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r5, 0x7fd, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) sendfile$auto(0x1, r6, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000480), r4) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24006011}, 0x400004a) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 16, 30, 19, 26, 21, 4, 9, 10, 20, 30, 40] detailed listing: executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x28, r1, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x800}]}, 0x28}, 0x1, 0x0, 0x8000000000000, 0x48c1}, 0xc000) executing program 2: r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x21, 0x2, 0x2) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x1, 0x0) socket(0x11, 0x80003, 0x300) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x8, 0x2, 0x9b72, r2, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sysvipc/sem\x00', 0x303c02, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x5, 0x1, 0x2) executing program 5: mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x4, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, 0x0, 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) write$auto_proc_mem_operations_base(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = socket(0x10, 0x1, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYRES8=r1, @ANYRES16=0x0, @ANYBLOB="010025bdb3109626c5d4443f76bafaf7a8c90ce4181f90c7fa798fb6264b08fca3cd10875e8310350872690394713341a4d3fadd482a964c985328ae5533997b46f39d994e159e79ad0c05082c64c56db7cafe35b8f340ada1f0c93c3f725278f28f68d7d948ae0110a03660593a058bc6f80ebf934206373827e681b33f24045fd189f35b9f0b1583dc30193658eb004ebd1473d82baf9cd15e40c682467f017893b2687df829c1578b826b5ba823ddb23256ddbfb8c75bd8a502e0831d2b4d2141fc2e641ef496ca38da64154ff7bc4906a68957e83596b4b9e651fc5201c0b6a9f1844e50ff49b398c0346a6491949664e0e941fe06be2e9a68dc05044604f47a1b97910b0dfae669a0d0620382c8c7a49ef81693a551808f1900d7205325", @ANYBLOB="4cc28e03ae0d240bcd2aac7c48823c1cdd15bf0a366d56996120a3fbafb0b544c7479aaa6a41547f3846b51f40f583e9e377a220d86b41ec791c6d2a03cacdeee69f485b81d7463a290a6a09933e89737316e57822078818cac0a3bdee0b480fc3ddf85642d5eb94734ecc407b477db9eda46d0f98ea6b4e4d2e5994b16d59549036476c8f3f96ac7a0485981157c7d3d195acd5076eb1798a48a4c03e55888f31f63a30824f343a6e39313eeb1f41c8414952098e179886b20714e28df7ff55e17b2a04260eddf2c8d7ac6e29570bcdd52e83bb05d7633306594a50a9da4d697bcde4cd7ba58fdd456bf94109e0cf9069d38c879330b8ad2034533e1e9923101556763d5bbf802702ceb642f78001dce507bc85ac781a0824ecbb7377c112f343291ebbae047eddf7e530d8032219b8d9387bdc4e3e3c31c762dc01b7941d313f16111d66cc08da3b8ebae7d710cfd51b4b64b6124cd57bf31c4b18aa8307c6b2e6695e6bb27060f2136fa4cd8f42a969fde2841d3ae3ab27b5550479a22dfe6c2cc8726e6a745eaaec396e178e9e738ae82247bb4c530985a5b4ff0316af8d152f9b94c30455cb5ac62d4c4385d48a07c4a9a2ad7b78f692fabb9c9994431e7b73a030c846dff35f580af565ab224c7623775969440374bc01b21083794fc816dbd50d12ed0dfae7c03f9c4dfbdb0d1f24bf691bcca4d891dd2c2dac6e716326cdb475c8913777dbba9d304423e028058f720ecf67cd7b0d6b6f86a4fb03c9a489a5b59c3f1d6b88b306bb4b9815377584e94c00ccd6efe4a23f31b10bb3cd9728212deee8a0e3b4d75fcb21fa6c96a64440bd84e21bc6fb57c066a4747e1c97a94e13c43657a3a69f99949ae7a0e5dc71f19fcbc14bd180950e1e5482d409f103a84dc571ba1bf1ddd596f9fc8c11750f4da1ddb057ed7b17163d39e47c8512d344a31f02867d14efae473e8d8923a4faa7be9b4c1c1f8cfd841b578b959767001beb77990fec455e3a36e3164d31c2e882381a34952c22b9ecbc62bfffb383be8f0698fff17e794299c4684a4d215dc2b0dc7bc36797438b807ef1d68a0d04595541b950061311c21c174ded37b2ad79d7428c6018ea7ff09c2a274379c2a32f93981dad599653bada98deafc8d8f82845ab8c007324c5d304b095980191055a5165f18faa1b5bdee44912809c1da124afb45ea795c01707167e65440b81ed1d829b7d05091e94b199b7e6a5516323542efa8cde3f7b9061131156addae40efa2d9fa3499f42b7b16e11406d3bad416cdff68b02a3817ecede8c2a172dcb28862db36de68a927c36feee4d08ba98d0778a56eff57d799a600859cb45543b090d5813710bac0e32fba252ab9935fe954a8439265b4536a29a62b4d91115ba5d8b5af1a38e933f195c28044a0132899ba5064b52ec0876232d419dda18d76250f95773e0d08fc15e70d8c403c66092d2adfb03bc3246980ecc5fb5ac910cb2264da9a0886c54774289e502d64a90f0e51b89fcdd2122159705cb5d122e78deb4cd35589999fa5be4047052ab71a620b5c4c46d3196673bf9870b90b784e4c3eb55997746951e707bb4385aa2456c10115f2b52034b81178903383db2e96ff5edc909cb3aa94ac82f971c5ea96ce44f68f7462d6c793983e5f6e31f1df43bd3d5639acede2ce65758de9a008796add40f6844b19688ac86e93c9ca362cc2452411f8b4e8d4798241934f4a3406b2b30adfaad23d4bddd2da44019f6d57fa327013d974aaae077371377305cb065238ac9aa2c38a1fa7c0e562f9961e9c786455de049264dd9691c66d2747f2b633b7b5df8b8f2bffdf01bbfe28c3050995dc792ed99739ccb1e8cf7490343ccf9c2ce9ba886c4d41d9877302f4648c1d5fd13ae752221fcce9f9c5831c934a75f4fd5a164a9b11b00313de765826128367eaa7a0b057dbe38aa79fe159f597dee36923cc29726d85e7f9d6118df5f9d1b081040a5f849005ce1d4d2639c17ed7ac2671e327595cbadce0f9c3447b1f7abfdeaaab95d38bc16959461c940f5a0b911dcf78517f87573ecfd5f6e5cff4493179af19203c2b7a0a6413783f38348b42f48a6701a172dcdc328852c454b501a4f392ada9a506d73ff94de12525a64102ce493e134234c4e62f505f2045b73de304b11f65e9a1f2c8cf845551de769a45f57bde736381bcb52047c6e2b40c57f9e4489b50b29fe6c0b2317613437ca8597f2111626bfcee102c0265afddc54e1b4205af69a2953675db1d358339149f45f99b9b5c1740d0445c2ca99cea34c7fc29fcff9d88a82abc28faebf29862788c85158750ec2af04d1b8465dcb4bea89a05ce0e66320922dd6c227461ab5aa2d0bee2bc9a2d56a237279da9dc1ae4566597635538a0e2fc608b2130c86f2239eccb3ae6e278fce24528f1b6d5af77a847cfc3291fc5e8e93e468b297c9fe45b1a329f91de4070d38b8304570c1a56db7a91d11af3b54c07795f3bfa18befb73569b831710707caa6f7e58bc2316f4f9fe302472eaf125032a6bad3a0f28cf121b240b355a8f522ccb27635e2f880b38df6a1764836c480b3ef6b3871116babf0af4c3f36d9e0e6dc9aaf64315809b66dac9830a961d19f4519163757b6ad41786c7eca872e3b23cf76b3e16db91d58cf3abd7902db0e4e7721ab953f19fa0687fb1f9787ec988772c781723aef791f85505b3ef1e9ab8dcd91c80149a09844ac583c0567aa383e2ba406f16d8edc8ba741b9634deb9ea409bfcaaba3d2680d953bfbdbdf05a60f6004ef18966dae29a24846beb4ebe5c7799d50a5bac6d7e5b017b9bfcab7d5bc0d31468092f766194dc1e3cef266e563ef0d8b94e188af20301fc84f874507028f8731270753829bb51f14718eaac41e603a59afcbb8d129607cdb875f2625863c30052930a0371f09bba3d2b7175f96c90deaf928654135e3d69c11905f649143dc74987ebd6186fb2ada26da874753e67179c2b68cbc1ae352407a64cdad20013b1f083cb32a8b71c37d7529214e67b0c8bb09ff5423c1b826f8a4b03af6daa07c9e1ac07fde79a5cc84d5a3b1ea059395dee2a771b9ffb778627165b0b78d8f8db722ff26f57af9ccb3329f90fea09bdd775f24ffd8d1ea41fa6f24c2f9a2e9cc89647a471ee8cf340bf4b3698752d1f0b2af411d9537f1f3a0bccd769aea9831e4ae7005b161860df89f23ea4a0292cf598c9b48a194243cecad70c8d008d668e728558fce1579a6551cda9574ce0b429b3eadfa76206768ce82981d79e870ef56c709c33256a55daf6c83bdb4b86ba5e39df32fe5e8c232b5c0b7be25984ff9525bbaced3f9df00e84c4de520dc27369c16236e7496f0b35b4b2ee152ed4bccfc3bf326db5cfde5996e2a761de0c6bc0ebffbc8a44b3db176d21d1f431a1927fd9d028008b1b75a9d40db74bbaac90cb40f2b2c2bcf28f10bbbaf8398c69f43fa0f3bb12827ac4fa80bd2374ffca6a6c50fd9ac676de677973a61dab4cd164fbfe4194258a70ba7bbfd4a331070c39561c97d744da6e3efcc92e04cf1f9195262ed9ebb3d1a874c3292a57804687b61332e4e094a5eb9c2135f4a5b2975a699c0c71b78d349d6de9f3a980e6cdac8a0148afbbe9d63517581342181a5d5d2fa5a32ab5c231969ad27826d7ee5f286c194108de1a8e36d5e1d7923597ac2eab1267594594833a9a601a7269c2214a5da8d33e36aee0319a7506f9155e7af63595da36aa5092ab60425eaf6f2ffb228a57cc8f3c44f3cd9d96cf9954ffd5a10cce63f5f32e7ae06e1842eea7db50d270420250343b5eb87546c2da03f06fe863ea433cc8db226f90218e643f6d77f371805b19bf8cb0b79ecca0cd980575137c5ae01c20337d93063ecc15caf426596d258be383c0311ce044c6b38410db1ec62af22485cedf37268c46f43cb52848ff8350a5f58bbf493e9be98425c0594f5338432544383442b6df5b2f048fbc4531df8e5c6f349be8ad04ec4fc91b056a652058ed219a66d975c69359ea8d376c585a99c4f4193150c0a69f4f908687e246a6f05163f432ff166fe40646e5b0d92433ec2be35ee6d6f9654716ff7a5f87d8c03e3c3b17f68a96ec32b040623f2f1fe970b9de1c670938486be086fdb70a17e6c868b261bf5998845f0b7490869fff369d96e451aa9e1bca13bec0f1504067a5fdbf4d63c94eb6fa1ba13c01b2d352255c8a14124a2da554e46c795e4224b3454f8d77754c9f0135bf483f6601e0d4684aac9674e758ba7360ae0a0c95c8c93705a3f40edbb6b6b4427e0f3ebd7bda172db4e732b15e47e2474f2dc91f1c78a0871bb878067443bf591cf9259ab3abb425edfbbb169bbc2a7568da5161214120211271e9b556545ce99f80d0274ec071b82021fbf895c63ee4a828fa1edc9287248578d5c1b623f9c0f6dfd70e3df5798be0e609dfdf204c5489b8de401a6530a593a917fc44c0fd0ec7fdcd26e999117fea16115d0dd2ba3e4acaadbf6ed4c304368c1fa2f1eba07f43ced616131368efa6834098953b7026949320cf21a2669fe33b779c450e264c8d80e24bbdf93ae4245e2da553b3cde320ffb707e8693c6bf6eab6cdba700404439c7480cc7c7fd48bd26b32ea25d0cf143805171ebf385e4dcb01555560fd6208896adf160adb9749ef52c740fd799e467e6f1721662d53f69019a2518fd64676ac95bc90acc3ba4698693f9540e47ce1227e39171e9bc05611795e2cca8840405d00aace56dd13b4e2b2f6959b2b106da05beefd79b2a63deef1331f221d33215d41431e6ff32d1a11281ef0521d7df6c72916616648aec0291a5c86ae7b6b5919652371f9f39d04d835009959ad4cd7e303378c09e20e91747cead2c4761418c8020a17b97e88084fbd6063a88af01fda46c86cba13ba539ab64faef52f766d7a43f9e3659e828332124e95aa453d4c07e06a248e27772f4c54a84c3ff67e33933ee627d1e9e64a0341cff602dbf48b31437e98a334e886ed91c4db7e74dc43a4ce9516554ccf42af75af611f84bc2309e9bb36bbf89ad4bda8918e4b091aca5821427956b2b76808ea4747b66442bfd4feca6fe5ec5121bbe50840caf03cac57345f0d8f693856db08c208a03b364a4cf2c964055c8117b3be69bd59ed991f9c6dd7c90497778d60a05f8af1695c50ea7c6dbbbee70ee59217ac62afab3a671c51ecc2159c269a8b3fa608b123e445aa8a9664a21b160efe9d9b54f6333ccda80a51f80dc202209d7d12b111b91e3d12e6eeacaeee0400de1173945d6971cfe6e884cdd645f4906d6a856feb49b93f3bba6e6f140b322bab2e671f82b91d3b092eca03460e018d30a9528af67e3138d142adbaeae6106259a643aba6722fc3615756920192eb6bd78626f04b95196f7473e0477cf53ffaba3bbabd875c024d155597a471a02cf8f2530c554c2e3a1a816019bba5b2a9922ed694b75bbaa7df2455bb46efba68339ceecf2e119a0474b16e430e45eda6f368206e33060233bfb51c08d44f9ca6606a8b0f6726e834078eb39f3df6588e17a71301df5147d008f6a71d0a8f692d975ec1aced572c9c5cd54568fb5de5e24803e95c7091016441464558ed31c5cff8c1e523367006a0ed299707cbbaa3fff121c09c34de44ea7b8e56054e9fdc082538fd01c5a1db5038f90d49eb0685161dbab9f123eb56a2c2a45f3c6852a1100a60abc7b0bcdf80f04e40aac3e544af860a2b7c26f11a97094aeb6a673962fe602fca19ec369691fa1a39b410a5bbe6761217251c2fc20", @ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) executing