Extracting prog: 2h1m57.403789062s
Minimizing prog: 12m40.608797384s
Simplifying prog options: 4m48.958323805s
Extracting C: 45.868852434s
Simplifying C: 0s


extracting reproducer from 50 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_snd_pcm_oss_f_reg_pcm_oss-mmap$auto-mmap$auto-syz_clone-close_range$auto-socket$nl_generic-socket-socket-socket-adjtimex$auto-get_robust_list$auto-get_robust_list$auto-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_seq_oss_f_ops_seq_oss-read$auto_snapshot_fops_user-read$auto_seq_oss_f_ops_seq_oss-read$auto_seq_oss_f_ops_seq_oss-setsockopt$auto-write$auto-write$auto-writev$auto-readv$auto-readv$auto-ioctl$auto_SNDCTL_DSP_CHANNELS-close_range$auto-close_range$auto-mmap$auto-io_uring_setup$auto-io_uring_setup$auto-mmap$auto-socket-openat$auto_tracing_stats_fops_trace-socketpair$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto_SNDCTL_DSP_SPEED-mmap$auto
detailed listing:
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program did not crash
single: failed to extract reproducer
bisect: bisecting 50 programs with base timeout 30s
testing program (duration=42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 21, 18, 14, 30, 30, 24, 5, 18, 29, 11, 10, 10, 30, 30, 7, 8, 16, 27, 27, 6, 17, 30, 20, 5, 5, 5, 18, 27, 30, 30, 8, 17, 12, 18, 28, 17, 29, 6, 5, 29, 40, 30, 17, 29, 40, 6, 40, 18]
detailed listing:
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff)
r1 = gettid()
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x940, 0x1ffe0, 0x8003, 0x8, 0x6, 0x7, 0x5, 0x2, 0x9, 0x6, 0x9, 0x2, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x1fa, 0x7)
r2 = signalfd$auto(r0, &(0x7f0000000500)={0x431}, 0x8000000000000000)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r0)
sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x38, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x5}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x23ff}, @CTRL_ATTR_OP={0x8, 0xa, 0x8009}, @CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'batadv0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x48005}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x802, 0x1)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x10001)
bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x2000000}, 0x68)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r8=>0x0})
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="9ed1d5cd", @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf250f00000008000300", @ANYRES32=r8, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140000e4)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
kill$auto(r1, 0x11)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
executing program 2:
r0 = clone$auto(0x521deeaa, 0xb, 0xfffffffffffffffe, 0x0, 0x9)
socket(0xa, 0x5, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose9/statistics/rx_packets\x00', 0x100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/57, 0x39) (async)
shutdown$auto(0x200000003, 0x2) (async)
io_uring_setup$auto(0x6, 0x0) (async)
openat$auto_fops_blob_file(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = wait4$auto(r0, &(0x7f00000000c0)=0x4, 0x4, &(0x7f0000000180)={{0x945, 0xae}, {0x4, 0x68888998}, 0x3, 0x8, 0x8, 0x9, 0x2, 0x123, 0x9, 0x6, 0x7, 0x4d3, 0x90a, 0x7, 0xb3e, 0x6})
wait4$auto(r2, 0xfffffffffffffffc, 0xe2, 0x0)
listen$auto(0x3, 0x81)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x40009, 0xd9, 0x200000087a, 0x4, 0x28002)
close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep\x00', 0xc0000, 0x0) (async)
sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) (async)
clock_settime$auto(0xfffffffb, 0x0)
getpid()
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x801, 0x100) (async)
capset$auto(0x0, 0x0) (async)
memfd_create$auto(&(0x7f0000000000)='A^^\x02\x00\xef\x97\x8aj\xa1\xf8\xd1\x8c\xb05\x03\\\xb2\xbfnA\x8cRR\x91\x10\xa3\x8dn0\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00', 0xff)
executing program 2:
getsockopt$auto(0xffffffffffffffff, 0x7fffffff, 0x7fffffff, &(0x7f00000000c0)='MAC80211_HWSIM\x00', 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f00000001c0), r0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22040, 0x75)
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x14, 0x0, 0xb11, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1000)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="1a"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x81, 0x7fd, 0x3, 0x9, 0x7, 0x7ff, 0x0, 0x4000000f}, 0x6f4)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x400, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xfff}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 2:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x6, 0x0)
r1 = socket(0x2, 0x6, 0x0)
sysfs$auto(0x2, 0x0, 0x0)
symlink$auto(&(0x7f00000000c0)='}*\x00', &(0x7f0000000340)='!q}\x00')
symlink$auto(&(0x7f0000000080)='})*.)]/file0\x00', &(0x7f00000006c0)='}*\x00')
symlink$auto(&(0x7f0000000d40)='!q}\x00', &(0x7f0000000d80)='})*.)]\x00')
symlink$auto(&(0x7f0000000380)='##\xf1\x00', &(0x7f0000000180)='})*.)]/file0\x00')
epoll_create$auto(0x4)
epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r2, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
epoll_ctl$auto(0x5, 0x3, r2, 0x0)
r3 = pipe$auto(&(0x7f0000000000)=r0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3)
sendmsg$auto_NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x3fc, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x301}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x9}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x6}, @NL80211_ATTR_BEACON_TAIL={0x2e0, 0xf, "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"}, @NL80211_ATTR_FRAME_MATCH={0xd7, 0x5b, "f88d9ab9e86bf7c970b0726d7b810e0816ac1033c99185c49e677d1997831c3e7ecbb34ce08b4a15f55b6e7f6af7a365008303aadc37c6776630a991c232562576115aa2dbe56a6e7dde125f52632a6b0084cd549fba2cb1dad69b0314082c1c6f1f5ef8856c2d145f77896abd1b00d8be6542bac0f6eb54e27b8eba40155c9c4d81d3b89eced87a169575f4f65b0a88f3d4919558db1cd6b0d0aecdd7baceac08fcc847f4736496d5077f41f5fd00e166f597dd439b35de9f37aea4bb2f020687b85dfb125c6d45419c1fe0c3f67ff714f5ba"}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x80}, 0x93d20e20ae6fb82c)
epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd)
executing program 2:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
socket(0x2, 0x1, 0x0)
listen$auto(0x3, 0x81)
close_range$auto(0x2, 0x8, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
open(&(0x7f0000000080)='.\x00', 0x0, 0x1f2)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
open(0x0, 0x22240, 0x155)
executing program 2:
sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, 0x0, 0x4010)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
symlink$auto(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x40102, 0x2)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0)
ioctl$auto_NVRAM_INIT(r0, 0x7040, 0x0)
shutdown$auto(0x200000003, 0x2)
bind$auto(0xffffffffffffffff, 0x0, 0x6b)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x100000000007, 0x8000000df, 0x12, r0, 0x8003)
r1 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x0, 0x0)
write$auto_event_trigger_fops_trace(r1, &(0x7f0000000080)="804ddd7576b13075faf042bf1adae7853c24d8b73b9bc0faf5b8325aca1e5503b27017d558c736865722298a33668e3ead141599fc5c1495bd7b3d782f2f1666fffb4b37aca9313bd2bc907602a528dc3cdfbe370a67106e48889d2285e6bf0d4c1729b7b43b5f", 0x67)
mremap$auto(0x0, 0xffffffffffffffff, 0x401, 0x3, 0x7fffffffb000)
prctl$auto(0x6, 0x1, 0x0, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sysinfo$auto(0x0)
r2 = socket(0x1f, 0x80d, 0x100)
setsockopt$auto(r2, 0x6, 0x2, 0x0, 0xfb3)
close_range$auto(r1, r2, 0x8)
r3 = bpf$auto(0x1f, 0xffffffffffffffff, 0x0)
io_uring_setup$auto(0x6, 0x0)
clock_nanosleep$auto(0x6, 0x1000, 0x0, 0x0)
mmap$auto(0x8000000000000, 0x2020009, 0x6, 0xeb0, r3, 0x100000)
socket(0x2, 0x3, 0x49e5)
getsockopt$auto(r2, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@in={0x2, 0x3}, 0x58)
executing program 32:
sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, 0x0, 0x4010)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
symlink$auto(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x40102, 0x2)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0)
ioctl$auto_NVRAM_INIT(r0, 0x7040, 0x0)
shutdown$auto(0x200000003, 0x2)
bind$auto(0xffffffffffffffff, 0x0, 0x6b)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x100000000007, 0x8000000df, 0x12, r0, 0x8003)
r1 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x0, 0x0)
write$auto_event_trigger_fops_trace(r1, &(0x7f0000000080)="804ddd7576b13075faf042bf1adae7853c24d8b73b9bc0faf5b8325aca1e5503b27017d558c736865722298a33668e3ead141599fc5c1495bd7b3d782f2f1666fffb4b37aca9313bd2bc907602a528dc3cdfbe370a67106e48889d2285e6bf0d4c1729b7b43b5f", 0x67)
mremap$auto(0x0, 0xffffffffffffffff, 0x401, 0x3, 0x7fffffffb000)
prctl$auto(0x6, 0x1, 0x0, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sysinfo$auto(0x0)
r2 = socket(0x1f, 0x80d, 0x100)
setsockopt$auto(r2, 0x6, 0x2, 0x0, 0xfb3)
close_range$auto(r1, r2, 0x8)
r3 = bpf$auto(0x1f, 0xffffffffffffffff, 0x0)
io_uring_setup$auto(0x6, 0x0)
clock_nanosleep$auto(0x6, 0x1000, 0x0, 0x0)
mmap$auto(0x8000000000000, 0x2020009, 0x6, 0xeb0, r3, 0x100000)
socket(0x2, 0x3, 0x49e5)
getsockopt$auto(r2, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@in={0x2, 0x3}, 0x58)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x1003, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sockstat\x00', 0x40102, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8201, 0x0)
r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xc}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_datapath\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r4 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
newfstatat$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)={0xc860, 0x10, 0xfffffffffffffffa, 0x1, <r5=>0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x9, 0x9, 0x1, 0x6, 0x81, 0x9, 0xfffffffffffffffb, 0xff, 0xfff}, 0xfffff651)
r6 = semctl$auto(0x0, 0x1, 0x2, 0x3)
r7 = clone3$auto(&(0x7f00000001c0)={0x3, 0x9, 0x1f, 0xe, 0x8, 0x4, 0x3, 0x4a37, 0x9, 0x80000001}, 0x2de5)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000001980)={0x2574, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x1d1, 0x3, 0x0, 0x1, [@generic="38716db1aba3726bf67e96992bc60f7ea8c459e18893cbc5488601fefbaabe419fedf695a7a5de8fdb6b2be64f9a2013d8bb760a629b7dba9c1cb4b3c1ddcec9bc18421c9aa11b9def4383ea7c392ddaca91a76fcecdf9867cb740a6a3e6f207b0d6e66eeedf01c861d68aeaa9ca830adbd3f9d5f7761b664edc5e32c1e75f5de612ae7eda4c405e1f6fff343bf2ff95b650ba968895a39fc2f91ded65be37d3de", @nested={0x12a, 0xd0, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @uid=r5}, @generic="3cdf4a65ea95032d9f190dcf2ac3ae6b3ac8d34d367db43b76df05fc704094390add547d39507ad8446de9b2be9fdc1ce402c521e95409", @generic="e41fe2bd50be871a2c66f37f521768812f3fc1898c30a0d5d219cd55342497efcd896ff9684e9edc6140910bb35220c7adc1dea4085728c836a9e96f6df2180d8e304377d6a224286ca48c4b", @generic="d0f3ea9b6b7ce8f4e0eb1a47e4c996e5c48ae0f304618932b944211d545e6360c899bacad698b9420b1902202a7423f12f81336177ac08722d0623529cbc23b3f422338cf9eca1a245bca21daa8e7753c7f99ebd7a51f8d946f8bf8f4055b9667cbfac35851e33483df39733c6ce373e92549cf600b0460686e3c01ff732170e648cbe", @typed={0x4, 0xa5}, @nested={0x4, 0x54}, @typed={0xc, 0xa6, 0x0, 0x0, @u64}, @nested={0x4, 0x134}]}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x4}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x118c, 0x2, 0x0, 0x1, [@nested={0x17e, 0xd2, 0x0, 0x1, [@nested={0x4, 0x97}, @generic="7d3e67a982d224c4a93ffdbe4ca8d006d3888a90a86120994462d7c4875eb1750289c85d1d41674993f63a9e13c8b1d32974d9dca31c52ce63ceca1b0f46a021cf6d5563fddf348308b0ba3d83a33b", @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x146, 0x0, 0x0, @pid=r6}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0xa}, @generic="866f9a3ed2cd183a299f79840f8dca67a5f2c8829026d44381649a1de11778d821c9ad4272bd93a205e7ed892be1d2ea971f240fce8071fc7aae73e8840494074662c8ee96e0d42b07099675379e15a71fe51d29bc7b2aecbc870587990898a2f463ce8d5534e667f22536a79dac6f6342fb82b3f5ab98a77f557aafa73dbbdd011927784d3824ed3df08647296cc445235e664c2cceb16efe5a216c85aedbc88275faeabaf02a30320269356368d4bc28a17c", @generic="33de8fee58dd4fcc4b7e11e44942c6f0d5c3026e556725227fe5749e6acfd5b07162f0b155aeec099853252fad41e6c084e286358af54ce748cbe10f637f4fb638e87054345bd37d7dcf94e028c109b1", @typed={0x8, 0x1e, 0x0, 0x0, @u32=0x7}]}, @generic="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", @typed={0x8, 0x118, 0x0, 0x0, @ipv4=@empty}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x11f8, 0x3, 0x0, 0x1, [@typed={0x6, 0x11c, 0x0, 0x0, @str='(\x00'}, @nested={0x102c, 0x1d, 0x0, 0x1, [@nested={0x4, 0x6c}, @nested={0x4, 0xb7}, @nested={0x4, 0x6d}, @typed={0x8, 0xfc, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x11a}, @nested={0x4, 0x61}, @nested={0x4, 0x123}, @generic="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", @typed={0x8, 0x132, 0x0, 0x0, @u32=0x6}]}, @nested={0xb6, 0xf6, 0x0, 0x1, [@nested={0x4, 0x1b}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x4}, @nested={0x4, 0x94}, @typed={0x5, 0x81, 0x0, 0x0, @str='\x00'}, @generic="e477a48312d180938d3fabb8b54092add03bd1ed46b468b4ba67c3cbcb4cc3377fe55d46addac9f090e4cd61043594d3fe97645662f2dec1229b558d4425fb29e30d7526f85e4905bf6c0df1119225198aadc1a0911564064833bff488ecd415b2a923fdc468e914697f793c7129e6e8fce368d1026493c89689eacc88975cf5cc0cd5f62388d121aefeee8601c89086209ec17e6bde"]}, @typed={0x4, 0x7c}, @nested={0x102, 0x103, 0x0, 0x1, [@nested={0x4, 0xf6}, @nested={0x4, 0x53}, @nested={0x4, 0xda}, @nested={0x4, 0x14d}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x68}, @generic="e215add768179d5a79c21b09420ee4255b3da6aaac979b85cf67ba944f8dc84167cdd4359952b24e2abb89a352f3e2d2654a15510e045bad074ff6865bc1fa4e39b430c507ab4ea631c861a0f998391a97b7a27f90513ed4245d10895228dde746f25aa686e8448c011dee02af68200772756403351e63793de7700119c11eda13ddf62aeec4ee67b75a8d8f284f4c8feecdfb379d94b0904180e10e4ab09229d2203efd4762a8f762f4f45eddad048e85a5dbbe9c786fa2eeacccc8b8dbd8b500cc5a582bc64101c66392d2aa4836556e772be25977", @typed={0x8, 0x13e, 0x0, 0x0, @pid=r7}]}]}]}, 0x2574}}, 0xc000)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c00038008000c000400010012000100b39b28c10028a6b00485908286dd0000040002"], 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880)