program 4: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0xffffffffffffffff, 0xe, 0x146) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) listen$auto(0x3, 0x83) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x29, 0x4e, 0x0, 0x10000110) clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) sysfs$auto(0x2, 0xd, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="070986acbdecd86de29e8200000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000080) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000002240)='/proc/thread-self/environ\x00', 0x8400, 0x0) read$auto_proc_environ_operations_base(r4, &(0x7f0000002280)=""/169, 0xa9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/sub3/hw_params\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000002100)=""/15, 0xf) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r7 = memfd_create$auto(&(0x7f00000026c0)='\'#\x00', 0x6) ioctl$auto_FIBMAP(r7, 0x1, 0x4) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) executing program 2: r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) (async) io_cancel$auto(0x3, &(0x7f0000000000)={0x3, 0x9, 0x0, 0x10, 0x8, 0x2, 0xff, 0x1, 0x7ff, 0x0, 0x3}, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) close_range$auto(0x2, 0x8, 0x0) (async) utimensat$auto(0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0) (async) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) (async) syz_clone3(0x0, 0x0) (async) mincore$auto(0x1000, 0x4000000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000580)="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", 0x100) (async) io_uring_setup$auto(0xefa9, &(0x7f0000000080)={0xfffffffe, 0x8, 0x6, 0x1, 0x1, 0xffff939b, r0, [0x1ff, 0x5, 0x1], {0x4, 0x200, 0x9, 0x7fff, 0x2, 0x1, 0x8, 0x9, 0x9}, {0xd4, 0x1, 0x81, 0xdb, 0xc, 0x10000, 0x2, 0x0, 0x8}}) (async) write$auto(r0, 0x0, 0x0) executing program 4: r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) ioctl$auto(r0, 0x80045113, 0xffffffffffffffff) openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101741, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x2) executing program 1: openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0x4) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) executing program 5: openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0) write$auto(r0, &(0x7f0000000380)='+\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r1 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/loginuid\x00', 0xf8928411f183eac, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb2, r1, 0xfffffffffffffffe) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r2, 0x0, 0x20000000001, 0x7fff) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 5: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xcc843, 0x0) statmount$auto(0x0, &(0x7f00000004c0)={0x8, 0x1, 0x9, 0xa, 0x43e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x405, 0x7f, 0x3, 0x6, 0x4, 0xb2, 0x627, 0xa838, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40087, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40009, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0xffffffffffffffff, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x6, 0x0, 0x1, 0x2]}, 0x1fe, 0x200c) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x8, 0x5, 0x7fffffff, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="bd5a", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000480)='-_', 0x2) r4 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) times$auto(0xfffffffffffffffc) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xffffffff) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r5, 0x7fd, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) sendfile$auto(0x1, r6, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000480), r4) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24006011}, 0x400004a) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 25, 26, 30, 23, 9, 30, 4, 14, 19, 29, 5, 20] detailed listing: executing program 33: socket(0x11, 0x80003, 0x300) socket(0x11, 0xa, 0x300) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r0 = open(0x0, 0x169443, 0x114) pipe$auto(&(0x7f0000000000)) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4-n\xf85\xc3\x18\xe6\xc7\x92${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3000c, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x5402, r1) getrandom$auto(0x0, 0x6000000, 0x3) fcntl$auto(r0, 0x40a, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) socket(0x18, 0xa, 0x1) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000010) prctl$auto_PR_SET_TIMING(0xe, 0x3, 0x1, 0x2, 0xfffffffffffffff6) (async) readv$auto(r0, &(0x7f0000000200)={&(0x7f0000000140)="e610f0ccfe532dbb98d18fb46385dbc200aee487183de69337de381623e734e57f12a2cc8f6a22b8a540d20107308938a978d3657a6857513d71eaea6c7246247ccfa296ab3bed64a5c5aec48a1c57e4fb791a6812141fd854b7887145cc079b4c4e0da5ee1eeeef830f381e2c8d89781457ada9f36fa8b377f8ef0867adfacc40f891eb92b49d53dbff7e8a4d3d348b41fa8ddddf6d65fdd2984ffc715c2a2f94b77487b26472dd9770c9fc55773b4d4f76dd7a7471cd10", 0xa38}, 0x8) (async) r2 = getpgrp(0x0) r3 = fcntl$getown(r0, 0x9) kcmp$auto_KCMP_FILE(r2, r3, 0x0, r0, r0) (async, rerun: 64) r4 = getsockopt$auto(r0, 0x1, 0x8, &(0x7f0000000240)='l2tp\x00', &(0x7f0000000280)=0x2) (async, rerun: 64) ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r3, 0x6) (async) prctl$auto_PR_SET_TIMING(0xe, 0x0, 0x3, 0x100, 0x0) (async, rerun: 32) msgctl$auto_MSG_STAT(0xc011, 0xb, &(0x7f0000000340)={{0x15e, 0xee01, 0xffffffffffffffff, 0x4, 0x8, 0x2, 0x7f}, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0xe, 0x200, 0xfffffffffffffe00, 0x1, 0xffff, 0x0, 0x4b8, 0x6, 0x9, @raw=0x3, @inferred=r2}) (rerun: 32) newfstatat$auto(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x80000001, 0x6, 0x0, 0x3ff, 0xee01, 0xee00, 0x0, 0x6, 0x38e, 0x8000000000000001, 0x7fff, 0x3, 0x6f470d08, 0x7, 0x6a, 0x14, 0x80000000}, 0x3) (async) msgctl$auto_IPC_RMID(0x3, 0x0, &(0x7f0000000540)={{0x80000001, 0x0, 0x0, 0xf2, 0x6, 0x1ff, 0x2}, &(0x7f00000004c0)=0x15, &(0x7f0000000500)=0x59, 0x7, 0x40, 0x8, 0x3, 0x4, 0x3, 0x1, 0x8001, @inferred=r3, @inferred=r2}) setresuid$auto(r5, r6, r7) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) (async) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r0) sendmsg$auto_NL80211_CMD_TDLS_OPER(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x7fffffff}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x1ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40) prctl$auto_PR_SET_TIMING(0xe, 0x5, 0xaa, 0xe, 0x7) (async, rerun: 32) prctl$auto_PR_SET_TIMING(0xe, 0x6, 0xb9, 0x8, 0x2) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/platform/vhci_hcd.15/usb39/39-0:1.0/usb39-port5/disable\x00', 0x8100, 0x0) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000880), 0x90000, 0x0) select$auto(0x9, &(0x7f00000008c0)={[0x7, 0xb, 0x1000, 0x8, 0x7f, 0x3, 0xfff, 0x8, 0xfffffffffffffffe, 0x6, 0x6, 0xfffffffffffff801, 0xb4, 0x4, 0x571, 0x6]}, &(0x7f0000000940)={[0x3, 0xa000, 0x6b10, 0x1, 0x1, 0x5, 0x36f, 0x1, 0x4, 0x0, 0x8000000000000001, 0xffffffffffffff00, 0x7, 0x40, 0xef, 0x5]}, &(0x7f00000009c0)={[0x0, 0x9, 0x3, 0x4, 0x0, 0x6, 0x5, 0x7fff, 0x4, 0x5, 0x562, 0x1, 0xde4, 0x3, 0x9, 0x6]}, &(0x7f0000000a40)={0x8, 0x4}) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000ac0), r4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'veth1_virt_wifi\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b40)={'nr0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b80)={'bond_slave_1\x00', 0x0}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'virt_wifi0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000d40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0x100, r9, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5c7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3e}]}, @ETHTOOL_A_CHANNELS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) write$auto_tty_fops_tty_io(r4, &(0x7f0000000d80)="24c6281f3b334bb3e9d8b8c2d497140e2fa709c0d0a21164c44aeccc4d010e739c4ba06473c0e559a3c8df67da2cb6bc5dbe78ffd2977eaa274a1f080b7cb61c113a63a3c357cd94241583b10b5cfba91900ffc8c68de57149d5d06e774e8aa223ed6433d41fff5468c7cea253fa8cb48da6dc62f7581cf55d2f0e6f68b2203f60241daf343907829ba9f2ef19ce6a305f1fe378cf633f5f19fe0ca8bc89dea770a06803ad5565ca25f2ccaeb65a6ff7585f677d5fea58b6d89c9444b5275e3b2467479f09a3aadb1d6896fb6925412b8afbc7103aa717fe8f5ce4be42a907b6801a6df42cc7", 0xe6) executing program 4: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) userfaultfd$auto(0x1) mmap$auto(0x0, 0x15, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1fe, 0x7, 0x3, 0x8fd6, 0x3, 0x4, 0x15f4da0a, 0x3, 0xd, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x1, 0x200]}, 0x0) mmap$auto(0x73f9, 0x3, 0x201, 0x4000000eb0, 0xffffffffffffffff, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_prog_fd=0x77, 0xa, @old_map_fd=r3}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) executing program 2: mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x341a21}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="64060000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2518000000050005000000000014040280b001418004003a809ec420b7d6de0fd3ed6d9320eaa388a2a1c1c69d6d5824ab6203d7a012a29930b66896bc454b6cbe3ec6b5b1cfeaf1895b29114b727950802bcd6d0db0cc4416855924c8c40558634ceb21d715bc7cda348706fdc315e8fbd0fae5a5e514c0f1a618bb896962fb4256558a9a8656d8a8d4c1bac0e8865c14f3419e80c870d1d29af999d8f6f4738624241bc7d93cfb100436d4ff14b8531a63597195d0431c7a1335cfa1ae903c110a4d53595f04005a800400328016003f002f6465762f736e642f6d69646943324430", @ANYRES32=0x0, @ANYBLOB="358a2c955721a15e6af4c0cd39753ed6590da6fcfdb4efad2564485fe5a62caf7c0898175b27f07b1c85730133e949efa807d8e735087fe0f8042bc045280b7ab272986759eb9e87d26e370132de17357418c6fc8c7ab5fd82e49ec57cc7469fdfea1c5b11f1e7b7487e14005100fe8000000000000000000000000000bbf38260e6b3a502e76360b37d89d3c982ce43ed58686f5bc3b23ca5a319b633b9251d5be0ac2b9fe0920b9e0a26f211dab8a766342bbc84e046b4c55a63a4c507de549fab77dccdd3f2ce86bb16beac82ce78f66af159058e18e7e2377788e1ed06723b45ef76aa47ddff855ab89a31bafc7a2520627b3b82b80ec48569cae31e1ac6d06c94aa9abf8d4537a5962e465433b34c1801757582dd85f475a858aaa39fe10f197b1c9baa448864613855e5eeb47fe27e8108463a4f7f2a10bf13e2ba8c2cc82df2e26847d0f8df2af25d60454717a806a9d43c6f007999309720205daed28eed9366962393bde63cbe1631da8320ff9d162c2d5dbc4db715e30b550400d880000000bda20048047414e05609382ca52e910ca66fbfea399b832b3e408f8503b49f61321c0ff295c03a9ee52f359bcec5cbfa81a0000def4e63c427570e24bc62046d0c4c9d9356b9efc3c8524184b1e81bb014e52250aa61e6ea1fbd34aec8bb51f8d61e3c70cf61cc53a3ce4e80bde4bac0cd2d05746edeea629e814f0800fe80abff413603c3debe24d481d4a45cf55f7472cf815b1b672d6f2cf8f9b8861de06ed796dfa58d2698ede4eea859a977416c586558fe19af3272935d11c1f400028008000d0003000000dd0007800400328004002c0014007800fe88000000000000000000000000010104009c8004002480dd95afd616ece44c7793ef38072e089e82cc4caabc1d98f434a71d49b7120e3300f40937789792d510c89f40832070a9d58c4f04f13c537659cb249cfe2375ffce7c6d6cf245b5a806272318e67c520d4c2933394d0763882e8f9b5bcc8e363faa92e5f0b0c2588210afd7a69bbeccc71babc1f59b5c63c2aace31a464e879ed8727c72ab4b4004201d153d2615e9ceb1e57afd1c6736f48ae040075800400000014009700fc020000000000000000000000000000000000080053800400d5807000018008000300000000001400020064766d72703100000000000000000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164763000000000000000000100f6ff000300090000000800", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0500060000000000c6000280f2dd72b145bd8a228623b822f95df183ce3f470612ca4b13cf74cd7c4d941b1cd7a71be91e78c88eb31ddb5ec965eff0dc96d610fd65748cf457de07736ad236dd78e36d70ea9e78bf44803cc92f0ea4bafdd688934a271de22e4987dd0250cf3f73a2eef3c5d3f5a2e265cf7e91c319a1a420365c4b3649ceb413b5f7b19970611719de9ce78618233852d08cdeaa0db5603cc79c09ea44d6aa83e51760808eb0905b10a7bee087af8979894eafce94f346fbb30432a08a0b2b08001b00", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x664}, 0x1, 0x0, 0x0, 0x8040}, 0x4048010) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xbff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) prctl$auto(0x1, 0x6, r3, 0xb117, 0x9) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) read$auto_fragmentation_threshold_ops_(r2, &(0x7f00000000c0)=""/118, 0x76) r4 = io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) pread64$auto(r5, 0x0, 0xd56c, 0xa84) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_pid_set_timerslack_ns_operations_base(r4, &(0x7f0000000440)=""/242, 0xf2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) executing program 1: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0xffffffffffffff78, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000) (async) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf, @inferred=0x0, @inferred=0x0}) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_FD={0x8, 0x17, r5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x400c004) openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/hci2/msft_opcode\x00', 0x2, 0x0) (async) r7 = socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x20055) (async) close_range$auto(0x2, 0x8, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket(0x1e, 0x4, 0x0) (async) msgctl$auto_MSG_INFO(0x3, 0xc, &(0x7f0000000340)={{0x5, r1, r2, 0x166e4, 0x7fff, 0x2, 0x2c0c}, &(0x7f0000000180)=0xfb, &(0x7f0000000300)=0x8, 0x6, 0x10, 0x7, 0x4, 0x7, 0x8, 0x8, 0x6, @inferred=r4, @raw=0x1}) (async) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r7, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000003380)=ANY=[@ANYBLOB="000000007b01000000000000eff9572052692b8d21624400d379294ce398e3f3ab72cba8e77c1e6624ed74", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="924dd4230ad2ac8d7b0727852b0db588b9006a832d5262f4fb9129e53cd5fb5bb91a51c3779e85fc517f31a7b61bcfbc78665b5415697a57ca7a7029b861d21d8784cecf513dbba317291695d82e0f175964fe39769a504c212bfa808459333564e4f101510882d4bede73eddf7de45ac7ae325a52035671b0661d118dd69cbc2833ffea01a797153a9d6660a73673bdbc3b16f9cc6ca520d7e2bf4da368814dc1979ad0afcce932f06e98a759a30af89b4065be754630553e1eafe40094af1901575d9c10012d80c3bf7ededc3bc49d031b55128a453a1b9c0d6eb1aeb84ecfa288a2437c84c7be08004300", @ANYRES32=r0, @ANYBLOB="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"], 0x1930}}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r11 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r12 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) (async) ioctl$auto_PPPIOCSMRU(r11, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r11, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x7, 0xf1, 0xad}}) (async) r13 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r13, 0x10f, 0x87, 0x0, 0x14) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r9, &(0x7f0000003340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003300)={&(0x7f0000001f00)={0x13e4, 0x0, 0x420, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STATS_SRC={0x8, 0x5, 0xfff}, @ETHTOOL_A_STATS_GROUPS={0x10b3, 0x3, 0x0, 0x1, [@typed={0x1004, 0x65, 0x0, 0x0, @binary="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"}, @generic="8027fb446be1442e8adf7205ebb7266de1bd84d86c41d8973439c316ca580d6ec48602fdde43ab24a5d9d1f8b3d03ad663cb3b6b710e043aefcf9de3193f508faefb45cc05f8f2e846b8297be9cd7b24c7b1f1c4809c0828cd60006b77c8900286cbf8f345bc25d1337783a9226f9729193570c9585cfee00fcbc7f672c8c442b0b0275f3b8e4a8858a4d9e4d16f028d57fadc852fb1e98be69b244caede05", @typed={0x8, 0xad, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0xe8}]}, @ETHTOOL_A_STATS_HEADER={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_STATS_HEADER={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_STATS_GROUPS={0x4c, 0x3, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @fd=r12}, @nested={0x3c, 0x24, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r8}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x14, 0xaa, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xce, 0x0, 0x0, @uid=r10}]}, @typed={0x4, 0xf8, 0x0, 0x0, @binary}]}, @ETHTOOL_A_STATS_GROUPS={0xcc, 0x3, 0x0, 0x1, [@nested={0xc8, 0x44, 0x0, 0x1, [@nested={0x4, 0x47}, @generic="08420a21362b0c0c6d3a139429ec91626da1dd4c618d538b09b8fd4c62aa436bbba97090a699c0f41cdb4c1c803d417757eac5864d428c80968d88c50ebdab02446568062d95ffe04d8090783b7145c62002c178fdc75cd537ccf405f5e604db62ec3cf144bac1defe9727778088850cc7455e2531c79124518238de37bd950e3ec30da12ea8ff3abbdc0a7d230aa6eb3c0ae807ec1244f73eeebd789396659af0d96be65583bf44390bd05ea96fd051bba2c080", @typed={0x4, 0xaf}, @nested={0x4, 0x10a}, @nested={0x4, 0xd0}]}]}, @ETHTOOL_A_STATS_GROUPS={0x148, 0x3, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @fd}, @nested={0x7c, 0x25, 0x0, 0x1, [@nested={0x4, 0x149}, @generic="19d0460ee4b8a823be0138dbf5eff747a059fdae684a0a0c8e5b52c9554ccfc0531fa5a80606d263a451675a25089978a9443c16c76823f9d7d1d14746302a2655958131d47b854f7ea076fffab50ff543e4a4971fa8b33ac16d9a3cbafb5e5804db959af334328e452629c1", @nested={0x4, 0x106}, @nested={0x4, 0x2d}]}, @typed={0x8, 0x142, 0x0, 0x0, @pid=r3}, @nested={0xaf, 0x73, 0x0, 0x1, [@nested={0x4, 0x1d}, @generic="c6fdfc2ac660c187197d05994c8efc738b32efc0073042f616a10124fc0a7fd11ec5d2f22a9c984cca9825e2027c8187d9342e0e6ecee29c21d31ee81ea8d9109f0fa7501c59d7bf13be2433b87bd836bfaa77853516440f6fe896c9d07d47a27af6af833d0e90c1d0900edfd20dd23543a562ff5c9c37e59e1267ada9b4ed16437e7a7cd247245608645265", @nested={0x4, 0xca}, @generic="4d268e3ff82fb0650a1926", @typed={0xc, 0xda, 0x0, 0x0, @u64}]}, @typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@private=0xa010100}]}]}, 0x13e4}, 0x1, 0x0, 0x0, 0x80}, 0xc0) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) recvmmsg$auto(r13, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4d7}, 0x6, 0x0, 0x8, 0x10007fe}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) executing program 5: mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x341a21}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="64060000", @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164763000000000000000000100f6ff000300090000000800", @ANYBLOB="0500060000000000c6000280f2dd72b145bd8a228623b822f95df183ce3f470612ca4b13cf74cd7c4d941b1cd7a71be91e78c88eb31ddb5ec965eff0dc96d610fd65748cf457de07736ad236dd78e36d70ea9e78bf44803cc92f0ea4bafdd688934a271de22e4987dd0250cf3f73a2eef3c5d3f5a2e265cf7e91c319a1a420365c4b3649ceb413b5f7b19970611719de9ce78618233852d08cdeaa0db5603cc79c09ea44d6aa83e51760808e", @ANYBLOB='\x00\x00'], 0x664}, 0x1, 0x0, 0x0, 0x8040}, 