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
pipe$auto(0x0)
r10 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
write$auto(r10, 0x0, 0xc3)
futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0xff)
ioctl$auto_def_blk_fops_fs(r1, 0x2201, 0x0)
pread64$auto(r0, 0x0, 0xf42c, 0x2)
executing program 0:
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f00000002c0)='nfsd\x00', 0xa07, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rename$auto(&(0x7f0000000080)='}[,&*}\x00', &(0x7f00000000c0)='}[,&*}\x00')
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/nfs/parameters/delay_retrans\x00', 0x102, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0)
read$auto(r0, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7ffc)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x602e00, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_clone(0x40200, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x6, 0x21)
listen$auto(0x3, 0x81)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0x4, 0x6, 0x1, 0xfffffffffffffffc, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
munmap$auto(0x5, 0x1)
connect$auto(0x3, 0x0, 0x54)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x80000005, 0x4, 0x4000000000df, 0x12, r0, 0x300000000000)
mincore$auto(0x1000, 0x8, 0x0)
sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0)
sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0)
sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, 0x0, 0x20000000)
socket(0x0, 0x800, 0x92d)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x10001, 0x3, 0x8001)
madvise$auto(0x0, 0x80000001, 0xa)
r1 = gettid()
process_vm_writev$auto(r1, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
ioctl$auto(0xc8, 0x5452, 0x0)
copy_file_range$auto(0x2, 0x0, 0x2, 0x0, 0x8001, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0xb812, 0x89ce, 0xc)
sendmsg$auto_NBD_CMD_CONNECT(r0, 0x0, 0x8880)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/fc_info\x00', 0x100, 0x0)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x101000, 0x0) (async)
r1 = gettid()
process_vm_readv$auto(r1, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0)
r2 = gettid()
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000000c0)={{@raw=0xc, 0x5102, 0x1c, 0x11, "42145273a77db2c23edadcbd82f4a2694040a5037a4c4dc937127e982ebe26fcaed79a50e3796dcc7552cb9f", @inferred=r1}, 0x5, 0x0, 0xb, @inferred=r2, @enumerated={0x400, 0xcd9, "17c10d72f706b83578b8095f1b6e63f67efd5a6220fa2bc06f10ec477fe609f483f89905906fc7938e2c2f530d8e816c430fb46356b55fb3d03fbde28c46cbf3", 0x33, 0x6}, "fd037139b37933ed9ea551a3c84280885fc3861371f2d34ebf4b28bf166bff8dca86e0cee162af8335638cd5ee76f960f601a87021305bcd49db3ecda3789a26"}) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x1a1080, 0x0)
settimeofday$auto(&(0x7f0000000180)={0x8, 0x1}, &(0x7f00000001c0)={0x1ad4, 0x5}) (async)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x80000000)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000280)=0xc986)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x39, 0x4, 0x806)
ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'})
ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x0, 0x2c, 0x0, 0x2})
openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/ns/cgroup\x00', 0x90200, 0x0)
executing program 33:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x80000000)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000280)=0xc986)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x39, 0x4, 0x806)
ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'})
ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x0, 0x2c, 0x0, 0x2})
openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/ns/cgroup\x00', 0x90200, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
setgroups$auto(0xe32, &(0x7f0000000040)=0x9)
madvise$auto(0x0, 0x53, 0x9) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) (async, rerun: 32)
pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x1, 0x40004, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x7, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x4]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)) (async, rerun: 32)
mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) (async)
ppoll$auto(&(0x7f0000000280)={<r0=>0xffffffffffffffff, 0x6, 0x9}, 0x9, &(0x7f00000002c0)={0x8000000000000001, 0x8001}, &(0x7f0000000300)={0x7ff}, 0x8) (async)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2) (async)
r2 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9) (async)
fallocate$auto(0x3, 0xfffffffc, 0xe, 0x8ecb)
r3 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000240), r2) (async)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x102, 0x0) (async, rerun: 64)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/stat\x00', 0x143000, 0x0) (async, rerun: 64)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x42220, 0x0) (async)
r4 = socket(0x10, 0x2, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64)
pipe$auto(&(0x7f0000001480)=<r5=>0xffffffffffffffff) (rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0xf, 0x3, 0x2)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x80) (async, rerun: 64)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (rerun: 64)
sendmsg$auto_NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x404c) (async, rerun: 32)
finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) (async, rerun: 32)
sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x40850)
executing program 1:
r0 = socket(0x10, 0x2, 0x9)
mmap$auto(0xfffffffffffffffd, 0x2000a, 0x10000000000df, 0xeb6, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0xa, 0x5, 0x0)
r2 = socket(0x1e, 0x6, 0x88)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0xfffffffd, 0x21, 0x0, 0x9)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x4, 0x2, 0x2, 0x7}, 0x54)
shutdown$auto(0xffffffffffffffff, 0x8)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(r2, 0x8, 0xfffffffe)
r3 = socket(0x2, 0x3, 0x100)
r4 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x20000000000008, 0x0, 0x1f, 0x7ff}, 0x80000d}, 0x3, 0x60000000)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0xa01, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r5 = socket(0x1e, 0x805, 0x0)
sysfs$auto(0x2, 0x10, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
fsconfig$auto(r5, 0x4, &(0x7f0000000000)='4\x93f\x06\x04\x00\x00', &(0x7f0000000040), 0x7f)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
ioctl$auto(0xc8, 0x400454cc, 0x5)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/midiC2D1\x00', 0x151000, 0x0)
sendmsg$auto_NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x1078, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_OBSS_PD={0x1058, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x9}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x1004, 0x5, "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"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x1}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x1}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0x28, 0x4, "44e64bfbbab0a5e82dc5daae8bcc7ba831a393af295087d3b240edf5f95511145ebc8c56"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x9d}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}]}, 0x1078}}, 0x24000000)
sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040080)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0xfe, 0x3}, 0x7}, 0x3, 0xcad8)
executing program 1:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x40000)
r0 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040), 0x14}, 0x6, &(0x7f0000000180), 0x5, 0x1001}, 0x5}, 0x2, 0x100)
getsockopt$auto(r0, 0x8, 0xb0d, &(0x7f0000000080)='\'\x0e^/[\x00', &(0x7f00000000c0)=0xe)
r1 = creat$auto(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$auto(0x9, &(0x7f0000000280)=@link_create={@prog_fd=r0, @target_fd=r1, 0x9, 0x1, @perf_event={0x2}}, 0x0)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="325f0320000000", @ANYBLOB="1200", @ANYBLOB="1600"], 0x1ac}}, 0x8000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000f7501fb7bd5d15b77a8295e434bb6c1549dc3922f74d71ce3448f51a2555b8458f5a52481ae59dddf7ac6200047c6e906fa7e642fb73a3dd140881e593785cbeabc4960000000000000000e79fcf8ef75e9d520b20e04f8ce5b3c308ae129e698e892e75ffa206000000a2ce0bf4c78565a8a060ca2e1dcda69bce8e96207e74097923e52b1af5371494de46d7a73ca3f37acfef55f340b902", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x4)
recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
executing program 1:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 1:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 34:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0xa6c}, 0x8000, 0x0, 0x6)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0x3, 0x15)
setrlimit$auto(0x1000000007, 0x0) (async)
setrlimit$auto(0x1000000007, 0x0)
executing program 5:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x1e, 0x5, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) (async)
r0 = bpf$auto(0x9, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socketpair$auto(0xfff, 0x5, 0x10, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00'})
sendmsg$auto_ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000600)={&(0x7f0000000080), 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) (async)
ioprio_set$auto(0x3, 0x0, 0x4b34) (async)
socket(0x15, 0x5, 0x0) (async)
madvise$auto(0x1ffff000, 0x7, 0x100000000) (async)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x6, 0xfffffffb)
mknod$auto(0x0, 0xc9, 0xc8)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x2664c0, 0x0) (async)
execve$auto(0x0, 0x0, 0x0)
mbind$auto(0x2, 0x100000004, 0x100000000, 0x0, 0x3ff, 0x24000)
shmget$auto(0xa, 0x10563, 0x568d1af2)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
io_uring_setup$auto(0x5, 0x0)
shmat$auto(0x0, 0x0, 0xfffffffa) (async)
mremap$auto(0x0, 0x4, 0x3fd6, 0x3, 0x20000000)
shmctl$auto(0x0, 0x0, 0xfffffffffffffffd)
open(0x0, 0x210800, 0xe1d2b27bdc14aaa8) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
mlock$auto(0xfbe8, 0x4)
executing program 5:
unshare$auto(0x40000080)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptye0\x00', 0x121200, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003e8, 0x14)
madvise$auto(0x0, 0xffffffffffff0005, 0x8)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x103400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f)
r2 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x40202, 0x0)
r3 = pidfd_open$auto(0x1, 0x0)
setns(r3, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
clock_getres$auto(0x5, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000280), r3)
recvmmsg$auto(r2, &(0x7f0000000200)={{&(0x7f0000000040)="4507b66c36452a47ed53d6a0d4ee1c242b50eb998ea974cc27124a26d9391eb70d834fceebe0a770c3252033350b74b5bf210bd4ebb0d906f5a3aac466718de83d24144fd6cdb269eec9b1c33391a92a1840a2b424d04303ba120bd62b233c95d7fc5d483c8d3cfde6af678c4f6e436b989978383da2586e78c616c9b29439e92e359440ad6356448e24e3d5275b880cd89717c5382d8cf3303ffa2e8d82e5b7c9aa5028a4bc7505a740b079ed8cedd4ce1270ffa83d3cfdb106ab75377feeacd1e60c0572fb126969e92f5335", 0x1, &(0x7f0000000180)={&(0x7f0000000140)="103ef13422702fb78fad6b8b7198d08a003394dc8ec06cea4f", 0x4}, 0x4, &(0x7f00000001c0)="358888fa5a2abd3605722cad7c5f38e0f706da486f710a4bbd3f0f2ad35b1011036477b061", 0x1ff, 0xfffffff9}, 0x8}, 0x5, 0x2, &(0x7f0000000240)={0xd8, 0x800})
executing program 5:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 5:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (fail_nth: 1)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 35:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (fail_nth: 1)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 3:
io_cancel$auto(0x8, 0x0, &(0x7f0000000140)={0x0, 0x100000001, 0x2, 0x6})
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x0, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, [0x1b16, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x94)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/net/bonding_masters\x00', 0x100, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa801, 0x0)
ioctl$auto(0x3, 0x80045518, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0)
ioctl$auto(0x3, 0xc0481273, 0x38)
ioctl$auto(0x3, 0x1276, 0x7)