0x4048010) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xbff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) prctl$auto(0x1, 0x6, r3, 0xb117, 0x9) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) read$auto_fragmentation_threshold_ops_(r2, &(0x7f00000000c0)=""/118, 0x76) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) pread64$auto(r5, 0x0, 0xd56c, 0xa84) executing program 4: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x200009, 0x20e, 0x8000000000000010, 0x602, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg1\x00', 0x4000, 0x0) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0) ioctl$auto_UI_SET_KEYBIT(r1, 0x40045565, &(0x7f0000000040)=0xe) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) (async) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f0000000900)=""/4096, 0x1000) executing program 2: mmap$auto(0x800000, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x80002) mprotect$auto(0x200000000000, 0x806121, 0x8) prlimit64$auto(0x0, 0x7f, &(0x7f0000000680)={0x4, 0x7}, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) write$auto_fops_x64_ro_(r0, &(0x7f0000000500)="f6823dce1aae9dd5df49b3cf31c97fa9a69454db52feed534eb6a13c43106e06a582039b3fc09be6ddf64c949a314c367ecdda86aea07d52e605532cc9d525b67373c119e8a13fde23d728a78a18060a5e02531feddb0982fccd9af6a33bd32a5e7a4b5cf5976dfae6da1e85507b4e2e774aa8c547dc68108ed684911ffe82f4b16497d174cf6fd351abc405e5ae6264a9fbacf36d8bd3fce6db8a4c09b7573185ae6b17b3be030245f4e63a09958719444995b589562e16f0e694d1b40413571191f8f121491902e30d2e731dae54e674258e4e2bb6603cd01b9b475f875e61", 0xe0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r3, 0x0, 0x1ff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r2, 0x0, 0x4) rseq$auto(0x0, 0x40, 0x0, 0x6) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0x0, 0x0, 0x0, 0x440a48d2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000040)=0x220, &(0x7f0000000100)=0x8) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/122, 0x7a) mmap$auto(0x3, 0x4, 0x1000000000de, 0x12, 0x2, 0x0) socket(0x26, 0x1, 0x4) r6 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0) pread64$auto(r6, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/allop_area/format\x00\x00\x00\x00\x00\x00\x0f:\xe23j\xb2\x93\x99\r\x02\xd0f\x87Wz\x1b\xc7\x9f\x0f7\xe8\x94\xac(,\x03\x03\xff\xc4*o\xcbf\xe4\x8a\x10\xf3\x7fA\x02:Y\xcf\x1b\x8e\x91%\x00\xf9\xff6\xa6\\\x80\x0f\xfa\xd4\xec\xa6\x0e\x1c,\'\\Aq\xae\x8e\x9c_ \x0f\v\xd3\xcb\xe4\"\xf2\x95\x8e\xc0q\x03;\x16\x84apq\xb4\x88o\xe2\x8c\xb2\xbf\x18z\xee\x8f\x05\x84\xdb\xcbP\xfa\xcec\xa4\xec\xd3\xa9[\x91xV\xd5g\xdf)\xfbJ\xaeNI\x13o\xb8\x98\xc9\x06yP>N\xe7\xf4e\xc2\x97\x02_\xeaV\xc9Vk\xaff\v\xc7\x7f\xdc\xd4\xca\xcf\x94\xb6\x1dK\xc0\xdd\x83w\xe0\x8dx\f\x17>\xa1\riQ\xb7\x03=1\xb7\xed\x1e&t\xffHx>\xc9\xac\x17/\x16\x92y\x87\xc6\x90\x8c\xcb\x86H5\n\xa2\xe8\x03\x92\xc3\xa9\xfb\x9eh\xec\xa9\x8d\xb80\x86\xa6\xa5\xd4I\xfe\xc6]F\xbe\xa0\xda\xa2\x13\xc6\xfb\xe6\xee\xf4Z,\x10\x10C0\x8b\xfd\xfb\xee\x93\x125\xfe\xc4z\"\xc6=Z\xacM\x14\x8f?w\x88S;eNL\xcd.(\xccT\xfaI\a\x1c\xb5\x8d\xf8\xccd\x1f\x1b\xb48\xb1\xbc\xfb\x13f\xa5\xd2\xfb\x17\xff\xe8\xd9\b3\x95\xa7\x85\xb1\x98\xd0\xcf\xbf=\xf7\xd0q1\b\xd2|\xc1B\xcc#5', 0x100000001, 0x8) shutdown$auto(0x200000003, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x3, 0xfff, 0xf, 0xfffffffffffffff3, 0x1, 0x5, 0x7, 0x9, 0x7, 0x0, 0x0, 0x0, 0x204, 0xfffffffe, 0x0, 0xffff, 0xffffffff, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001]}, 0x1fe, 0x9) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x8, 0xe) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9", @raw}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x4, 0x7, 0x6, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x7, 0x3, 0x4f3, 0xc, 0x4, 0xe02, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x4, 0xa, 0x0, 0x6, 0x800, 0x0, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x5, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1ff, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x7, 0x8000000000000001, 0x7, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0x1, 0x40, 0x1, 0x7, 0x2, 0x3, 0x8, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) madvise$auto(0x0, 0x2003f0, 0x17) executing program 4: statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0x4b8, 0x4}, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) io_destroy$auto(0xfffffffffffffffb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) executing program 1: mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r0 = gettid() r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) copy_file_range$auto(r1, 0x0, r1, 0x0, 0x8001, 0x1b208608) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r0, 0x11) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/rto_max\x00', 0x101201, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) executing program 2: sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x2) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x7409359dd5865fac) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x1, 0x4c, 0x0, 0x0) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x40802, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x10000043403d05, 0x0) lseek$auto(r0, 0x7, 0xc) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b66, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) socket(0x15, 0x800, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x3ff, 0x80200000007, 0x22, 0x5f, 0x20000000000803}, 0x6f0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) fcntl$auto_F_RDLCK(r3, 0xc4, 0x0) executing program 5: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x27, 0x1, 0xdc, 0x10, 0x401, 0x0) modify_ldt$auto(0xe, 0x0, 0xf) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/034/001\x00', 0x1a1040, 0x0) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) program did not crash bisect: split chunks (needed=true): <13>, <11> bisect: split chunk #0 of len 13 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 4, 14, 19, 29, 5, 4, 16, 30, 19, 26, 21, 4, 9, 10, 20, 30, 40] detailed listing: executing program 2: mmap$auto(0x800000, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x80002) mprotect$auto(0x200000000000, 0x806121, 0x8) prlimit64$auto(0x0, 0x7f, &(0x7f0000000680)={0x4, 0x7}, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) write$auto_fops_x64_ro_(r0, &(0x7f0000000500)="f6823dce1aae9dd5df49b3cf31c97fa9a69454db52feed534eb6a13c43106e06a582039b3fc09be6ddf64c949a314c367ecdda86aea07d52e605532cc9d525b67373c119e8a13fde23d728a78a18060a5e02531feddb0982fccd9af6a33bd32a5e7a4b5cf5976dfae6da1e85507b4e2e774aa8c547dc68108ed684911ffe82f4b16497d174cf6fd351abc405e5ae6264a9fbacf36d8bd3fce6db8a4c09b7573185ae6b17b3be030245f4e63a09958719444995b589562e16f0e694d1b40413571191f8f121491902e30d2e731dae54e674258e4e2bb6603cd01b9b475f875e61", 0xe0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r3, 0x0, 0x1ff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r2, 0x0, 0x4) rseq$auto(0x0, 0x40, 0x0, 0x6) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0x0, 0x0, 0x0, 0x440a48d2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000040)=0x220, &(0x7f0000000100)=0x8) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/122, 0x7a) mmap$auto(0x3, 0x4, 0x1000000000de, 0x12, 0x2, 0x0) socket(0x26, 0x1, 0x4) r6 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0) pread64$auto(r6, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/allop_area/format\x00\x00\x00\x00\x00\x00\x0f:\xe23j\xb2\x93\x99\r\x02\xd0f\x87Wz\x1b\xc7\x9f\x0f7\xe8\x94\xac(,\x03\x03\xff\xc4*o\xcbf\xe4\x8a\x10\xf3\x7fA\x02:Y\xcf\x1b\x8e\x91%\x00\xf9\xff6\xa6\\\x80\x0f\xfa\xd4\xec\xa6\x0e\x1c,\'\\Aq\xae\x8e\x9c_ \x0f\v\xd3\xcb\xe4\"\xf2\x95\x8e\xc0q\x03;\x16\x84apq\xb4\x88o\xe2\x8c\xb2\xbf\x18z\xee\x8f\x05\x84\xdb\xcbP\xfa\xcec\xa4\xec\xd3\xa9[\x91xV\xd5g\xdf)\xfbJ\xaeNI\x13o\xb8\x98\xc9\x06yP>N\xe7\xf4e\xc2\x97\x02_\xeaV\xc9Vk\xaff\v\xc7\x7f\xdc\xd4\xca\xcf\x94\xb6\x1dK\xc0\xdd\x83w\xe0\x8dx\f\x17>\xa1\riQ\xb7\x03=1\xb7\xed\x1e&t\xffHx>\xc9\xac\x17/\x16\x92y\x87\xc6\x90\x8c\xcb\x86H5\n\xa2\xe8\x03\x92\xc3\xa9\xfb\x9eh\xec\xa9\x8d\xb80\x86\xa6\xa5\xd4I\xfe\xc6]F\xbe\xa0\xda\xa2\x13\xc6\xfb\xe6\xee\xf4Z,\x10\x10C0\x8b\xfd\xfb\xee\x93\x125\xfe\xc4z\"\xc6=Z\xacM\x14\x8f?w\x88S;eNL\xcd.