executing program 6:
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fedd, 0x3, 0x6, 0x80000002, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x82)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130008000300", @ANYRES32, @ANYBLOB="0800610002"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async, rerun: 32)
io_uring_setup$auto(0x6, 0x0) (async)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73) (async)
socket(0x2, 0x1, 0x84) (async, rerun: 64)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
iopl$auto(0x3) (rerun: 64)
mmap$auto(0x0, 0x400005, 0xdf, 0x9f72, 0x5, 0x8000)
sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) (async)
read$auto(0xffffffffffffffff, 0x0, 0x80000001)
open(0x0, 0x2a4c0, 0x20) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) (async)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000380)="0cc1ea2f336f190d7826e46bcd67faebde0a7fe1730345df355440ebf3ecc867751ccb0abc426dbf08cea73392463555e4d6e2a5b2246c7e22b3b8a82fad9bdfa6ae538a8df8e671ada6bcb165738f3a8aade4ee4736fafc674bb4e01a291bcae11e08ad7c55f5cadfd50883a8ed176f11152424", 0x6, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xd}, 0xfff}, 0x5, 0x311)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x800}, 0x7}, 0x3, 0x0) (rerun: 32)
executing program 4:
r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x440200, 0x0)
r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0)
ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xf6}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x85}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x3}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xc}]}, @NL80211_ATTR_FILS_NONCES={0x75, 0xf3, "1c11ecd9970e67e4d40fc69b3cf07ff1b3544de65a6bbb8f228880b363db04fe56c0dad6506ef4279fcc2d81fb50fac4b49b0cf46aac3a1e3b80f978bf462b95281f8c3d40e30318c39c48b3c0d1baef067bf8e40628cb83f13eae2c56743fa9ef1d3b38a99de97a522fd6ef4978606b63"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40c0}, 0x2000805)
ioctl$auto_LOOP_CTL_GET_FREE(r1, 0x4c82, 0x0)
r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/dev_snmp6/veth1_to_bond\x00', 0x80180, 0x0)
r5 = semctl$auto(0x523, 0x3, 0x4, 0x7)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x26c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0x75, 0x1f, "aa75166a13596112e01d1659150b3fdca197630b1d349ba43d834caa49ea684aaebffac526e9e83a12591eb2ba61d43ea7fc728f73b7e576631aab55b8e0c9f5122bf1ebcd6ab3c3db162222e75b5398f50aa1683e79c8b2de8f4f30302ac9726401d7bd03a332cc64b9ef4eedd1ad71b5"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x72a4}, @NFC_ATTR_LLC_SDP={0x1d8, 0x13, 0x0, 0x1, [@nested={0x1d1, 0x13b, 0x0, 0x1, [@nested={0x4, 0x11e}, @generic="0777cb0fdb6614ffce8b4d461aa94883cd7b6763a7adc4f9a717478684c96cf66eba2d0b8c86", @typed={0xa, 0x23, 0x0, 0x0, @str=')#(\xc4%\x00'}, @typed={0x4, 0xa4}, @nested={0x4, 0x147}, @generic="db5a6a7663b6a4473c7d1e7774cc117b1bcd6a1d2dc078377b02208d0dbcf57a651fa5155fe3b48dc5e8ebd50ca958fbbe9d79d7b8ecb113e5cc774ed2db1031a7e9422fe8b4ed886c14f793a5bb82a372afb3e8b1729c0efdb9434bd142fbf631adf6908975fc54bd8b5f221e9a1f71b9b1de2d4e68ff2d7ddd7a833b58e08e1b1a53a9c1b018c5b7180d98700077e1a5e36631b52c8da79e13f8521a37a9b9e2f860fa83dc5956f1dc23644449aaf9b67a3c32da", @generic="a8887fc44731fd1faa3e52f12625640b51024e4ed017ce3c0b85521654187949e8ae0604c8cbbd10de61f64bc152338cf42c50cbf74f89ec80ad585f8310adaedd4a5e61fba69f183c8a8d9dd22e885ffb4c0715c0702b98fc3cfe97c49d89edb77cc65fce6fa785e0f6c87561d7009948f35bf3fdbe03af3c963775670966f29450e959ecbb1b6f67e60f169bf52dc726a3995fe1ef0704fecc7f685144ddbb47e78de21512dd8bb844205d5ec8dcb0685ecc2368e89c100270899828ec", @nested={0x4, 0x7b}, @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x124}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24008800}, 0x48005)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = io_uring_setup$auto(0xc, &(0x7f0000000600)={0x8, 0x180000, 0x6, 0x5c40, 0xff, 0x20000, <r8=>r2, [0x1000, 0xf2, 0x401], {0x3, 0x7fffffff, 0xa, 0x7, 0x10, 0x3, 0x7ff, 0x8, 0x4}, {0xfffffffd, 0x7, 0x7, 0x7fffffff, 0x2, 0x9, 0x8001, 0x3, 0x4}})
sendmsg$auto_NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x110, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xf1, 0xbd, "8cb284331f41af92bcaba07531342b34bfc7de75578aebfab51514549da81564348a3d0bc519cb0179022330dcad9c1305338c01ad3a0834e08e89dd5f913d5dc59c05450171b85efcfa88311637141e58e29c91b0a9809b7a3614fc4c01723e77f4651d1498f50e67baf4f0b68b189cf87ccf378feec00710458375bc3cd8e2e7cc45cfd65d78fc8497d234cfe68adb6b36def59f17758162288f3716d29d8ba67e3ad26108ba9ff5be09aad829428d94622a6dbc68fc7f9f7107a3f850146186411783ce28700db5938abb1cac114ad9a11e5dff0780a8e34396ffc42d7156ad6fef2198c3241e70484c0e7b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x110}}, 0x20048014)
sendmmsg$auto(r6, &(0x7f0000000a40)={{&(0x7f0000000880)="c8ab1d74e1780591b27536fbc7a4ed054b1a035a53cd8217e07b6254898e9a82365af7f5a06a3ceb48f8b68b5e41a6a5f7ea7a9717a2c953694e1a50750b0d5098f68c88ebcfb53ecbcf8c2af67319bd3aa6", 0x1, &(0x7f0000000980)={&(0x7f0000000900)="1cfcbbd7c3a0d1b27220d859397359cdd924f4d71c94bb6ca8169949765dc79496b4d349adea0d8266227572ab90aff963974eea161983b7c1115079c92909e290bf3ed91bbb98799469fc4add18366802264fd565a1b7dd9b149f2f29db3ba37d2ae1b9071fc1881455a0d192c3112e88853689042cee", 0x2}, 0x79, &(0x7f00000009c0)="efdd869f14a5eb598f89fdef63fd3f5671ea42e41a89a02c0dd77f5251f3c1e7b96611a78768f12f066ed502199b6d4cf08d52205ea560bb5864f3b4a6de80b020ca7f921c77899013817de381384d3d0839de", 0x8}, 0x7}, 0xa, 0x7)
r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000ac0), r7)
sendmsg$auto_NFC_CMD_DISABLE_SE(r7, &(0x7f0000002040)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002000)={&(0x7f0000000b00)={0x1500, r9, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x1bf, 0x13, 0x0, 0x1, [@generic="b5a93028647cc948654396626e76e4ea07a35f80abe6e024813eacb1c7dc92662186b1c84e2c9a22cbddfd09263823c00003add2fcac4e61264eb0d0e386ba0447718272c9f82e8881ea184c6c726e1d698f695ae73e44a321ad04742da7450c26dd8b90b8e74f6e7cf7a6b89e3b6ef1103f06e6cb67c77e9fd66fd6a54d3e58b12171aef3c868614a543d872d1fa15c1b45f23b34", @typed={0x57, 0x12, 0x0, 0x0, @binary="3c71924d0efc6da202998e280745a48875f04acd9625e2e8af9f60fed8744066421b027a80841c257e886535b8461093d7be8a3d2b625e52bfb32422ec592b25988fa950d43cdd158a353a961d35d4496e3887"}, @generic="517855dcbabc55df8fef813160cc0b86640b4d0c7cf6", @typed={0x4, 0x29}, @generic="b0ba94cd55f4c5a31acbb9b230a371fc25dd3e836da012cd6bd43efed66260ab7d8dda27a2a9184109cdcf6449195ae38198dd2655bc76e33b0ae80d8dbf18021d17cd27b845fd58c85ae3be54eef7d14eefb79cca6ad4a2e8e81061a3037b54a45a126555bc31097e5c3bea0e05cf2879fc2e4c5267fae82aea5eaade58bfe2b28ba4ca28c4385c5f09c8f1eb6fa1dbcd9d948ecc61eb4a28a1ae341360d52d856454470cec96cc2a93bae99f058218e6946df5"]}, @NFC_ATTR_LLC_SDP={0x1304, 0x13, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @pid=r5}, @generic="3688d1845da8951c51b120ad4955c652b9c067cbb57d575f9efeff688de6cdda0cd92cd150066c29effa16584af436f9105fa3a52a7ad41049d2f117183e2706c72cbd6432e0da5694220462", @nested={0x23, 0x13c, 0x0, 0x1, [@typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@mcast2}, @generic="3893d3bfc2aa91", @nested={0x4, 0xc7}]}, @generic="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", @nested={0x280, 0x94, 0x0, 0x1, [@generic="a51e2533e04ec9895d0837fd9d8062c010fb80affe17bd69ef5870d8d2427cee31577319995ce9c7aec1146e6ca51518f3334a586d4a58d5a7f244aac2759be6e8cb51880d911b0ebefde35fd2c4c18fe7066ccdfabd848e0dd92ba63dcc4855e1a89dd04be42b52215a8f", @nested={0x4, 0x7d}, @typed={0x8, 0x7f, 0x0, 0x0, @fd=r4}, @typed={0x4, 0x90}, @nested={0x4, 0xf}, @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="716000b609e86e7eb2634f7346d82dd9e0b47e4380fec2a7aa08b849b3fa1bd0dd89a11f7dab135e840c4bd4bc3524aca5d938940a61bd41bb70b258bb3d2eece98edd1932a9e5e8f890dfbae70cd7c388a7240d15bb13c358137246a6c22d0bab460ae041a47dc2df6aba0093ad5f77d6d83bbd", @generic="ea13e1e4a9df7d72c1382302916fcd1ec2d5b8142a1dbdc9c0f180e678e80000ef8e30e90ceb7e71d742c9b610915917001431a4f0e04e7f4d494bf09f7ec384b0c742215bb2da3f2eeee3e75e1ad7cde9317cf414911e435485b63596d9dd0d9bdb62a3dd3f47c5c364b5c07d6866030b93fccf84d8a2c3140325d05630412956d7d4ca0ebedd8977c729720441bedc82b9de408bd7f6e09d85aa90583956aeac815e774780bf610b8c4bc6b780d945588076288e8d012a630f906e7dc8b641adb99988de3f01436d698b73daa148795e350d8dba6905f4cda3ba069dcae0037d6d38", @typed={0x8, 0x52, 0x0, 0x0, @pid=r5}, @generic="0603a215645985a28ca9c72a7401923390353359178be19bd6bf9da854c173ba7c629148531a61aa504a30a29c4e1486bc3c6d646c94ad551ded3947fb344b01b3ae11bbd7110fb153eef80be93da1bcc871c04073e21fb53af40ec407dcaff756cac0ece5dd65c64c81dc7618fb77fadf584e79f484a7b32cead163d4816298204f2d2892f299699d7f95275222dc517793fd8a7e37"]}, @generic="db9921b8712c4187"]}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7fff}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0xffffb3bf}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x9}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x38}]}, 0x1500}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r10 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000020c0), r8)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x24, r10, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x9}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x90c7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$auto_NL80211_CMD_TDLS_OPER(r7, &(0x7f0000002600)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002200)={0x3a4, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x100}, @NL80211_ATTR_FILS_CACHE_ID={0xac, 0xfd, "a69e3773297a672e3cc4978a49ebfee2709e127ccf3a18ae51c058db24769ad2f7be817fd348fa2bb981a08cfcbe7bfa7847af6b72aee4ffee752aa3567c1475317db1133bf054d3314dfd898a688ae185607c524a19f524bfd9e77c91f8a40bdad8d93cea79c3cc3262162fa3bee630ff10befcab6635e4e01459042cbbb94860f5da58bedf59cacb8ef25606d34c8e7fc25cf682caf3c3bb33f9829a60053cdc5bc114c9866b51"}, @NL80211_ATTR_MPATH_NEXT_HOP={0x60, 0x1a, "09bb2d4be93c57cd2ac4e77998782b8c26821725c886d13fe61141ec9e2e029b347e1b8dd8462ee46d902d20e458b90b2bc27174f50994b2ee6c3636ef9e89325fbb9170e55ba3f86b3b9d234842d914ade7eb7c209e2c5044c5d2b5"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfff}, @NL80211_ATTR_EMA_RNR_ELEMS={0x123, 0x145, 0x0, 0x1, [@generic="9435e0081e48ed0dd83493f6ef418ec4c027d8839529568e27dfe8f79416d2636918e6c6cbb69a081f8fdd0462b2f3e648a3745c3f4a82d7350180a4fb904b692c01c878aaceb6674ab0", @generic="a98fd30e79486ba62a8d53df878139f6c865a8857da9f8d040b71cd35487397adb34c350b2f7df2906149d2e73b3a315037cfb13fef0274feedcfe36d66fe9d1bdf9c38f2ce0a6a32593d06861d097b863ce9a4389fedb086570512d0a666c9447ecf745e60701d27b4419887efb10ab9b33fb872804f4737046b276bcf09e30fcd281ea72ab1f963fdaa0fb08d82a5e9dbc167d820145d9a9776bbb1ce59a1c1de1434d10d1810b5cbaebc7b2d8aa9870da70423bcfdf583a0b4a360337cc8ee81cfa3317f87efaae2cf858759c2dd8df246e1efe"]}, @NL80211_ATTR_REG_RULES={0x139, 0x22, 0x0, 0x1, [@nested={0x1c, 0xfe, 0x0, 0x1, [@typed={0xc, 0x95, 0x0, 0x0, @u64=0x4}, @typed={0xc, 0x83, 0x0, 0x0, @u64=0x7}]}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@private1}, @generic="fc59aef7f55aca20a7b4d9e8b5cd254eb87572d0c6a5970d42394d8b7d52eef5bee031533e7f929ae466d680a8ce6860f8740cf4ffa8524e89b1c1c6721021aef30e548dce5f6b439dbb8a28c88acab6eb09a13bfa", @generic="1ec45b56d2c065b967d8d326086c14a2bc31e93c886d539facaf5925b70e6b67c77e20fef3e56ffbfc8fc3ede408ab129f3a387372624cc6b0dd3ef2656316c51789244d9fa1058d5faf7106cff6c33daaf195a8b1ea8b15656eb51bc73d8840a53f61184e760c75b3e3d1e5787deba0f342ac78261a297b8309d7a22049ce437bef2212d6f1cb13aa8a8766ab48eaa23412b69ff4fcc6f8c94460d9920643a4a9763b18", @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x3a}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x800}, 0x20008800)
r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002680), r8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000026c0)={'pim6reg\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002700)={'pim6reg0\x00', <r13=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r7, &(0x7f0000002840)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0x98, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x1}, @ETHTOOL_A_MODULE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x34}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0xf5}, @ETHTOOL_A_MODULE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x841}, 0x20000000)
r14 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000028c0), r2)
sendmsg$auto_NETDEV_CMD_NAPI_GET2(r2, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x24, r14, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r13}, @NETDEV_A_NAPI_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000084)
ustat$auto(0x0, &(0x7f00000029c0)={0x1, 0x7fffffffffffffff, "9968858a5e88", "72c0da88392b"})
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r8, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x48, r11, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x8}, @ETHTOOL_A_MODULE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40)
mmap$auto(0x8, 0x2, 0x0, 0x971, r0, 0x6)
sendmsg$auto_NET_SHAPER_CMD_SET(r2, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r13}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x8}, @NET_SHAPER_A_BURST={0xc, 0x5, 0x2}, @NET_SHAPER_A_BW_MIN={0xc, 0x3, 0x40}]}, 0x3c}}, 0x40090)
executing program 4:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r1=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async)