(\xccT\xfaI\a\x1c\xb5\x8d\xf8\xccd\x1f\x1b\xb48\xb1\xbc\xfb\x13f\xa5\xd2\xfb\x17\xff\xe8\xd9\b3\x95\xa7\x85\xb1\x98\xd0\xcf\xbf=\xf7\xd0q1\b\xd2|\xc1B\xcc#5', 0x100000001, 0x8) shutdown$auto(0x200000003, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x3, 0xfff, 0xf, 0xfffffffffffffff3, 0x1, 0x5, 0x7, 0x9, 0x7, 0x0, 0x0, 0x0, 0x204, 0xfffffffe, 0x0, 0xffff, 0xffffffff, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001]}, 0x1fe, 0x9) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x8, 0xe) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9", @raw}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x4, 0x7, 0x6, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x7, 0x3, 0x4f3, 0xc, 0x4, 0xe02, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x4, 0xa, 0x0, 0x6, 0x800, 0x0, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x5, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1ff, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x7, 0x8000000000000001, 0x7, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0x1, 0x40, 0x1, 0x7, 0x2, 0x3, 0x8, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) madvise$auto(0x0, 0x2003f0, 0x17) executing program 4: statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0x4b8, 0x4}, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) io_destroy$auto(0xfffffffffffffffb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) executing program 1: mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r0 = gettid() r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) copy_file_range$auto(r1, 0x0, r1, 0x0, 0x8001, 0x1b208608) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r0, 0x11) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/rto_max\x00', 0x101201, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) executing program 2: sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x2) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x7409359dd5865fac) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x1, 0x4c, 0x0, 0x0) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x40802, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x10000043403d05, 0x0) lseek$auto(r0, 0x7, 0xc) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b66, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) socket(0x15, 0x800, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x3ff, 0x80200000007, 0x22, 0x5f, 0x20000000000803}, 0x6f0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) fcntl$auto_F_RDLCK(r3, 0xc4, 0x0) executing program 5: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x27, 0x1, 0xdc, 0x10, 0x401, 0x0) modify_ldt$auto(0xe, 0x0, 0xf) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/034/001\x00', 0x1a1040, 0x0) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x28, r1, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x800}]}, 0x28}, 0x1, 0x0, 0x8000000000000, 0x48c1}, 0xc000) executing program 2: r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x21, 0x2, 0x2) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x1, 0x0) socket(0x11, 0x80003, 0x300) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x8, 0x2, 0x9b72, r2, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sysvipc/sem\x00', 0x303c02, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x5, 0x1, 0x2) executing program 5: mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x4, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, 0x0, 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) write$auto_proc_mem_operations_base(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = socket(0x10, 0x1, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYRES8=r1, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) executing program 4: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0xffffffffffffffff, 0xe, 0x146) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) listen$auto(0x3, 0x83) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x29, 0x4e, 0x0, 0x10000110) clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) sysfs$auto(0x2, 0xd, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="070986acbdecd86de29e8200000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000080) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000002240)='/proc/thread-self/environ\x00', 0x8400, 0x0) read$auto_proc_environ_operations_base(r4, &(0x7f0000002280)=""/169, 0xa9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/sub3/hw_params\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000002100)=""/15, 0xf) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r7 = memfd_create$auto(&(0x7f00000026c0)='\'#\x00', 0x6) ioctl$auto_FIBMAP(r7, 0x1, 0x4) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) executing program 2: r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) (async) io_cancel$auto(0x3, &(0x7f0000000000)={0x3, 0x9, 0x0, 0x10, 0x8, 0x2, 0xff, 0x1, 0x7ff, 0x0, 0x3}, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) close_range$auto(0x2, 0x8, 0x0) (async) utimensat$auto(0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0) (async) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) (async) syz_clone3(0x0, 0x0) (async) mincore$auto(0x1000, 0x4000000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000580)="8c69afb02b3c00966523093dc13c01f93f402db0b0fdef032c8ab2ec860a96202254b197d50ca83f46d1101bfd73600a6647bcee20709ae25cededabd338ee913acb7321f49ff7456d4d41c602e6a6cd519335336ee0ec3edf9529516e76b683596877028410d54411ed6689fa080000000000000026e77305d491ce76bf29b9d1519855bf2734a7d672768cefc39af1da24f1a137e87c2b0b01791baaf4f5ff84f2cc073d2b111c4ef46913804616dde90016d7aa350086a479959118e981920916da03e172b0607ca2bb96593204f529162c483c8b481b80b27785586ee3e1f659e99e535750c4bc9edd3b9da765a98d9342a09390ea68a6ac6fcc2bcbd91b", 0x100) (async) io_uring_setup$auto(0xefa9, &(0x7f0000000080)={0xfffffffe, 0x8, 0x6, 0x1, 0x1, 0xffff939b, r0, [0x1ff, 0x5, 0x1], {0x4, 0x200, 0x9, 0x7fff, 0x2, 0x1, 0x8, 0x9, 0x9}, {0xd4, 0x1, 0x81, 0xdb, 0xc, 0x10000, 0x2, 0x0, 0x8}}) (async) write$auto(r0, 0x0, 0x0) executing program 4: r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) ioctl$auto(r0, 0x80045113, 0xffffffffffffffff) openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101741, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x2) executing program 1: openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0x4) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) executing program 5: openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0) write$auto(r0, &(0x7f0000000380)='+\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r1 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/loginuid\x00', 0xf8928411f183eac, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb2, r1, 0xfffffffffffffffe) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r2, 0x0, 0x20000000001, 0x7fff) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 5: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xcc843, 0x0) statmount$auto(0x0, &(0x7f00000004c0)={0x8, 0x1, 0x9, 0xa, 0x43e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x405, 0x7f, 0x3, 0x6, 0x4, 0xb2, 0x627, 0xa838, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40087, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40009, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0xffffffffffffffff, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x6, 0x0, 0x1, 0x2]}, 0x1fe, 0x200c) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x8, 0x5, 0x7fffffff, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="bd5a", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000480)='-_', 0x2) r4 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) times$auto(0xfffffffffffffffc) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xffffffff) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r5, 0x7fd, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) sendfile$auto(0x1, r6, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000480), r4) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24006011}, 0x400004a) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 11 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 4, 14, 19, 29, 5, 4, 9, 10, 20, 30, 40] detailed listing: executing program 2: mmap$auto(0x800000, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x80002) mprotect$auto(0x200000000000, 0x806121, 0x8) prlimit64$auto(0x0, 0x7f, &(0x7f0000000680)={0x4, 0x7}, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) write$auto_fops_x64_ro_(r0, &(0x7f0000000500)="f6823dce1aae9dd5df49b3cf31c97fa9a69454db52feed534eb6a13c43106e06a582039b3fc09be6ddf64c949a314c367ecdda86aea07d52e605532cc9d525b67373c119e8a13fde23d728a78a18060a5e02531feddb0982fccd9af6a33bd32a5e7a4b5cf5976dfae6da1e85507b4e2e774aa8c547dc68108ed684911ffe82f4b16497d174cf6fd351abc405e5ae6264a9fbacf36d8bd3fce6db8a4c09b7573185ae6b17b3be030245f4e63a09958719444995b589562e16f0e694d1b40413571191f8f121491902e30d2e731dae54e674258e4e2bb6603cd01b9b475f875e61", 0xe0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r3, 0x0, 0x1ff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r2, 0x0, 0x4) rseq$auto(0x0, 0x40, 0x0, 0x6) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0x0, 0x0, 0x0, 0x440a48d2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000040)=0x220, &(0x7f0000000100)=0x8) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/122, 0x7a) mmap$auto(0x3, 0x4, 0x1000000000de, 0x12, 0x2, 0x0) socket(0x26, 0x1, 0x4) r6 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0) pread64$auto(r6, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/allop_area/format\x00\x00\x00\x00\x00\x00\x0f:\xe23j\xb2\x93\x99\r\x02\xd0f\x87Wz\x1b\xc7\x9f\x0f7\xe8\x94\xac(,\x03\x03\xff\xc4*o\xcbf\xe4\x8a\x10\xf3\x7fA\x02:Y\xcf\x1b\x8e\x91%\x00\xf9\xff6\xa6\\\x80\x0f\xfa\xd4\xec\xa6\x0e\x1c,\'\\Aq\xae\x8e\x9c_ \x0f\v\xd3\xcb\xe4\"\xf2\x95\x8e\xc0q\x03;\x16\x84apq\xb4\x88o\xe2\x8c\xb2\xbf\x18z\xee\x8f\x05\x84\xdb\xcbP\xfa\xcec\xa4\xec\xd3\xa9[\x91xV\xd5g\xdf)\xfbJ\xaeNI\x13o\xb8\x98\xc9\x06yP>N\xe7\xf4e\xc2\x97\x02_\xeaV\xc9Vk\xaff\v\xc7\x7f\xdc\xd4\xca\xcf\x94\xb6\x1dK\xc0\xdd\x83w\xe0\x8dx\f\x17>\xa1\riQ\xb7\x03=1\xb7\xed\x1e&t\xffHx>\xc9\xac\x17/\x16\x92y\x87\xc6\x90\x8c\xcb\x86H5\n\xa2\xe8\x03\x92\xc3\xa9\xfb\x9eh\xec\xa9\x8d\xb80\x86\xa6\xa5\xd4I\xfe\xc6]F\xbe\xa0\xda\xa2\x13\xc6\xfb\xe6\xee\xf4Z,\x10\x10C0\x8b\xfd\xfb\xee\x93\x125\xfe\xc4z\"\xc6=Z\xacM\x14\x8f?w\x88S;eNL\xcd.