socket(0x2, 0x3, 0x100) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async, rerun: 64)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10) (async)
eventfd$auto(0x3)
eventfd$auto(0x0) (async, rerun: 32)
pipe$auto(&(0x7f0000001000)=0x1) (rerun: 32)
r2 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4}, 0xa3) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
socket(0x15, 0x5, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
gettid() (async, rerun: 64)
mlockall$auto(0x7) (async, rerun: 64)
fallocate$auto(0x1, 0xa, 0xfbf9, 0x3)
executing program 6:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
arch_prctl$auto(0x5005, 0x9) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) (async)
ioctl$auto(0x3, 0x401070cd, 0x38)
executing program 6:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
connect$auto(0x3, 0x0, 0x54)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1)
io_uring_register$auto(0x2, 0x17, &(0x7f00000000c0), 0x1)
mincore$auto(0x1000, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async)
mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x3, 0x8000)
ioctl$auto(0x3, 0x8108551b, 0x1) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
capget$auto(0x0, 0xfffffffffffffffe) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x6, 0x0) (async)
getsockopt$auto(0x4, 0x10d, 0x2, 0xfffffffffffffffc, 0x0) (async)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffffa, 0x1, @inferred, @enumerated={0xefff, 0xfff, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a61b7382f979a0ff0b3d9581c0861bbe128e249d9f994ef5578e78507637044b73a4c4b5700", 0x9, 0x3ff}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"})
executing program 4:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)
executing program 7:
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8880)
process_vm_readv$auto(0xbd4, &(0x7f0000000040)={0x0}, 0x3ff, 0x0, 0x46, 0x0) (async)
process_vm_readv$auto(0xbd4, &(0x7f0000000040)={0x0}, 0x3ff, 0x0, 0x46, 0x0)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe) (async)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000002140), 0x80, 0x0)
ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000002180)={@padding, 0x3})
socket(0xb, 0x2, 0x5682)
r2 = socket(0x2, 0x1, 0x0)
memfd_create$auto(0x0, 0xe) (async)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
ioctl$auto(0x3, 0x4008550d, 0x1)
setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0x81) (async)
setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0x81)
executing program 3:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff})
r0 = socket(0x10, 0x2, 0x6)
mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0x401, 0x1)
r1 = socket(0x10, 0x2, 0x0)
close_range$auto(r1, r1, 0x85)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x6a)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x448141, 0x0)
sendfile$auto(r0, r2, 0x0, 0x3)
unshare$auto(0x40000080)
executing program 7:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:13/path\x00', 0x0, 0x0) (async)
mmap$auto(0x10000000, 0xe, 0x10000000000dc, 0xfffffffffffffe3b, 0x401, 0x8000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x80402, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0)
write$auto(0x3, 0x0, 0x100082)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f0000000280)="c282", 0x2) (async)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x4fffd) (async)
ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) (async)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
write$auto(r1, 0x0, 0x6) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
io_uring_setup$auto(0xa, 0x0) (async)
open(0x0, 0xa240, 0x15e) (async)
close_range$auto(0x0, 0x1c94, 0x2) (async)
socket(0x2, 0x5, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001100), 0x165300, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
inotify_init1$auto(0x3000000000000) (async)
inotify_add_watch$auto(0x4, 0x0, 0x9) (async)
inotify_add_watch$auto(0x4, 0x0, 0x80000000)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4106, 0xffffffffffffff57) (async)
r3 = socket(0xa, 0x801, 0x106)
openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f00000010c0), 0x4200, 0x0)
setsockopt$auto(r3, 0x1, 0x1, &(0x7f0000000000)='\x98\x00', 0xb559)
listen$auto(0x3, 0x81) (async)
getsockopt$auto(r3, 0x10, 0x1000004, 0xfffffffffffffffe, 0xfffffffffffffffd)
executing program 3:
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mlock$auto(0x3, 0x9)
executing program 4:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
read$auto(0x3, 0x0, 0x400000)
unshare$auto(0x40) (async)
unshare$auto(0x40)
executing program 7:
mmap$auto(0x1, 0x4020009, 0xdf, 0xeb5, 0x401, 0xaf8f)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x48, 0x0)
r0 = socket(0xa, 0x3, 0x73)
setsockopt$auto(r0, 0xff, 0x7, 0x0, 0xfff)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x88)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x801)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
socket(0x10, 0x3, 0x6)
socketpair$auto(0x1e, 0x5, 0xda0, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xa005)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r1 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6)
executing program 6:
r0 = socket(0x9, 0x3, 0x3)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) (async)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0)
setfsuid$auto(0xee01) (async)
r2 = setfsuid$auto(0xee01)
geteuid() (async)
r3 = geteuid()
sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001940)={&(0x7f0000000000), 0xc, &(0x7f0000001900)={&(0x7f0000000080)={0x1850, r1, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x3d, 0x5, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @generic="a720a2522c01086bc76e872ee085fea5ce3c9c5441150e1885970021b550171785f7d43d3d"]}, @TIPC_NLA_NAME_TABLE={0x274, 0x8, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @uid=r2}, @nested={0x8, 0x11a, 0x0, 0x1, [@typed={0x4, 0x5b}]}, @nested={0xd8, 0x101, 0x0, 0x1, [@nested={0x4, 0x13b}, @generic="2b73a6e93fe4fc51e51627b7b03ae9df668a398cef3f7a459898fa84ba173971b4ddb41a934c9f3433520311dacd113f5353e9f9922cada81d2d4c7c7712921cb51986f8026e8de77a3f29e1e47643b3440330fe4210", @typed={0x8, 0x57, 0x0, 0x0, @u32=0x3}, @typed={0x14, 0x138, 0x0, 0x0, @ipv6=@loopback}, @generic="68d2e17119256cc3aa6bfc56ced635d5a151fb1d743eefcfc311b4dac75d781a18359cf0d97659a55823c394c1331068e890d956c17e60aa2e40d8ef466f576464e2d99132db58ac0fd85f9c4d88c5f6e8fd5a3f98e032a8db42c89b9fdb"]}, @nested={0xc, 0xc7, 0x0, 0x1, [@typed={0x8, 0xf5, 0x0, 0x0, @u32=0x9}]}, @nested={0x179, 0x60, 0x0, 0x1, [@generic="0e8bf969cf99048dea561239906d52eca79d4a93d8b5d8c41848342f7da04b4effd4a37a6b6c338d655e95ac2882e244a0ef722bfcca5ae1882c2acfd86f9b2a375837ea3d6b09941cbadfed329d0bb30a1a", @nested={0x4, 0x17}, @generic="aee862b1963bf40d3df6f9daa87c", @generic="d988fd864c859fc25c480dc525f3337e346119a888341e30e8087551113b921bd1ca1b97c0e2688118e3953726743f8ff475af1bcc1b483342b3b67d635f", @typed={0xc, 0x1e, 0x0, 0x0, @str='-}[:\xd4+*\x00'}, @generic="6ba46b96473c8d5cff9eb35dbdf7bbc5c4839824f72e53cca466eaee380ef7e146ea8f2a2a0a7f780e9b860b4d1df8455bf8445654bb41874916c67bb7326d9066257e41aef9a1873d2bc72907464968a26a621e1ae5e0065e926c9388034033d86e76ec789a03f911f4c5c61bad078b46b772d702df73cee95a0bf0a26b8546014b78963399e4be3a6d61469261a60cb6695a9ebd3082b24bf6ee14739b3e857a6f52d58ff45e6293ae6af3b73c181a9825d3f5af4b1f9ff20472d1884b133bb4e1c6", @nested={0x4, 0xce}]}]}, @TIPC_NLA_LINK={0x3b, 0x4, 0x0, 0x1, [@nested={0x10, 0xde, 0x0, 0x1, [@nested={0x4, 0x90}, @typed={0x8, 0x11b, 0x0, 0x0, @uid=r3}]}, @generic="8e6aa00c5c776b4050fc55d4f94045bd9265b0cb4ccf", @generic="98be183ddf9ccdc0e808c92649be0eb2cd"]}, @TIPC_NLA_SOCK={0x1cc, 0x2, 0x0, 0x1, [@nested={0x1c7, 0x1f, 0x0, 0x1, [@generic="bf5d2630e6ed1ddff6269fdb5380f6555d0d7c9cee9282bae6070af2a2e525df23106570df1d7e83c59c9b066ba45b8666443f56e28f19e71c202d6e49f07ad7c8cef0336e2dc5dd745474bf3c701231575eb226a1ecd066d8b7f41e473a6a24fe9d891c5d7bd0b2209a6880e0cfccebd904fefe11d6a303832095ef8197f9a2c550a2cd1ee649d74b3c5d0ef355a8576fc0b480b361a5d33fec6a8db8", @generic="e71758c65a1e842a4ba054868fe2a16b1ae2b1e777c6df2556634a37dcd3ca854988938233a23accb1d07f8af2424fe54e42458cdf7cdc9f7849355be7bd383c7a592952c98b250adbc3d8742c64da6171214f843d4c675687caafc3944649ed02afe8f00c2864bf694b477f135e603be16b56ad17d6a1ddb549cd26d916eb9ac1f354b8294a92206d43c401ad68a9a977470793c3abc1e56db4d5a9fd4dea461591", @typed={0x5, 0x146, 0x0, 0x0, @str='\x00'}, @generic="f577dca3f00ba62dccd637b0990cacc7282afc2d01be3a68afdcd5871db86efc63da621eb3236cc013a73a61c57d98010ae898c9493c43f70cddb1149c528240edcfa4e23bdfc9933956f4d005f44e64719b1234867ecc33c5d9e9fc86d488490c6a7a186013f0c4145c10bdef72a646d9598e90", @typed={0x8, 0x39, 0x0, 0x0, @uid=0xee01}]}]}, @TIPC_NLA_NODE={0x130a, 0x6, 0x0, 0x1, [@nested={0x1d7, 0x111, 0x0, 0x1, [@typed={0x4, 0x75}, @generic="41c7197eef99ee6a64f118c12036087acd7538771d6637a55c00dcda95019adb7cba77f8f9c04d23331948f699c97cae102ce07e86ba69f596618333555dbfc6a688454508f09b8dd10aa37b66a37a293f98183595ef16d333567e350babafcd2c0ad0414f0a9891d56d0242cb5e26242134442c36fa3e49e3100337f4611f8e8f00e5ec8e978c7be69f", @typed={0x5, 0xaf, 0x0, 0x0, @str='\x00'}, @generic="b9f7b786", @typed={0x48, 0xda, 0x0, 0x0, @binary="f857fb1c39a66aae52832b953a35d773ca28a5c6069ee9d88786a2310419bf8a1581e0f3bf90003615bced837de9dddcaf26399c1e4a98313ffb0c55c5ebabe07c9c914b"}, @nested={0x4, 0xad}, @generic="a9ef23d3c0e43d0b554e10757e51364b60c3f55baaca66665fcd90ba5462f9fd09d20016fdccfa510972720dd05c648843eac1cbfdbd84d93c29c2ab627e528087b4ea8a8509d14f468f0072255ba782c19a2718aa95c9463d03e358d5533ffbe9c41742470126a2187b939ca1c5b51f090f080d7627ee66e03a6f8bb6d069a47512bfe32899e55f45d06a5154c838a1cac9380748ed8052434e605453d564b7dcfb62b09feeebf1b9c7cf602b27421e157fe5ffc6a4b044b627e26d3403fe29e810dd1b485f2ff3be6432057589630e76e37371f53ff59e95de7cde3e38eda00767cb61fc9255ef8d6582a626"]}, @nested={0x100c, 0x8e, 0x0, 0x1, [@typed={0x5, 0x53, 0x0, 0x0, @str='\x00'}, @generic="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"]}, @generic="7b93407443879e77b6df054db9935b1f2780a2e29804269684ce1ef85047fee90ffff6aeead796a17a563c553b73feb72b01d5f2081e98fe9e625bd3040a9e103ad801daf84b3bd4d2c044d69be13fe304ba3bb18653f256e59ad55709d45467107e7c99b936357b4c441495d03a67c36a5e87123a16bf0e9fbaaf3e893b21934b1e1e7804ed3e56e801aac954527406bfe3923621700290077e4fbfa76f8220ab59c0e4b8e05ed590b0972b5411ccda5933cdb7be69042383f3", @generic="a6c91b7cdd454acb2c217172c1051cf6589baad33b69608f95a89cceed3132ef75bac3dea5af0d885bff7f9b2d4e63a184c99da1815e57e20ac6224ebed69ceb60b52d984da1138e8d88fffef1f8a9f46e7727e853f6e47b28b6c6e1e74ee37611b6fabb92238471"]}, @TIPC_NLA_MON={0x73, 0x9, 0x0, 0x1, [@typed={0xc, 0x3b, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="8c13448c33ebf548235707aadd0e9f64b402ba969af5c92c6d9c4bf0dd0208490d1aa795b9e637d8227a2730baeebab8ac4b77e6501ea897b70b5f37698b7058bd9cedf555599adc9345c6f2b866b4eaecd88999f282609799464c"]}]}, 0x1850}, 0x1, 0x0, 0x0, 0x2404a885}, 0x40000)
r4 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000001980)='/sys/kernel/tracing/trace_marker_raw\x00', 0x8200, 0x0)
write$auto_tracing_mark_raw_fops_trace(r4, &(0x7f00000019c0)="4fee5b2d11d6e2ae6ef419e19b1333a831627f5054bfe374f5e6b49a2ea8dcf64b9bf17f98242fb32bac27c33dda5b82818b993182e100fbaac650e58fd4c1b65839a28ecba9323093ce029ad5109659db851a91b848affff2ece9320cf41af899254219736625e558e98142c739a5b7469cdf1508a78501777294bfd9370cf897a1fa83dc835c7832faefc3f26b69e92d4907331d199d44a4becd799cd16485f561b970d74d4cd8593c4096556dba0a6e960e68f774eecf4ea4d6b166050ac85447f4cdf093c44a79d552ed7ee022fdb5", 0xd1)
umount2$auto(&(0x7f0000001ac0)='TIPCv2\x00', 0x1) (async)
umount2$auto(&(0x7f0000001ac0)='TIPCv2\x00', 0x1)
r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001b00), 0x501000, 0x0)
r6 = socket(0x2c, 0x6, 0x1)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/ptyu2\x00', 0x200000, 0x0)
ioctl$auto_TIOCCBRK2(r7, 0x5428, 0x0) (async)
ioctl$auto_TIOCCBRK2(r7, 0x5428, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b80), r6) (async)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b80), r6)
setsockopt$auto(r4, 0x7, 0xf9, &(0x7f0000001bc0)='\x00', 0x0)
madvise$auto(0x0, 0x1, 0x80)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001c00)='/sys/kernel/debug/block/nbd10/rqos/wbt/id\x00', 0x40, 0x0)
r9 = eventfd$auto(0x6)
openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000001c40), 0x8000, 0x0) (async)
r10 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000001c40), 0x8000, 0x0)
close_range$auto(r9, r10, 0xfffffff8)
keyctl$auto(0x6, r2, r3, 0xee00, 0x10001)
openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/ieee80211/phy16/short_retry_limit\x00', 0x40800, 0x0) (async)
r11 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/ieee80211/phy16/short_retry_limit\x00', 0x40800, 0x0)
io_uring_setup$auto(0x6, &(0x7f0000001cc0)={0x26, 0x72, 0x2e4, 0x5, 0x9e0, 0x9, r11, [0x1, 0x9, 0xd5e], {0x9, 0xf, 0x5f24e83c, 0xff, 0x28000, 0x751, 0x5, 0x5}, {0x1, 0x1, 0x80000000, 0x7f, 0x0, 0x4, 0x9, 0x7f, 0x5}})
statmount$auto(&(0x7f0000001d40)={0x2, @inferred=r5, 0x10000, 0x7, 0xffffffffffff3001}, &(0x7f0000001d80)={0x3, 0x780, 0x3, 0x2, 0x9, 0x5, 0xffff, 0x80, 0x3, 0x4, 0xe, 0x3, 0x6, 0x2, 0x6, 0x4, 0x6, 0x7, 0x9, 0x4, 0x40, 0xa7, 0xd675, 0x7, 0x6, 0x7, [0x1, 0x2, 0x0, 0x3, 0x50e8, 0x5, 0x7, 0x9, 0x7, 0x9, 0x7, 0x0, 0x6, 0x7ff, 0x1, 0x1, 0x7, 0x8, 0x1, 0x101, 0x3, 0xeac, 0x0, 0x3, 0xa6db, 0x5, 0x9, 0x9, 0x7fffffff, 0x6, 0x6, 0x2, 0x1000000000000, 0x8, 0x7fffffffffffffff, 0x9ed, 0x49cd, 0x100000001, 0x4, 0x5, 0x400, 0x7fffffffffffffff, 0x8000000000000000, 0x9, 0x9, 0x5], "833f1358ba"}, 0x9, 0x3)
r12 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/ttyprintk\x00', 0x90842, 0x0)
ioctl$auto_TIOCCONS2(r12, 0x541d, 0x0) (async)
ioctl$auto_TIOCCONS2(r12, 0x541d, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002000)={'vlan0\x00'})
open(&(0x7f0000002040)='./file0\x00', 0x400, 0x0) (async)
r13 = open(&(0x7f0000002040)='./file0\x00', 0x400, 0x0)
statmount$auto(&(0x7f0000002080)={0x2, @inferred=r13, 0x10000, 0xc, 0x80}, &(0x7f00000020c0)={0xfff, 0x5, 0x3, 0x4, 0x6, 0x3, 0x9, 0x6b5, 0x400, 0x64c, 0x1535, 0x1, 0x2, 0x308a, 0x36, 0x9, 0x3, 0x2, 0x0, 0x1, 0x1, 0xb, 0x6e8, 0x9, 0x3, 0x4, [0x6, 0x18704338, 0x6, 0x9e, 0x5, 0x5, 0x80, 0xfffffffffffff77d, 0x8001, 0x1, 0x0, 0x10001, 0x6, 0x7fffffff, 0x2, 0x58, 0x9481, 0x1, 0x100000001, 0x4, 0x96, 0x2e, 0x4, 0x2, 0xffffffffffffffff, 0x7ff, 0x4, 0x0, 0x1, 0x800000000, 0x2, 0x8f, 0x0, 0x1, 0xee, 0xfff, 0xaa, 0x3, 0x1, 0x10001, 0x7, 0x9, 0x50, 0x1, 0x2, 0x1], "0cb70e4e0e087c3df96548121a232e1b9b2cd2942669df202d88b5a22adeb573541a4a9d8a9f7d94890839d46deb3c9b451b099086523a0b0e36af75be62ea81159fbc238ef801b64cb70a6f1ae296fcbe0071e763523bb05f3cbf386c887d6317aff976fb02fcc8ed9f3e85f14516fcbdb6eb4e348943a10f624ebad9d4c8c2a6f582666f8096fb929ade690073eed9a3976f0decd0db1195dd87733c53843393924237abc9194d6584b8cd4018241da0"}, 0x5, 0x3)
sendmsg$auto_NL80211_CMD_START_NAN(r13, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0)
sendfile$auto(r10, r0, &(0x7f0000002480)=0x100, 0x6)
executing program 3:
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x4000000)
r0 = open$auto(&(0x7f0000000140)='./file0\x00', 0x3, 0xfffd)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyw5\x00', 0xc8340, 0x0)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
ioctl$auto(r1, 0x5459, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$auto_ima_measure_policy_ops_ima_fs(r2, &(0x7f0000000000)='#', 0x1)
r3 = socket(0x1e, 0x1, 0x0)
getsockname$auto(r3, &(0x7f0000000000), 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
socket(0x1e, 0x4, 0x0)
connect$auto(r3, &(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0x10)
ioctl$auto(0x3, 0x5404, 0x38)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000001480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001440)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="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"], 0x11c0}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000880)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/dma_heap/system/uevent\x00', 0x1e1042, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)=""/158, 0x9e)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r6, 0x1b, 0x70bd26, 0x25dfdbfa, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0xc}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590820806"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
io_uring_setup$auto(0x1, 0x0)
executing program 4:
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9f4e79f46ea89b5}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0x1, 0x5, 0x0) (async)
r1 = socket(0x1, 0x5, 0x0)
bind$auto(r1, 0x0, 0x6b)
listen$auto(0x3, 0x81) (async)
listen$auto(0x3, 0x81)
select$auto(0x1ff, 0x0, &(0x7f0000000100)={[0xf, 0x200, 0x800000000000008, 0x5, 0x9, 0x7, 0x3, 0x2, 0x40009, 0x20000005e582972, 0x4000000000000000, 0x14, 0x5, 0x8, 0x8, 0x80000000003]}, 0x0, 0x0)
executing program 7:
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041)
r1 = socket(0x2a, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000080), 0x6b)
connect$auto(0x3, &(0x7f00000000c0)=@can, 0x57)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
fcntl$auto(0xffffffffffffffff, 0x401, 0x5)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40)
write$auto(0x3, 0x0, 0xfffffdef)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0x9f, 0x9b72, 0xffffffffffffffff, 0x0)
sysfs$auto(0x2, 0x10000000000002d, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r1)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
r2 = gettid()
mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000)
sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x8000)
unshare$auto(0x40000080)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0x20200, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x19, 0x401, 0x8000)
rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00')
process_vm_readv$auto(r2, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x3, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm0p/sub3/hw_params\x00', 0x224600, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
executing program 6:
r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x61a842, 0x0)
read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50)
write$auto(r0, &(0x7f0000000000)='/proc/self/environ\x00', 0x5)
openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x61a842, 0x0) (async)
read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50) (async)
write$auto(r0, &(0x7f0000000000)='/proc/self/environ\x00', 0x5) (async)
executing program 3:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop15/queue/scheduler\x00', 0x0, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop15/queue/scheduler\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zram0\x00', 0x1c1740, 0x0) (async)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zram0\x00', 0x1c1740, 0x0)
r1 = socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0x4000eb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0x4000eb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0) (async)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0x2b6ac0, 0x50)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x1, 0x5c, 0xfffffffffffffffa, 0x8000)
socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/cgroup/delegate\x00', 0x80, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/17, 0x11)
write$auto(r3, 0x0, 0xff)
r5 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r5, 0x29, 0x11, &(0x7f0000000040)='!\x00', 0x1ff)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x0, 0x100) (async)
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x0, 0x100)
mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffefffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3)
membarrier$auto(0x0, 0x100000000, 0x8000000000000001)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0xfffffdf3) (async)
write$auto(0x3, 0x0, 0xfffffdf3)
r6 = socket(0x1d, 0x1, 0x6)
r7 = getsockopt$auto(r6, 0x6a, 0x5, 0x0, 0x0)
getcwd$auto(&(0x7f0000000040)='\x00', 0x3)
close_range$auto(r7, r0, 0x4) (async)
close_range$auto(r7, r0, 0x4)
executing program 6:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_snd_pcm_oss_f_reg_pcm_oss-mmap$auto-mmap$auto-syz_clone-close_range$auto-socket$nl_generic-socket-socket-socket-adjtimex$auto-get_robust_list$auto-get_robust_list$auto-setsockopt$auto-openat$auto_seq_oss_f_ops_seq_oss-openat$auto_seq_oss_f_ops_seq_oss-read$auto_snapshot_fops_user-read$auto_seq_oss_f_ops_seq_oss-read$auto_seq_oss_f_ops_seq_oss-setsockopt$auto-write$auto-write$auto-writev$auto-readv$auto-readv$auto-ioctl$auto_SNDCTL_DSP_CHANNELS-close_range$auto-close_range$auto-mmap$auto-io_uring_setup$auto-io_uring_setup$auto-mmap$auto-socket-openat$auto_tracing_stats_fops_trace-socketpair$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto_SNDCTL_DSP_SPEED-mmap$auto
detailed listing:
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program did not crash
single: failed to extract reproducer
bisect: bisecting 50 programs with base timeout 1m40s
testing program (duration=1m52s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 21, 18, 14, 30, 30, 24, 5, 18, 29, 11, 10, 10, 30, 30, 7, 8, 16, 27, 27, 6, 17, 30, 20, 5, 5, 5, 18, 27, 30, 30, 8, 17, 12, 18, 28, 17, 29, 6, 5, 29, 40, 30, 17, 29, 40, 6, 40, 18]
detailed listing:
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff)
r1 = gettid()
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x940, 0x1ffe0, 0x8003, 0x8, 0x6, 0x7, 0x5, 0x2, 0x9, 0x6, 0x9, 0x2, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x1fa, 0x7)
r2 = signalfd$auto(r0, &(0x7f0000000500)={0x431}, 0x8000000000000000)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r0)
sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x38, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x5}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x23ff}, @CTRL_ATTR_OP={0x8, 0xa, 0x8009}, @CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'batadv0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x48005}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x802, 0x1)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x10001)
bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x2000000}, 0x68)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r8=>0x0})
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="9ed1d5cd", @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf250f00000008000300", @ANYRES32=r8, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140000e4)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
kill$auto(r1, 0x11)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
executing program 2:
r0 = clone$auto(0x521deeaa, 0xb, 0xfffffffffffffffe, 0x0, 0x9)
socket(0xa, 0x5, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose9/statistics/rx_packets\x00', 0x100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/57, 0x39) (async)
shutdown$auto(0x200000003, 0x2) (async)
io_uring_setup$auto(0x6, 0x0) (async)
openat$auto_fops_blob_file(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = wait4$auto(r0, &(0x7f00000000c0)=0x4, 0x4, &(0x7f0000000180)={{0x945, 0xae}, {0x4, 0x68888998}, 0x3, 0x8, 0x8, 0x9, 0x2, 0x123, 0x9, 0x6, 0x7, 0x4d3, 0x90a, 0x7, 0xb3e, 0x6})
wait4$auto(r2, 0xfffffffffffffffc, 0xe2, 0x0)
listen$auto(0x3, 0x81)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x40009, 0xd9, 0x200000087a, 0x4, 0x28002)
close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep\x00', 0xc0000, 0x0) (async)
sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) (async)
clock_settime$auto(0xfffffffb, 0x0)
getpid()
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x801, 0x100) (async)
capset$auto(0x0, 0x0) (async)
memfd_create$auto(&(0x7f0000000000)='A^^\x02\x00\xef\x97\x8aj\xa1\xf8\xd1\x8c\xb05\x03\\\xb2\xbfnA\x8cRR\x91\x10\xa3\x8dn0\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00', 0xff)
executing program 2:
getsockopt$auto(0xffffffffffffffff, 0x7fffffff, 0x7fffffff, &(0x7f00000000c0)='MAC80211_HWSIM\x00', 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f00000001c0), r0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22040, 0x75)
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x14, 0x0, 0xb11, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1000)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="1a"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x81, 0x7fd, 0x3, 0x9, 0x7, 0x7ff, 0x0, 0x4000000f}, 0x6f4)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x400, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xfff}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 2:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x6, 0x0)
r1 = socket(0x2, 0x6, 0x0)
sysfs$auto(0x2, 0x0, 0x0)
symlink$auto(&(0x7f00000000c0)='}*\x00', &(0x7f0000000340)='!q}\x00')
symlink$auto(&(0x7f0000000080)='})*.)]/file0\x00', &(0x7f00000006c0)='}*\x00')
symlink$auto(&(0x7f0000000d40)='!q}\x00', &(0x7f0000000d80)='})*.)]\x00')
symlink$auto(&(0x7f0000000380)='##\xf1\x00', &(0x7f0000000180)='})*.)]/file0\x00')
epoll_create$auto(0x4)
epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r2, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
epoll_ctl$auto(0x5, 0x3, r2, 0x0)
r3 = pipe$auto(&(0x7f0000000000)=r0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3)
sendmsg$auto_NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x3fc, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x301}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x9}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x6}, @NL80211_ATTR_BEACON_TAIL={0x2e0, 0xf, "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"}, @NL80211_ATTR_FRAME_MATCH={0xd7, 0x5b, "f88d9ab9e86bf7c970b0726d7b810e0816ac1033c99185c49e677d1997831c3e7ecbb34ce08b4a15f55b6e7f6af7a365008303aadc37c6776630a991c232562576115aa2dbe56a6e7dde125f52632a6b0084cd549fba2cb1dad69b0314082c1c6f1f5ef8856c2d145f77896abd1b00d8be6542bac0f6eb54e27b8eba40155c9c4d81d3b89eced87a169575f4f65b0a88f3d4919558db1cd6b0d0aecdd7baceac08fcc847f4736496d5077f41f5fd00e166f597dd439b35de9f37aea4bb2f020687b85dfb125c6d45419c1fe0c3f67ff714f5ba"}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x80}, 0x93d20e20ae6fb82c)
epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd)
executing program 2:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
socket(0x2, 0x1, 0x0)
listen$auto(0x3, 0x81)
close_range$auto(0x2, 0x8, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
open(&(0x7f0000000080)='.\x00', 0x0, 0x1f2)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
open(0x0, 0x22240, 0x155)
executing program 2:
sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, 0x0, 0x4010)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
symlink$auto(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x40102, 0x2)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0)
ioctl$auto_NVRAM_INIT(r0, 0x7040, 0x0)
shutdown$auto(0x200000003, 0x2)
bind$auto(0xffffffffffffffff, 0x0, 0x6b)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x100000000007, 0x8000000df, 0x12, r0, 0x8003)
r1 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x0, 0x0)
write$auto_event_trigger_fops_trace(r1, &(0x7f0000000080)="804ddd7576b13075faf042bf1adae7853c24d8b73b9bc0faf5b8325aca1e5503b27017d558c736865722298a33668e3ead141599fc5c1495bd7b3d782f2f1666fffb4b37aca9313bd2bc907602a528dc3cdfbe370a67106e48889d2285e6bf0d4c1729b7b43b5f", 0x67)
mremap$auto(0x0, 0xffffffffffffffff, 0x401, 0x3, 0x7fffffffb000)
prctl$auto(0x6, 0x1, 0x0, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sysinfo$auto(0x0)
r2 = socket(0x1f, 0x80d, 0x100)
setsockopt$auto(r2, 0x6, 0x2, 0x0, 0xfb3)
close_range$auto(r1, r2, 0x8)
r3 = bpf$auto(0x1f, 0xffffffffffffffff, 0x0)
io_uring_setup$auto(0x6, 0x0)
clock_nanosleep$auto(0x6, 0x1000, 0x0, 0x0)
mmap$auto(0x8000000000000, 0x2020009, 0x6, 0xeb0, r3, 0x100000)
socket(0x2, 0x3, 0x49e5)
getsockopt$auto(r2, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@in={0x2, 0x3}, 0x58)
executing program 32:
sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, 0x0, 0x4010)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
symlink$auto(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x40102, 0x2)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0)
ioctl$auto_NVRAM_INIT(r0, 0x7040, 0x0)
shutdown$auto(0x200000003, 0x2)
bind$auto(0xffffffffffffffff, 0x0, 0x6b)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x100000000007, 0x8000000df, 0x12, r0, 0x8003)
r1 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x0, 0x0)
write$auto_event_trigger_fops_trace(r1, &(0x7f0000000080)="804ddd7576b13075faf042bf1adae7853c24d8b73b9bc0faf5b8325aca1e5503b27017d558c736865722298a33668e3ead141599fc5c1495bd7b3d782f2f1666fffb4b37aca9313bd2bc907602a528dc3cdfbe370a67106e48889d2285e6bf0d4c1729b7b43b5f", 0x67)
mremap$auto(0x0, 0xffffffffffffffff, 0x401, 0x3, 0x7fffffffb000)
prctl$auto(0x6, 0x1, 0x0, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sysinfo$auto(0x0)
r2 = socket(0x1f, 0x80d, 0x100)
setsockopt$auto(r2, 0x6, 0x2, 0x0, 0xfb3)
close_range$auto(r1, r2, 0x8)
r3 = bpf$auto(0x1f, 0xffffffffffffffff, 0x0)
io_uring_setup$auto(0x6, 0x0)
clock_nanosleep$auto(0x6, 0x1000, 0x0, 0x0)
mmap$auto(0x8000000000000, 0x2020009, 0x6, 0xeb0, r3, 0x100000)
socket(0x2, 0x3, 0x49e5)
getsockopt$auto(r2, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@in={0x2, 0x3}, 0x58)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x1003, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sockstat\x00', 0x40102, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8201, 0x0)
r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xc}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_datapath\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r4 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
newfstatat$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)={0xc860, 0x10, 0xfffffffffffffffa, 0x1, <r5=>0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x9, 0x9, 0x1, 0x6, 0x81, 0x9, 0xfffffffffffffffb, 0xff, 0xfff}, 0xfffff651)
r6 = semctl$auto(0x0, 0x1, 0x2, 0x3)
r7 = clone3$auto(&(0x7f00000001c0)={0x3, 0x9, 0x1f, 0xe, 0x8, 0x4, 0x3, 0x4a37, 0x9, 0x80000001}, 0x2de5)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000001980)={0x2574, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x1d1, 0x3, 0x0, 0x1, [@generic="38716db1aba3726bf67e96992bc60f7ea8c459e18893cbc5488601fefbaabe419fedf695a7a5de8fdb6b2be64f9a2013d8bb760a629b7dba9c1cb4b3c1ddcec9bc18421c9aa11b9def4383ea7c392ddaca91a76fcecdf9867cb740a6a3e6f207b0d6e66eeedf01c861d68aeaa9ca830adbd3f9d5f7761b664edc5e32c1e75f5de612ae7eda4c405e1f6fff343bf2ff95b650ba968895a39fc2f91ded65be37d3de", @nested={0x12a, 0xd0, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @uid=r5}, @generic="3cdf4a65ea95032d9f190dcf2ac3ae6b3ac8d34d367db43b76df05fc704094390add547d39507ad8446de9b2be9fdc1ce402c521e95409", @generic="e41fe2bd50be871a2c66f37f521768812f3fc1898c30a0d5d219cd55342497efcd896ff9684e9edc6140910bb35220c7adc1dea4085728c836a9e96f6df2180d8e304377d6a224286ca48c4b", @generic="d0f3ea9b6b7ce8f4e0eb1a47e4c996e5c48ae0f304618932b944211d545e6360c899bacad698b9420b1902202a7423f12f81336177ac08722d0623529cbc23b3f422338cf9eca1a245bca21daa8e7753c7f99ebd7a51f8d946f8bf8f4055b9667cbfac35851e33483df39733c6ce373e92549cf600b0460686e3c01ff732170e648cbe", @typed={0x4, 0xa5}, @nested={0x4, 0x54}, @typed={0xc, 0xa6, 0x0, 0x0, @u64}, @nested={0x4, 0x134}]}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x4}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x118c, 0x2, 0x0, 0x1, [@nested={0x17e, 0xd2, 0x0, 0x1, [@nested={0x4, 0x97}, @generic="7d3e67a982d224c4a93ffdbe4ca8d006d3888a90a86120994462d7c4875eb1750289c85d1d41674993f63a9e13c8b1d32974d9dca31c52ce63ceca1b0f46a021cf6d5563fddf348308b0ba3d83a33b", @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x146, 0x0, 0x0, @pid=r6}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0xa}, @generic="866f9a3ed2cd183a299f79840f8dca67a5f2c8829026d44381649a1de11778d821c9ad4272bd93a205e7ed892be1d2ea971f240fce8071fc7aae73e8840494074662c8ee96e0d42b07099675379e15a71fe51d29bc7b2aecbc870587990898a2f463ce8d5534e667f22536a79dac6f6342fb82b3f5ab98a77f557aafa73dbbdd011927784d3824ed3df08647296cc445235e664c2cceb16efe5a216c85aedbc88275faeabaf02a30320269356368d4bc28a17c", @generic="33de8fee58dd4fcc4b7e11e44942c6f0d5c3026e556725227fe5749e6acfd5b07162f0b155aeec099853252fad41e6c084e286358af54ce748cbe10f637f4fb638e87054345bd37d7dcf94e028c109b1", @typed={0x8, 0x1e, 0x0, 0x0, @u32=0x7}]}, @generic="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", @typed={0x8, 0x118, 0x0, 0x0, @ipv4=@empty}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x11f8, 0x3, 0x0, 0x1, [@typed={0x6, 0x11c, 0x0, 0x0, @str='(\x00'}, @nested={0x102c, 0x1d, 0x0, 0x1, [@nested={0x4, 0x6c}, @nested={0x4, 0xb7}, @nested={0x4, 0x6d}, @typed={0x8, 0xfc, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x11a}, @nested={0x4, 0x61}, @nested={0x4, 0x123}, @generic="9a1bfc2008197b8d7e721ae9323216965190e67eb50fbfbef4f45af7a6c229670cd34ee433c373b9c61216dfa4eca08a1fba803f61badb7b15a7bb1ef7c3b6f66cb61e48f9387757bcf58ab5ab3d31282366545ca6f6184c59832bca1d1cec4725e1d3693e0bc78729f650d61e5f9a1fe4a44e667c1250e334b31b10d3348fff3a661fc0c26ebef9ea2bfc924f4e79e01177e32b3353954804877d4a4448769fa66d43440c2a239872b61d1d1c870c142a2cbdbe568e35999b4339b67e821c54cb3c1e7362979e4461680412809870315f477592f178f38b4bc29436398a8cc9e48fb1ffd164794ab8c57db9caeb1c00f2e55f48746ad8cc4cbc0ef1b23e3d833197d059b31e72c8aa3d8b1690ca90f59e67a1cfd6ebfe62282d0623525b2dd035d48521d97d82db4ad7e2929da98e630961aa7e6de63efae6637c38b52a70d8703a80598758d41e83d07f49ce7a2223e7a43324e48b09cfb276833e7d96046f0af1ae3cb338396c8148f8885f7b9fe5fcda153407904fdd59f9fba7d8c9557d63cc4368b62855c72cc83c5fe75ca8963bb81ef047746fe99cd5c6bcedcf461a30c1bf0ce02c8514c04fd42d49381eb291bd0c761c3b54ed1fe2cec9de61f62e6e98123bf4c201a86a513500a5b7faf3a4b87b93195f2fca8b60c421a0cc5b31173ac45c75fd071a1c0e224aab049fbbcbf13bebfc47262ace6205e094155526263b03e7f14fb8677f3d55addd76e995afc85ea4cb1517e733a0ab460593837d6fb16775d210ccadbd5e74ccdd9fcd253611e514819f7e0026b32106e75b5e972a58d4bf68991a48a86a5b1a74ef835314ef42d3c310d984331703afc4f2d2bc3ee3c43b3e5f188742cd5fb571942c5600f070644b73f62d60dc409f4b88e2acb94bbf49f77a4a16ef6fd99f9379537537e30ba52292a46b6fe8e734229e53154c59001829bfcc2bdf268b72f91ef76980851e6603f879df97eb19f24a3680439465274a82e3c37de470b8ec297881dad2bcff8f4d45a6355b8661093434b73559c4793e01d7591af588f2147019ac6ca9fb65f8af0a460ba29959669221a345280e35481520e099e0eb802268a1297f52e3f95a7626e853aab8f4d430facab5d2cd3bc03b695a795038b32cdf76c5e3c5e54458edc69c186f5294ad576969b1b4e711b778fbe937c5a46cecf2035b517c8aa0492940666704b75b0d58b173b5eae549f5f235d983c2be2d937a54e77023e0b39b263cc240b448f1b1109f64612b851149e1cd4e4104436ede49d9ebec0e64c92c30367430796ca78ec90451c4b0b73d93fef6b0283cee32b5af45c13aba7f7ee4a4328f7ea162640808fe8e025b2ec1d29e3c65fa289074786de91b7c1eaa992edbd1c01d77df1790b57ef5e5a61625b5b8a30cd3fe98e54966ddcbf2ed78b4c0b271c1f5f0bc44e0e4b634dd2e69074525351f065a77c6a29fb1d4350334855183690d007cafb55f835fd09718651eee1d77cf53a4e0b89a8b2bed6f6e4d61541f6a34e5d9145953f83aa7dd1d8941b956f5e0b826929c3fb2f62434a2f0d30dff9f25b89aca8501014729828c7f729299e2a7e5a55a6439834247237d4889150b091d0d246e053327fed156228b5585abf3ea809f2915cf50dec49a73119992e85fcd75f4264a5639a7701644e32331c64a7f1d9bd4861c7e4d5766b4f28a00a4d77be33f3f9ef6a78201001e7ebbbc44bcb9d14c0017d69c35558ef3cb930c45956ac6d76930bf015096d4c7ddf391a925e7b08d517fab0a09f42dc9b2bb48475d0e7bbce6cd08e7b9f3174cee90de807e9ca01b7b2e3effdc20b5624dcf0b3e9e15b6f2746910d91ff5689a2a7f073547e7f270349bded70539a25417f56c33c3ad2ada05e9edcf42604634e78b622c7884296ecc29ca6da5a750d88282f1c49d00835180f82f61563c4c43d838e82de03806a41aeceda22bc77b6585d9e8b98135529d992e95334ef719f0b909c57e65836d45d79ae4a9ede1963b66e4434c470b5ad233d76c38b990798184c8118ed296921a61133c5994f9eca0e52d4d722db283d4f6e2decef202414cfee77d367d5b3da16dd2194a8ff225e1d119e2f907fd6e193eb2287500978014051474d994d66f0946477999ec3da439910a23c71e55611c35e049af5bcea4e40645ba3ef8854b6aee9c7c4da9f3ad97cad334100ffd3e028084373d8dde7be4231f6d48a4993e4767ecd7faf59c131234595bd9f5655fd188c5515dcdebe0b97accad0f3f97acc3bf4e50cb9a354ebee9a73dd3ed6d75e5b2ac0d80a282d6b9dfc8a727e3a35bfa182298e1358c3f81c82abc523be0b4b5597a704c72c3dfe18473f66088d5d9335633b9c020be6567510d282fb24b5c829f2b931f51caff207d203b382c0032ec6f7289625dee33695492c7b1b38a315da06215838317856c1278c62f1a1257de392f66211515808ad613f287538a7faba7a1fa171ce515b13657c5d6e3879c972e0d02063a9b0a92ae98fcd4a70aca96539c8021090282885cc3d16e463cf036a3515f9607c183966f07e991b9dbc48a09e444fe4faa112c538617f1c9e0493f1a56216d921cd24677306503b26a70a77727ed2890ca63f105c60280c1a6f2b05034cf5b51fab49275c2140a1ebb549290c83609bfb2813c4fc727bc708e89f014f0abe9a157e52388eb07463c9a96cf6328fcb7d69d276a01cf5f04392d51e950385276861518f6d6f1a7ba0db2afdf1d4402fc2066f24df2b439a1b4dcb928ab699938c7a1a282a36ee4d839b051b2e49fd4e09faa310ba23dc0a7e9b92e4c4a8d05404bfe7d0b46fa3148656cb0f10cce62b4182e0639939b92580ac1d057458c4be7f9b2217b9679a30de23d5ad06e9a45bc96b41c8f5ac026cf6b3a252ba990f5151af6a368b5aa35fe21ca10e719811f5199480e827eec3d67edf77d325d222fd3f1758be34636801fef38f987f142cc22041331d75beb0af9d92174b6eef1c0da653503f4fc298e21d623c2279099e32b2af5dfbbd72f010c8f6925422e0d16dffd6c4a4b0f83d737b9af9009754b2d39c81c3b0843f633abdf7ae1fdbb3b23f153eab05bc35ca9546999ffd9afa2951f6166cf92c38301e652b9766f2e6d109d316e25dbf53088270f29c16cd5b9e93bbb9e5a824a4a95c87c94aa69d57c80096cdf2bf9355e8ffc889e6e88c6bada78042be0017f3c5ab91e3f9f0624c68f83737e955847bccb45a466436f83d9ab9cb1f8d39e9bd1b2d00d1529ca43f8fda3aac91d71212271d95a9c97c58ebe14782ca062b6e07bda4f1178a94a177fa234671ad3e495707391f16da224d3573a4bb80626c13b0b0d63a78cd02895f44907bd0fa5df7058bfb104a3b7c8526f12cadde8bd60b8ce98d55dc7596679f030ebedad8b4ec2c1c1bbe854f42e27720c65890e999ed22775a11703efab6096b9c0559a63b238a8f9e5154f225825a963b4bbb7dcb622c6dd6afb5b49500e7ffde71a16f94454d88e20a1a64b07376476cf4fb2aa74a31cecf8b5981ad65c80a38b92a0c2e36d5190d26313630e92d23457a794492dc99562c929d988bfc11831618e1c22b6f326f7686ccd1ebc4b27c3afea65cc880c815e7f215e8fefd81c12733d537a760d80aaeb805ec70e6917d89c4ddbd5c0aee2c95b9389e8e15393ff5f77aaaca8b011c33fbcc169b5197934bb636d53668028c97e53c1c5e8b01e3e34feda82bc3bdf19efa1025c3ec3dab0dfbbda9f009f96272beb29cf615848852dc08050730aedcdb99f6dae73e79841ca33fb2f0a3b0028afb2658751515645feda14f2dfd5524665da118be1ee2db8bed48672be9d42a2d3078a061149e583c8eabeacd9dfb0e7b38dbe83daeaf2aa27dcf9d1d17455e41e89c7e97a144d43733c9afebaf87a54a6a846a28f228ab96ba8cda905daa1fd704d44111e49b5c3884157ef0c8972e9cc6229b33861563893c85daee53af40d4a22e23d4d295cc4f41e0f41c1b994a86da9e3ca64a8c257ce1197d6c5c1a249267f2bc89d8bea20457b79d40b1e3ede52f90111ae9c2e0b048a57ab2be50bcbe17e5cc88e7ca8fda73af9c69a234b6d6de5973148c15cbaef2cd1781e8eedaf2704cbcc9f37c07d5aa9d94bc122107081c783ee5d206cc1b2ce233631eee43dde3148b8c5f28acda8e407e0c57aaf921a1c558a5aa88ca2fe0401d62debe2b6eef1aa3920d5373475ce7965e2175df4a676be5259805caf60b0a71e64a77785447ae724fcca1bdd98d5684894923611cd737ef510ec21b3cd82d638d1e16e1c6ba997f10225db4b0f060b7fe2aed38613bf6f9d36c8ac6a7f3f1e0d12d267dde528ac7ac1b75e3d53a9c1a203bec914aff06de975b1a02c14a7c984e4dea68d5e06c4b927e54c4de96ed47b43175275ac39e2395a6fbf41c8d9c5a69ea08108082b82c1d2c7ce8f9a20ad0e9f52dd7437af9d1914b53f58e70c0682d21b81ca8ecb74860964d4d0f843a748859e38d83085ccd936b7105dcb367e99faa3ec6b030ab06542f11fcc385c7acce743b224f9a09bfed13f27463116386e60ed442de5dce13d3b79e6c0a1d887be110c05d257f04ee8fcfa8616ef506d7904793e89e0d0461faaa1068a70e1011a2952743125b2285a0c950ce6119304728394bbe5c333facf4767321f8ee174b50d2428d3f67d3478df2fde991f9678ca1d2551a68d9dc680e71b4c75543debf7edc2ba1a6ba3ab8764b361851a4c7a931659a3e79e76dae8fec2f51368aea6837d5f324c35a4a853dbb29fb7f5b618da55e414c2c2f14a0183103348831fc9d230118a4d6a32deba2229ff6157f7cf9249936028961aeceb43707a3476f74ec73c67c4ee747296d92fccbba2e290196d0928e85f585b4e6a6521d755d9440b89b839823e65051c5f0170fd23579008a6b2f30e94a25668297b7a3cce812adcd291ab5ab2127c0d29ff9834d6ec7351a54dfebc2cd622bdee20bd78e0bfc99b2f9c14e9c05063bea4401763b858931832090e8f53636d6aee4d9662b5ca1874caed3327d50118bd5577d30a302490b7a2a1efda16c5a0b6544d1664536799fb5be17b1af71d4cef1f0144cbad26fc5c509e6547fe9453c7a8527f90f95a83950f264d6a705b1c6cebd41f76c2963fe77865eb7b9df6cd96ab79b7fdaebe0136fb88296b2782318f80ca2f7ab287a12ddba497ee6f7517aca0718067530a199ad25112a80f190404619ce39c8fdc3f7b32a5e2f522f5382cbdbf7b1aa511b60b5d845b9d94993b95a8d92562a02f9eeaa92939418a69e7c6ef26d0ff9744049fa7f990674644406f7cdfbbd224db87adafee1276e97e8703178ed3682c1994bbd74486d7ecb2a3fcf3a5301b44173e6296d28880edca00c801955fe49b15d360ff75bc3289f3fe6c3c2e74dd93cb0386d4b732610cb1e356f9ce5e93ab09ab4ec9aea6c132071389b34fd32d54a4d51200d41f04fac8646c9ac107ce3b8e271786a213966cb0bdaed33d5e65a18d5ff519a4e1322ea355ebb352073f05a40af4f49c8ebe711a2b4576db57501c4436cb5421d9d0f9c548b2769c16a5cef073981a9d5fb15a12219e1053d306819f85acb12cf4fa4685f3ec022492f7053e82c3f892d72f2bc79d8c086f5e330f5b29906041991d5f86e43c18b90c6de6bff8701bbab387acbc48a2e9182631578e1397e93b59b8fe60312bb2ed5aef491b294fe917b301eb5c146132e349754bbd3301c4002ce53048000d62157d85f48822c71ad055c6e5f2e65fca7192833c2c1d7912", @typed={0x8, 