(\xccT\xfaI\a\x1c\xb5\x8d\xf8\xccd\x1f\x1b\xb48\xb1\xbc\xfb\x13f\xa5\xd2\xfb\x17\xff\xe8\xd9\b3\x95\xa7\x85\xb1\x98\xd0\xcf\xbf=\xf7\xd0q1\b\xd2|\xc1B\xcc#5', 0x100000001, 0x8) shutdown$auto(0x200000003, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x3, 0xfff, 0xf, 0xfffffffffffffff3, 0x1, 0x5, 0x7, 0x9, 0x7, 0x0, 0x0, 0x0, 0x204, 0xfffffffe, 0x0, 0xffff, 0xffffffff, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001]}, 0x1fe, 0x9) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x8, 0xe) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9", @raw}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x4, 0x7, 0x6, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x7, 0x3, 0x4f3, 0xc, 0x4, 0xe02, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x4, 0xa, 0x0, 0x6, 0x800, 0x0, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x5, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1ff, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x7, 0x8000000000000001, 0x7, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0x1, 0x40, 0x1, 0x7, 0x2, 0x3, 0x8, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) madvise$auto(0x0, 0x2003f0, 0x17) executing program 4: statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0x4b8, 0x4}, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) io_destroy$auto(0xfffffffffffffffb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) executing program 1: mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r0 = gettid() r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) copy_file_range$auto(r1, 0x0, r1, 0x0, 0x8001, 0x1b208608) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r0, 0x11) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/rto_max\x00', 0x101201, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) executing program 2: sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x2) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x7409359dd5865fac) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x1, 0x4c, 0x0, 0x0) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x40802, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x10000043403d05, 0x0) lseek$auto(r0, 0x7, 0xc) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b66, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) socket(0x15, 0x800, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x3ff, 0x80200000007, 0x22, 0x5f, 0x20000000000803}, 0x6f0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) fcntl$auto_F_RDLCK(r3, 0xc4, 0x0) executing program 5: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x27, 0x1, 0xdc, 0x10, 0x401, 0x0) modify_ldt$auto(0xe, 0x0, 0xf) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/034/001\x00', 0x1a1040, 0x0) executing program 4: r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) ioctl$auto(r0, 0x80045113, 0xffffffffffffffff) openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101741, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x2) executing program 1: openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0x4) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) executing program 5: openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0) write$auto(r0, &(0x7f0000000380)='+\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r1 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/loginuid\x00', 0xf8928411f183eac, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb2, r1, 0xfffffffffffffffe) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r2, 0x0, 0x20000000001, 0x7fff) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 5: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xcc843, 0x0) statmount$auto(0x0, &(0x7f00000004c0)={0x8, 0x1, 0x9, 0xa, 0x43e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x405, 0x7f, 0x3, 0x6, 0x4, 0xb2, 0x627, 0xa838, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40087, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40009, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0xffffffffffffffff, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x6, 0x0, 0x1, 0x2]}, 0x1fe, 0x200c) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x8, 0x5, 0x7fffffff, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="bd5a", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000480)='-_', 0x2) r4 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) times$auto(0xfffffffffffffffc) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xffffffff) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r5, 0x7fd, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) sendfile$auto(0x1, r6, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000480), r4) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24006011}, 0x400004a) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <6>, <5> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 29, 5, 4, 9, 10, 20, 30, 40] detailed listing: executing program 1: mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r0 = gettid() r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) copy_file_range$auto(r1, 0x0, r1, 0x0, 0x8001, 0x1b208608) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r0, 0x11) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/rto_max\x00', 0x101201, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) executing program 2: sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x2) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x7409359dd5865fac) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x1, 0x4c, 0x0, 0x0) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x40802, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x10000043403d05, 0x0) lseek$auto(r0, 0x7, 0xc) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b66, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) socket(0x15, 0x800, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x3ff, 0x80200000007, 0x22, 0x5f, 0x20000000000803}, 0x6f0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) fcntl$auto_F_RDLCK(r3, 0xc4, 0x0) executing program 5: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x27, 0x1, 0xdc, 0x10, 0x401, 0x0) modify_ldt$auto(0xe, 0x0, 0xf) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/034/001\x00', 0x1a1040, 0x0) executing program 4: r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) ioctl$auto(r0, 0x80045113, 0xffffffffffffffff) openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101741, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x2) executing program 1: openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0x4) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) executing program 5: openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0) write$auto(r0, &(0x7f0000000380)='+\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r1 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/loginuid\x00', 0xf8928411f183eac, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb2, r1, 0xfffffffffffffffe) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r2, 0x0, 0x20000000001, 0x7fff) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 5: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xcc843, 0x0) statmount$auto(0x0, &(0x7f00000004c0)={0x8, 0x1, 0x9, 0xa, 0x43e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x405, 0x7f, 0x3, 0x6, 0x4, 0xb2, 0x627, 0xa838, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40087, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40009, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0xffffffffffffffff, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x6, 0x0, 0x1, 0x2]}, 0x1fe, 0x200c) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x8, 0x5, 0x7fffffff, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="bd5a", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000480)='-_', 0x2) r4 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) times$auto(0xfffffffffffffffc) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xffffffff) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r5, 0x7fd, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) sendfile$auto(0x1, r6, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000480), r4) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24006011}, 0x400004a) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 29, 5, 20, 30, 40] detailed listing: executing program 1: mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r0 = gettid() r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) copy_file_range$auto(r1, 0x0, r1, 0x0, 0x8001, 0x1b208608) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r0, 0x11) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/rto_max\x00', 0x101201, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) executing program 2: sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x2) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x7409359dd5865fac) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x1, 0x4c, 0x0, 0x0) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x40802, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x10000043403d05, 0x0) lseek$auto(r0, 0x7, 0xc) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b66, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) socket(0x15, 0x800, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x3ff, 0x80200000007, 0x22, 0x5f, 0x20000000000803}, 0x6f0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) fcntl$auto_F_RDLCK(r3, 0xc4, 0x0) executing program 5: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x27, 0x1, 0xdc, 0x10, 0x401, 0x0) modify_ldt$auto(0xe, 0x0, 0xf) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/034/001\x00', 0x1a1040, 0x0) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 5: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xcc843, 0x0) statmount$auto(0x0, &(0x7f00000004c0)={0x8, 0x1, 0x9, 0xa, 0x43e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x405, 0x7f, 0x3, 0x6, 0x4, 0xb2, 0x627, 