0x132, 0x0, 0x0, @u32=0x6}]}, @nested={0xb6, 0xf6, 0x0, 0x1, [@nested={0x4, 0x1b}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x4}, @nested={0x4, 0x94}, @typed={0x5, 0x81, 0x0, 0x0, @str='\x00'}, @generic="e477a48312d180938d3fabb8b54092add03bd1ed46b468b4ba67c3cbcb4cc3377fe55d46addac9f090e4cd61043594d3fe97645662f2dec1229b558d4425fb29e30d7526f85e4905bf6c0df1119225198aadc1a0911564064833bff488ecd415b2a923fdc468e914697f793c7129e6e8fce368d1026493c89689eacc88975cf5cc0cd5f62388d121aefeee8601c89086209ec17e6bde"]}, @typed={0x4, 0x7c}, @nested={0x102, 0x103, 0x0, 0x1, [@nested={0x4, 0xf6}, @nested={0x4, 0x53}, @nested={0x4, 0xda}, @nested={0x4, 0x14d}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x68}, @generic="e215add768179d5a79c21b09420ee4255b3da6aaac979b85cf67ba944f8dc84167cdd4359952b24e2abb89a352f3e2d2654a15510e045bad074ff6865bc1fa4e39b430c507ab4ea631c861a0f998391a97b7a27f90513ed4245d10895228dde746f25aa686e8448c011dee02af68200772756403351e63793de7700119c11eda13ddf62aeec4ee67b75a8d8f284f4c8feecdfb379d94b0904180e10e4ab09229d2203efd4762a8f762f4f45eddad048e85a5dbbe9c786fa2eeacccc8b8dbd8b500cc5a582bc64101c66392d2aa4836556e772be25977", @typed={0x8, 0x13e, 0x0, 0x0, @pid=r7}]}]}]}, 0x2574}}, 0xc000)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c00038008000c000400010012000100b39b28c10028a6b00485908286dd0000040002"], 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880)
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
pipe$auto(0x0)
r10 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
write$auto(r10, 0x0, 0xc3)
futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0xff)
ioctl$auto_def_blk_fops_fs(r1, 0x2201, 0x0)
pread64$auto(r0, 0x0, 0xf42c, 0x2)
executing program 0:
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f00000002c0)='nfsd\x00', 0xa07, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rename$auto(&(0x7f0000000080)='}[,&*}\x00', &(0x7f00000000c0)='}[,&*}\x00')
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/nfs/parameters/delay_retrans\x00', 0x102, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0)
read$auto(r0, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7ffc)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x602e00, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_clone(0x40200, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x6, 0x21)
listen$auto(0x3, 0x81)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0x4, 0x6, 0x1, 0xfffffffffffffffc, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
munmap$auto(0x5, 0x1)
connect$auto(0x3, 0x0, 0x54)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x80000005, 0x4, 0x4000000000df, 0x12, r0, 0x300000000000)
mincore$auto(0x1000, 0x8, 0x0)
sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0)
sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0)
sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, 0x0, 0x20000000)
socket(0x0, 0x800, 0x92d)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x10001, 0x3, 0x8001)
madvise$auto(0x0, 0x80000001, 0xa)
r1 = gettid()
process_vm_writev$auto(r1, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
ioctl$auto(0xc8, 0x5452, 0x0)
copy_file_range$auto(0x2, 0x0, 0x2, 0x0, 0x8001, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0xb812, 0x89ce, 0xc)
sendmsg$auto_NBD_CMD_CONNECT(r0, 0x0, 0x8880)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/fc_info\x00', 0x100, 0x0)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x101000, 0x0) (async)
r1 = gettid()
process_vm_readv$auto(r1, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0)
r2 = gettid()
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000000c0)={{@raw=0xc, 0x5102, 0x1c, 0x11, "42145273a77db2c23edadcbd82f4a2694040a5037a4c4dc937127e982ebe26fcaed79a50e3796dcc7552cb9f", @inferred=r1}, 0x5, 0x0, 0xb, @inferred=r2, @enumerated={0x400, 0xcd9, "17c10d72f706b83578b8095f1b6e63f67efd5a6220fa2bc06f10ec477fe609f483f89905906fc7938e2c2f530d8e816c430fb46356b55fb3d03fbde28c46cbf3", 0x33, 0x6}, "fd037139b37933ed9ea551a3c84280885fc3861371f2d34ebf4b28bf166bff8dca86e0cee162af8335638cd5ee76f960f601a87021305bcd49db3ecda3789a26"}) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x1a1080, 0x0)
settimeofday$auto(&(0x7f0000000180)={0x8, 0x1}, &(0x7f00000001c0)={0x1ad4, 0x5}) (async)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x80000000)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000280)=0xc986)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x39, 0x4, 0x806)
ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'})
ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x0, 0x2c, 0x0, 0x2})
openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/ns/cgroup\x00', 0x90200, 0x0)
executing program 33:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x80000000)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000280)=0xc986)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x39, 0x4, 0x806)
ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'})
ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x0, 0x2c, 0x0, 0x2})
openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/ns/cgroup\x00', 0x90200, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
setgroups$auto(0xe32, &(0x7f0000000040)=0x9)
madvise$auto(0x0, 0x53, 0x9) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) (async, rerun: 32)
pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x1, 0x40004, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x7, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x4]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)) (async, rerun: 32)
mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) (async)
ppoll$auto(&(0x7f0000000280)={<r0=>0xffffffffffffffff, 0x6, 0x9}, 0x9, &(0x7f00000002c0)={0x8000000000000001, 0x8001}, &(0x7f0000000300)={0x7ff}, 0x8) (async)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2) (async)
r2 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9) (async)
fallocate$auto(0x3, 0xfffffffc, 0xe, 0x8ecb)
r3 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000240), r2) (async)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x102, 0x0) (async, rerun: 64)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/stat\x00', 0x143000, 0x0) (async, rerun: 64)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x42220, 0x0) (async)
r4 = socket(0x10, 0x2, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64)
pipe$auto(&(0x7f0000001480)=<r5=>0xffffffffffffffff) (rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0xf, 0x3, 0x2)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x80) (async, rerun: 64)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (rerun: 64)
sendmsg$auto_NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x404c) (async, rerun: 32)
finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) (async, rerun: 32)
sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x40850)
executing program 1:
r0 = socket(0x10, 0x2, 0x9)
mmap$auto(0xfffffffffffffffd, 0x2000a, 0x10000000000df, 0xeb6, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0xa, 0x5, 0x0)
r2 = socket(0x1e, 0x6, 0x88)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0xfffffffd, 0x21, 0x0, 0x9)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x4, 0x2, 0x2, 0x7}, 0x54)
shutdown$auto(0xffffffffffffffff, 0x8)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(r2, 0x8, 0xfffffffe)
r3 = socket(0x2, 0x3, 0x100)
r4 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x20000000000008, 0x0, 0x1f, 0x7ff}, 0x80000d}, 0x3, 0x60000000)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0xa01, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r5 = socket(0x1e, 0x805, 0x0)
sysfs$auto(0x2, 0x10, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
fsconfig$auto(r5, 0x4, &(0x7f0000000000)='4\x93f\x06\x04\x00\x00', &(0x7f0000000040), 0x7f)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
ioctl$auto(0xc8, 0x400454cc, 0x5)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/midiC2D1\x00', 0x151000, 0x0)
sendmsg$auto_NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x1078, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_OBSS_PD={0x1058, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x9}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x1004, 0x5, "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"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x1}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x1}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0x28, 0x4, "44e64bfbbab0a5e82dc5daae8bcc7ba831a393af295087d3b240edf5f95511145ebc8c56"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x9d}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}]}, 0x1078}}, 0x24000000)
sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040080)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0xfe, 0x3}, 0x7}, 0x3, 0xcad8)
executing program 1:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x40000)
r0 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040), 0x14}, 0x6, &(0x7f0000000180), 0x5, 0x1001}, 0x5}, 0x2, 0x100)
getsockopt$auto(r0, 0x8, 0xb0d, &(0x7f0000000080)='\'\x0e^/[\x00', &(0x7f00000000c0)=0xe)
r1 = creat$auto(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$auto(0x9, &(0x7f0000000280)=@link_create={@prog_fd=r0, @target_fd=r1, 0x9, 0x1, @perf_event={0x2}}, 0x0)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="325f0320000000", @ANYBLOB="1200", @ANYBLOB="1600"], 0x1ac}}, 0x8000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000f7501fb7bd5d15b77a8295e434bb6c1549dc3922f74d71ce3448f51a2555b8458f5a52481ae59dddf7ac6200047c6e906fa7e642fb73a3dd140881e593785cbeabc4960000000000000000e79fcf8ef75e9d520b20e04f8ce5b3c308ae129e698e892e75ffa206000000a2ce0bf4c78565a8a060ca2e1dcda69bce8e96207e74097923e52b1af5371494de46d7a73ca3f37acfef55f340b902", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x4)
recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
executing program 1:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 1:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 34:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0xa6c}, 0x8000, 0x0, 0x6)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0x3, 0x15)
setrlimit$auto(0x1000000007, 0x0) (async)
setrlimit$auto(0x1000000007, 0x0)
executing program 5:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x1e, 0x5, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) (async)
r0 = bpf$auto(0x9, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socketpair$auto(0xfff, 0x5, 0x10, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00'})
sendmsg$auto_ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000600)={&(0x7f0000000080), 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) (async)
ioprio_set$auto(0x3, 0x0, 0x4b34) (async)
socket(0x15, 0x5, 0x0) (async)
madvise$auto(0x1ffff000, 0x7, 0x100000000) (async)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x6, 0xfffffffb)
mknod$auto(0x0, 0xc9, 0xc8)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x2664c0, 0x0) (async)
execve$auto(0x0, 0x0, 0x0)
mbind$auto(0x2, 0x100000004, 0x100000000, 0x0, 0x3ff, 0x24000)
shmget$auto(0xa, 0x10563, 0x568d1af2)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
io_uring_setup$auto(0x5, 0x0)
shmat$auto(0x0, 0x0, 0xfffffffa) (async)
mremap$auto(0x0, 0x4, 0x3fd6, 0x3, 0x20000000)
shmctl$auto(0x0, 0x0, 0xfffffffffffffffd)
open(0x0, 0x210800, 0xe1d2b27bdc14aaa8) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
mlock$auto(0xfbe8, 0x4)
executing program 5:
unshare$auto(0x40000080)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptye0\x00', 0x121200, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003e8, 0x14)
madvise$auto(0x0, 0xffffffffffff0005, 0x8)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x103400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f)
r2 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x40202, 0x0)
r3 = pidfd_open$auto(0x1, 0x0)
setns(r3, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
clock_getres$auto(0x5, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000280), r3)