0xa838, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40087, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40009, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0xffffffffffffffff, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x6, 0x0, 0x1, 0x2]}, 0x1fe, 0x200c) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x8, 0x5, 0x7fffffff, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="bd5a", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000480)='-_', 0x2) r4 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) times$auto(0xfffffffffffffffc) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xffffffff) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r5, 0x7fd, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) sendfile$auto(0x1, r6, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000480), r4) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24006011}, 0x400004a) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3>, <2> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 20, 30, 40] detailed listing: executing program 5: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x27, 0x1, 0xdc, 0x10, 0x401, 0x0) modify_ldt$auto(0xe, 0x0, 0xf) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/034/001\x00', 0x1a1040, 0x0) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 5: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xcc843, 0x0) statmount$auto(0x0, &(0x7f00000004c0)={0x8, 0x1, 0x9, 0xa, 0x43e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x405, 0x7f, 0x3, 0x6, 0x4, 0xb2, 0x627, 0xa838, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40087, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40009, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0xffffffffffffffff, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x6, 0x0, 0x1, 0x2]}, 0x1fe, 0x200c) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x8, 0x5, 0x7fffffff, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="bd5a", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000480)='-_', 0x2) r4 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) times$auto(0xfffffffffffffffc) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xffffffff) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r5, 0x7fd, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) sendfile$auto(0x1, r6, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000480), r4) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24006011}, 0x400004a) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 20, 40] detailed listing: executing program 5: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x27, 0x1, 0xdc, 0x10, 0x401, 0x0) modify_ldt$auto(0xe, 0x0, 0xf) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/034/001\x00', 0x1a1040, 0x0) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1>, <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 3 programs left: executing program 5: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x27, 0x1, 0xdc, 0x10, 0x401, 0x0) modify_ldt$auto(0xe, 0x0, 0xf) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/034/001\x00', 0x1a1040, 0x0) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) bisect: trying to concatenate bisect: concatenate 3 entries minimizing program #0 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 20, 40] detailed listing: executing program 0: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x27, 0x1, 0xdc, 0x10, 0x401, 0x0) modify_ldt$auto(0xe, 0x0, 0xf) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 20, 40] detailed listing: executing program 0: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x27, 0x1, 0xdc, 0x10, 0x401, 0x0) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 20, 40] detailed listing: executing program 0: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 20, 40] detailed listing: executing program 0: msgctl$auto_IPC_INFO(0xfffffff7, 0x3, 0x0) executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 20, 40] detailed listing: executing program 0: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r3, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r3, 0x7ff, 0x200}, 0x100, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2000008, &(0x7f00000001c0)='[\x14\x9fl\v\xa6\x10H\x18z\xda\r~\x8b\x8b#7\xf6\x82 |\x03\x96\xe4\xe6\x1b\xcf\x9c\x86\b\xf6\xc5)\x10', &(0x7f0000000040)="19dfdf64d1ed143d6fb11e5a33e56980e5501de6b37efc4360b27d11e91110d29f12c75427c12d068ee25565dc6a13c0e56a3dfd09f0705a8f7ccd9ee18b260dca86dfc26d8b4e2eef5b6476083b754ef00963e8c8c96ff2ac9720ffaa3a3fb856078e3d39b9a7f576e8a108e5514fdcb4bd5c662e3019b5e8b5d86a217d52e6f8faaad8d4276cb08d1013f6925c00f399f790c35e899f50f86a8305", 0x4) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit minimized 5 calls -> 0 calls minimizing program #1 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 19, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r2, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) poll$auto(&(0x7f0000000040)={r2, 0x7ff, 0x200}, 0x100, 0x6) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 18, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r2, &(0x7f0000000140)={&(0x7f0000000240)="f8fdee63cb681793cb093d0f00ec945f17d57953892389e95a078b7f7bda9a54c683bf8db4586ebbecb7646c7b7cc963718dead7907b24e1a70bf10993c95568080aa2e0b4bd08b7cf26a8cc605b91ad06d8c6d26fd31ae6eaf155c2585e5e873db000779fcd89a86c6a4c83fd7404631732f4a64024c9de0ca17cd68bfb920f1f13984ad733e7af657cb2663eccfa318e06abf2fcdf226570e033e6cdc30be37e99282ba792d963ca7525905f9107077ffd7bffad8dd906af95322558233516a2659600", 0x1}, 0x5, 0x66, 0xe2) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 17, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 16, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 15, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x4) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 14, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) socket(0x1e, 0x1, 0x0) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 13, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/card2\x00', 0x41040, 0x0) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 12, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 11, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x250800, 0x0) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 10, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 9, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto(r0, 0x0, 0x1ff) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 40] detailed listing: executing program 5: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 40] detailed listing: executing program 5: executing program 0: close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 4: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) program did not crash minimized 20 calls -> 7 calls minimizing program #2 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 39] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r5 = socket(0x1f, 0x1, 0x8001) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r7, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r8, r7, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dc060"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 38] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r4 = socket(0x1f, 0x1, 0x8001) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r5, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r5, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) r6 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) close_range$auto(r6, r5, 0x9) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 37] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r4 = socket(0x1f, 0x1, 0x8001) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r5, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r5, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x8) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 36] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r4 = socket(0x1f, 0x1, 0x8001) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r5, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r5, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 35] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r4 = socket(0x1f, 0x1, 0x8001) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r5, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r5, 0x100000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000440)="a3e0d9e6e4ec302b613ea96b1c47ae75409aaf176e6c944ec4b7ac8df35790411098815728c040562ea465c12501b8a1601e88066ea9298fea725eddab34eb99c3c6740d27c1549496d6c9f8b587e7ddcacb514f4240aece16ceb9a56401a788b108565962f93021b53e2ac90aa0bc87a16c24dff4d9a6d420d72092b44e3d38155106dd696561c95a18ce0dd3d5800000000083cfb597fc0864b560321425e45612c0e85cdff65a5eed50d392000000008a08f2844bbe1dbbb16298", 0x5203}, 0x80) (async) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 34] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r4 = socket(0x1f, 0x1, 0x8001) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r5, 0x100000) (async) pipe2$auto(&(0x7f00000000c0)=r5, 0x100000) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 33] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r4 = socket(0x1f, 0x1, 0x8001) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r5, 0x100000) (async) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 32] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r4 = socket(0x1f, 0x1, 0x8001) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 31] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r4 = socket(0x1f, 0x1, 0x8001) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 30] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r4 = socket(0x1f, 0x1, 0x8001) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 29] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r4 = socket(0x1f, 0x1, 0x8001) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 28] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) r4 = socket(0x1f, 0x1, 0x8001) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 27] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) socket(0x1f, 0x1, 0x8001) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 26] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1f, 0x1, 0x8001) (async) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 25] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 24] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 23] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 22] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 21] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 20] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 19] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 18] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 17] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 16] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 15] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 14] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 13] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7f, 0xfffffffc, 0x0, 0x10200) (async) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 12] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 11] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 10] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 9] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 8] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) (async) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 7] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000040)=""/36, 0x24) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 6] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000040)=""/36, 0x24) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 5] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 4] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 3] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 2] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 1] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 0] detailed listing: executing program 5: executing program 1: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) executing program 0: program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit minimized 40 calls -> 0 calls testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit bisect: concatenation succeeded found reproducer with 7 syscalls minimizing guilty program testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-openat$auto_tty_fops_tty_io-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto detailed listing: executing program 0: openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) program did not crash extracting C reproducer testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit simplifying C reproducer testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program did not crash testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program did not crash testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit testing program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_tty_fops_tty_io-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_proc_sys_file_operations_proc_sysctl-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) (fail_nth: 3) program crashed: KASAN: vmalloc-out-of-bounds Write in imageblit validation run: crashed=true reproducing took 3h18m27.984568848s repro crashed as (corrupted=false): RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007fff34de03f0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fd0417e5fa0 R14: 00007fd0417e5fa0 R15: 0000000000000003 ================================================================== BUG: KASAN: vmalloc-out-of-bounds in fb_write_offset drivers/video/fbdev/core/sysmem.h:30 [inline] BUG: KASAN: vmalloc-out-of-bounds in fb_bitmap_2ppw drivers/video/fbdev/core/fb_imageblit.h:364 [inline] BUG: KASAN: vmalloc-out-of-bounds in fb_bitmap_imageblit drivers/video/fbdev/core/fb_imageblit.h:462 [inline] BUG: KASAN: vmalloc-out-of-bounds in fb_imageblit drivers/video/fbdev/core/fb_imageblit.h:492 [inline] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 drivers/video/fbdev/core/sysimgblt.c:24 Write of size 8 at addr ffffc90003749fc0 by task syz.0.17/6037 CPU: 0 UID: 0 PID: 6037 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xcd/0x630 mm/kasan/report.c:482 kasan_report+0xe0/0x110 mm/kasan/report.c:595 fb_write_offset drivers/video/fbdev/core/sysmem.h:30 [inline] fb_bitmap_2ppw drivers/video/fbdev/core/fb_imageblit.h:364 [inline] fb_bitmap_imageblit drivers/video/fbdev/core/fb_imageblit.h:462 [inline] fb_imageblit drivers/video/fbdev/core/fb_imageblit.h:492 [inline] sys_imageblit+0x1a6f/0x1e60 drivers/video/fbdev/core/sysimgblt.c:24 drm_fbdev_shmem_defio_imageblit+0x20/0x130 drivers/gpu/drm/drm_fbdev_shmem.c:38 cw_putcs_aligned drivers/video/fbdev/core/fbcon_cw.c:110 [inline] cw_putcs+0x917/0xbb0 drivers/video/fbdev/core/fbcon_cw.c:158 fbcon_putcs+0x387/0x450 drivers/video/fbdev/core/fbcon.c:1320 do_update_region+0x2e9/0x3f0 drivers/tty/vt/vt.c:628 redraw_screen+0x63f/0x760 drivers/tty/vt/vt.c:980 fbcon_modechanged+0x456/0x6b0 drivers/video/fbdev/core/fbcon.c:2710 fbcon_rotate drivers/video/fbdev/core/fbcon.c:228 [inline] rotate_store+0x258/0x2f0 drivers/video/fbdev/core/fbcon.c:3215 dev_attr_store+0x58/0x80 drivers/base/core.c:2437 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x7d3/0x11d0 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd04158f6c9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff34de0398 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fd0417e5fa0 RCX: 00007fd04158f6c9 RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007fff34de03f0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fd0417e5fa0 R14: 00007fd0417e5fa0 R15: 0000000000000003 The buggy address belongs to a vmalloc virtual mapping Memory state around the buggy address: ffffc90003749e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc90003749f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 >ffffc90003749f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ^ ffffc9000374a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc9000374a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ================================================================== final repro crashed as (corrupted=false): RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007fff34de03f0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fd0417e5fa0 R14: 00007fd0417e5fa0 R15: 0000000000000003 ================================================================== BUG: KASAN: vmalloc-out-of-bounds in fb_write_offset drivers/video/fbdev/core/sysmem.h:30 [inline] BUG: KASAN: vmalloc-out-of-bounds in fb_bitmap_2ppw drivers/video/fbdev/core/fb_imageblit.h:364 [inline] BUG: KASAN: vmalloc-out-of-bounds in fb_bitmap_imageblit drivers/video/fbdev/core/fb_imageblit.h:462 [inline] BUG: KASAN: vmalloc-out-of-bounds in fb_imageblit drivers/video/fbdev/core/fb_imageblit.h:492 [inline] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 drivers/video/fbdev/core/sysimgblt.c:24 Write of size 8 at addr ffffc90003749fc0 by task syz.0.17/6037 CPU: 0 UID: 0 PID: 6037 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xcd/0x630 mm/kasan/report.c:482 kasan_report+0xe0/0x110 mm/kasan/report.c:595 fb_write_offset drivers/video/fbdev/core/sysmem.h:30 [inline] fb_bitmap_2ppw drivers/video/fbdev/core/fb_imageblit.h:364 [inline] fb_bitmap_imageblit drivers/video/fbdev/core/fb_imageblit.h:462 [inline] fb_imageblit drivers/video/fbdev/core/fb_imageblit.h:492 [inline] sys_imageblit+0x1a6f/0x1e60 drivers/video/fbdev/core/sysimgblt.c:24 drm_fbdev_shmem_defio_imageblit+0x20/0x130 drivers/gpu/drm/drm_fbdev_shmem.c:38 cw_putcs_aligned drivers/video/fbdev/core/fbcon_cw.c:110 [inline] cw_putcs+0x917/0xbb0 drivers/video/fbdev/core/fbcon_cw.c:158 fbcon_putcs+0x387/0x450 drivers/video/fbdev/core/fbcon.c:1320 do_update_region+0x2e9/0x3f0 drivers/tty/vt/vt.c:628 redraw_screen+0x63f/0x760 drivers/tty/vt/vt.c:980 fbcon_modechanged+0x456/0x6b0 drivers/video/fbdev/core/fbcon.c:2710 fbcon_rotate drivers/video/fbdev/core/fbcon.c:228 [inline] rotate_store+0x258/0x2f0 drivers/video/fbdev/core/fbcon.c:3215 dev_attr_store+0x58/0x80 drivers/base/core.c:2437 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x7d3/0x11d0 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd04158f6c9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff34de0398 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fd0417e5fa0 RCX: 00007fd04158f6c9 RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007fff34de03f0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fd0417e5fa0 R14: 00007fd0417e5fa0 R15: 0000000000000003 The buggy address belongs to a vmalloc virtual mapping Memory state around the buggy address: ffffc90003749e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc90003749f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 >ffffc90003749f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ^ ffffc9000374a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc9000374a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ==================================================================