recvmmsg$auto(r2, &(0x7f0000000200)={{&(0x7f0000000040)="4507b66c36452a47ed53d6a0d4ee1c242b50eb998ea974cc27124a26d9391eb70d834fceebe0a770c3252033350b74b5bf210bd4ebb0d906f5a3aac466718de83d24144fd6cdb269eec9b1c33391a92a1840a2b424d04303ba120bd62b233c95d7fc5d483c8d3cfde6af678c4f6e436b989978383da2586e78c616c9b29439e92e359440ad6356448e24e3d5275b880cd89717c5382d8cf3303ffa2e8d82e5b7c9aa5028a4bc7505a740b079ed8cedd4ce1270ffa83d3cfdb106ab75377feeacd1e60c0572fb126969e92f5335", 0x1, &(0x7f0000000180)={&(0x7f0000000140)="103ef13422702fb78fad6b8b7198d08a003394dc8ec06cea4f", 0x4}, 0x4, &(0x7f00000001c0)="358888fa5a2abd3605722cad7c5f38e0f706da486f710a4bbd3f0f2ad35b1011036477b061", 0x1ff, 0xfffffff9}, 0x8}, 0x5, 0x2, &(0x7f0000000240)={0xd8, 0x800})
executing program 5:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 5:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (fail_nth: 1)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 35:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (fail_nth: 1)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 3:
io_cancel$auto(0x8, 0x0, &(0x7f0000000140)={0x0, 0x100000001, 0x2, 0x6})
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x0, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, [0x1b16, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x94)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/net/bonding_masters\x00', 0x100, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa801, 0x0)
ioctl$auto(0x3, 0x80045518, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0)
ioctl$auto(0x3, 0xc0481273, 0x38)
ioctl$auto(0x3, 0x1276, 0x7)
executing program 6:
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fedd, 0x3, 0x6, 0x80000002, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x82)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130008000300", @ANYRES32, @ANYBLOB="0800610002"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async, rerun: 32)
io_uring_setup$auto(0x6, 0x0) (async)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73) (async)
socket(0x2, 0x1, 0x84) (async, rerun: 64)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
iopl$auto(0x3) (rerun: 64)
mmap$auto(0x0, 0x400005, 0xdf, 0x9f72, 0x5, 0x8000)
sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) (async)
read$auto(0xffffffffffffffff, 0x0, 0x80000001)
open(0x0, 0x2a4c0, 0x20) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) (async)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000380)="0cc1ea2f336f190d7826e46bcd67faebde0a7fe1730345df355440ebf3ecc867751ccb0abc426dbf08cea73392463555e4d6e2a5b2246c7e22b3b8a82fad9bdfa6ae538a8df8e671ada6bcb165738f3a8aade4ee4736fafc674bb4e01a291bcae11e08ad7c55f5cadfd50883a8ed176f11152424", 0x6, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xd}, 0xfff}, 0x5, 0x311)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x800}, 0x7}, 0x3, 0x0) (rerun: 32)
executing program 4:
r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x440200, 0x0)
r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0)
ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xf6}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x85}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x3}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xc}]}, @NL80211_ATTR_FILS_NONCES={0x75, 0xf3, "1c11ecd9970e67e4d40fc69b3cf07ff1b3544de65a6bbb8f228880b363db04fe56c0dad6506ef4279fcc2d81fb50fac4b49b0cf46aac3a1e3b80f978bf462b95281f8c3d40e30318c39c48b3c0d1baef067bf8e40628cb83f13eae2c56743fa9ef1d3b38a99de97a522fd6ef4978606b63"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40c0}, 0x2000805)
ioctl$auto_LOOP_CTL_GET_FREE(r1, 0x4c82, 0x0)
r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/dev_snmp6/veth1_to_bond\x00', 0x80180, 0x0)
r5 = semctl$auto(0x523, 0x3, 0x4, 0x7)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x26c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0x75, 0x1f, "aa75166a13596112e01d1659150b3fdca197630b1d349ba43d834caa49ea684aaebffac526e9e83a12591eb2ba61d43ea7fc728f73b7e576631aab55b8e0c9f5122bf1ebcd6ab3c3db162222e75b5398f50aa1683e79c8b2de8f4f30302ac9726401d7bd03a332cc64b9ef4eedd1ad71b5"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x72a4}, @NFC_ATTR_LLC_SDP={0x1d8, 0x13, 0x0, 0x1, [@nested={0x1d1, 0x13b, 0x0, 0x1, [@nested={0x4, 0x11e}, @generic="0777cb0fdb6614ffce8b4d461aa94883cd7b6763a7adc4f9a717478684c96cf66eba2d0b8c86", @typed={0xa, 0x23, 0x0, 0x0, @str=')#(\xc4%\x00'}, @typed={0x4, 0xa4}, @nested={0x4, 0x147}, @generic="db5a6a7663b6a4473c7d1e7774cc117b1bcd6a1d2dc078377b02208d0dbcf57a651fa5155fe3b48dc5e8ebd50ca958fbbe9d79d7b8ecb113e5cc774ed2db1031a7e9422fe8b4ed886c14f793a5bb82a372afb3e8b1729c0efdb9434bd142fbf631adf6908975fc54bd8b5f221e9a1f71b9b1de2d4e68ff2d7ddd7a833b58e08e1b1a53a9c1b018c5b7180d98700077e1a5e36631b52c8da79e13f8521a37a9b9e2f860fa83dc5956f1dc23644449aaf9b67a3c32da", @generic="a8887fc44731fd1faa3e52f12625640b51024e4ed017ce3c0b85521654187949e8ae0604c8cbbd10de61f64bc152338cf42c50cbf74f89ec80ad585f8310adaedd4a5e61fba69f183c8a8d9dd22e885ffb4c0715c0702b98fc3cfe97c49d89edb77cc65fce6fa785e0f6c87561d7009948f35bf3fdbe03af3c963775670966f29450e959ecbb1b6f67e60f169bf52dc726a3995fe1ef0704fecc7f685144ddbb47e78de21512dd8bb844205d5ec8dcb0685ecc2368e89c100270899828ec", @nested={0x4, 0x7b}, @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x124}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24008800}, 0x48005)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = io_uring_setup$auto(0xc, &(0x7f0000000600)={0x8, 0x180000, 0x6, 0x5c40, 0xff, 0x20000, <r8=>r2, [0x1000, 0xf2, 0x401], {0x3, 0x7fffffff, 0xa, 0x7, 0x10, 0x3, 0x7ff, 0x8, 0x4}, {0xfffffffd, 0x7, 0x7, 0x7fffffff, 0x2, 0x9, 0x8001, 0x3, 0x4}})
sendmsg$auto_NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x110, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xf1, 0xbd, "8cb284331f41af92bcaba07531342b34bfc7de75578aebfab51514549da81564348a3d0bc519cb0179022330dcad9c1305338c01ad3a0834e08e89dd5f913d5dc59c05450171b85efcfa88311637141e58e29c91b0a9809b7a3614fc4c01723e77f4651d1498f50e67baf4f0b68b189cf87ccf378feec00710458375bc3cd8e2e7cc45cfd65d78fc8497d234cfe68adb6b36def59f17758162288f3716d29d8ba67e3ad26108ba9ff5be09aad829428d94622a6dbc68fc7f9f7107a3f850146186411783ce28700db5938abb1cac114ad9a11e5dff0780a8e34396ffc42d7156ad6fef2198c3241e70484c0e7b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x110}}, 0x20048014)
sendmmsg$auto(r6, &(0x7f0000000a40)={{&(0x7f0000000880)="c8ab1d74e1780591b27536fbc7a4ed054b1a035a53cd8217e07b6254898e9a82365af7f5a06a3ceb48f8b68b5e41a6a5f7ea7a9717a2c953694e1a50750b0d5098f68c88ebcfb53ecbcf8c2af67319bd3aa6", 0x1, &(0x7f0000000980)={&(0x7f0000000900)="1cfcbbd7c3a0d1b27220d859397359cdd924f4d71c94bb6ca8169949765dc79496b4d349adea0d8266227572ab90aff963974eea161983b7c1115079c92909e290bf3ed91bbb98799469fc4add18366802264fd565a1b7dd9b149f2f29db3ba37d2ae1b9071fc1881455a0d192c3112e88853689042cee", 0x2}, 0x79, &(0x7f00000009c0)="efdd869f14a5eb598f89fdef63fd3f5671ea42e41a89a02c0dd77f5251f3c1e7b96611a78768f12f066ed502199b6d4cf08d52205ea560bb5864f3b4a6de80b020ca7f921c77899013817de381384d3d0839de", 0x8}, 0x7}, 0xa, 0x7)
r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000ac0), r7)
sendmsg$auto_NFC_CMD_DISABLE_SE(r7, &(0x7f0000002040)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002000)={&(0x7f0000000b00)={0x1500, r9, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x1bf, 0x13, 0x0, 0x1, [@generic="b5a93028647cc948654396626e76e4ea07a35f80abe6e024813eacb1c7dc92662186b1c84e2c9a22cbddfd09263823c00003add2fcac4e61264eb0d0e386ba0447718272c9f82e8881ea184c6c726e1d698f695ae73e44a321ad04742da7450c26dd8b90b8e74f6e7cf7a6b89e3b6ef1103f06e6cb67c77e9fd66fd6a54d3e58b12171aef3c868614a543d872d1fa15c1b45f23b34", @typed={0x57, 0x12, 0x0, 0x0, @binary="3c71924d0efc6da202998e280745a48875f04acd9625e2e8af9f60fed8744066421b027a80841c257e886535b8461093d7be8a3d2b625e52bfb32422ec592b25988fa950d43cdd158a353a961d35d4496e3887"}, @generic="517855dcbabc55df8fef813160cc0b86640b4d0c7cf6", @typed={0x4, 0x29}, @generic="b0ba94cd55f4c5a31acbb9b230a371fc25dd3e836da012cd6bd43efed66260ab7d8dda27a2a9184109cdcf6449195ae38198dd2655bc76e33b0ae80d8dbf18021d17cd27b845fd58c85ae3be54eef7d14eefb79cca6ad4a2e8e81061a3037b54a45a126555bc31097e5c3bea0e05cf2879fc2e4c5267fae82aea5eaade58bfe2b28ba4ca28c4385c5f09c8f1eb6fa1dbcd9d948ecc61eb4a28a1ae341360d52d856454470cec96cc2a93bae99f058218e6946df5"]}, @NFC_ATTR_LLC_SDP={0x1304, 0x13, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @pid=r5}, @generic="3688d1845da8951c51b120ad4955c652b9c067cbb57d575f9efeff688de6cdda0cd92cd150066c29effa16584af436f9105fa3a52a7ad41049d2f117183e2706c72cbd6432e0da5694220462", @nested={0x23, 0x13c, 0x0, 0x1, [@typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@mcast2}, @generic="3893d3bfc2aa91", @nested={0x4, 0xc7}]}, @generic="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", @nested={0x280, 0x94, 0x0, 0x1, [@generic="a51e2533e04ec9895d0837fd9d8062c010fb80affe17bd69ef5870d8d2427cee31577319995ce9c7aec1146e6ca51518f3334a586d4a58d5a7f244aac2759be6e8cb51880d911b0ebefde35fd2c4c18fe7066ccdfabd848e0dd92ba63dcc4855e1a89dd04be42b52215a8f", @nested={0x4, 0x7d}, @typed={0x8, 0x7f, 0x0, 0x0, @fd=r4}, @typed={0x4, 0x90}, @nested={0x4, 0xf}, @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="716000b609e86e7eb2634f7346d82dd9e0b47e4380fec2a7aa08b849b3fa1bd0dd89a11f7dab135e840c4bd4bc3524aca5d938940a61bd41bb70b258bb3d2eece98edd1932a9e5e8f890dfbae70cd7c388a7240d15bb13c358137246a6c22d0bab460ae041a47dc2df6aba0093ad5f77d6d83bbd", @generic="ea13e1e4a9df7d72c1382302916fcd1ec2d5b8142a1dbdc9c0f180e678e80000ef8e30e90ceb7e71d742c9b610915917001431a4f0e04e7f4d494bf09f7ec384b0c742215bb2da3f2eeee3e75e1ad7cde9317cf414911e435485b63596d9dd0d9bdb62a3dd3f47c5c364b5c07d6866030b93fccf84d8a2c3140325d05630412956d7d4ca0ebedd8977c729720441bedc82b9de408bd7f6e09d85aa90583956aeac815e774780bf610b8c4bc6b780d945588076288e8d012a630f906e7dc8b641adb99988de3f01436d698b73daa148795e350d8dba6905f4cda3ba069dcae0037d6d38", @typed={0x8, 0x52, 0x0, 0x0, @pid=r5}, @generic="0603a215645985a28ca9c72a7401923390353359178be19bd6bf9da854c173ba7c629148531a61aa504a30a29c4e1486bc3c6d646c94ad551ded3947fb344b01b3ae11bbd7110fb153eef80be93da1bcc871c04073e21fb53af40ec407dcaff756cac0ece5dd65c64c81dc7618fb77fadf584e79f484a7b32cead163d4816298204f2d2892f299699d7f95275222dc517793fd8a7e37"]}, @generic="db9921b8712c4187"]}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7fff}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0xffffb3bf}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x9}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x38}]}, 0x1500}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r10 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000020c0), r8)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x24, r10, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x9}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x90c7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$auto_NL80211_CMD_TDLS_OPER(r7, &(0x7f0000002600)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002200)={0x3a4, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x100}, @NL80211_ATTR_FILS_CACHE_ID={0xac, 0xfd, "a69e3773297a672e3cc4978a49ebfee2709e127ccf3a18ae51c058db24769ad2f7be817fd348fa2bb981a08cfcbe7bfa7847af6b72aee4ffee752aa3567c1475317db1133bf054d3314dfd898a688ae185607c524a19f524bfd9e77c91f8a40bdad8d93cea79c3cc3262162fa3bee630ff10befcab6635e4e01459042cbbb94860f5da58bedf59cacb8ef25606d34c8e7fc25cf682caf3c3bb33f9829a60053cdc5bc114c9866b51"}, @NL80211_ATTR_MPATH_NEXT_HOP={0x60, 0x1a, "09bb2d4be93c57cd2ac4e77998782b8c26821725c886d13fe61141ec9e2e029b347e1b8dd8462ee46d902d20e458b90b2bc27174f50994b2ee6c3636ef9e89325fbb9170e55ba3f86b3b9d234842d914ade7eb7c209e2c5044c5d2b5"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfff}, @NL80211_ATTR_EMA_RNR_ELEMS={0x123, 0x145, 0x0, 0x1, [@generic="9435e0081e48ed0dd83493f6ef418ec4c027d8839529568e27dfe8f79416d2636918e6c6cbb69a081f8fdd0462b2f3e648a3745c3f4a82d7350180a4fb904b692c01c878aaceb6674ab0", @generic="a98fd30e79486ba62a8d53df878139f6c865a8857da9f8d040b71cd35487397adb34c350b2f7df2906149d2e73b3a315037cfb13fef0274feedcfe36d66fe9d1bdf9c38f2ce0a6a32593d06861d097b863ce9a4389fedb086570512d0a666c9447ecf745e60701d27b4419887efb10ab9b33fb872804f4737046b276bcf09e30fcd281ea72ab1f963fdaa0fb08d82a5e9dbc167d820145d9a9776bbb1ce59a1c1de1434d10d1810b5cbaebc7b2d8aa9870da70423bcfdf583a0b4a360337cc8ee81cfa3317f87efaae2cf858759c2dd8df246e1efe"]}, @NL80211_ATTR_REG_RULES={0x139, 0x22, 0x0, 0x1, [@nested={0x1c, 0xfe, 0x0, 0x1, [@typed={0xc, 0x95, 0x0, 0x0, @u64=0x4}, @typed={0xc, 0x83, 0x0, 0x0, @u64=0x7}]}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@private1}, @generic="fc59aef7f55aca20a7b4d9e8b5cd254eb87572d0c6a5970d42394d8b7d52eef5bee031533e7f929ae466d680a8ce6860f8740cf4ffa8524e89b1c1c6721021aef30e548dce5f6b439dbb8a28c88acab6eb09a13bfa", @generic="1ec45b56d2c065b967d8d326086c14a2bc31e93c886d539facaf5925b70e6b67c77e20fef3e56ffbfc8fc3ede408ab129f3a387372624cc6b0dd3ef2656316c51789244d9fa1058d5faf7106cff6c33daaf195a8b1ea8b15656eb51bc73d8840a53f61184e760c75b3e3d1e5787deba0f342ac78261a297b8309d7a22049ce437bef2212d6f1cb13aa8a8766ab48eaa23412b69ff4fcc6f8c94460d9920643a4a9763b18", @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x3a}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x800}, 0x20008800)
r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002680), r8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000026c0)={'pim6reg\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002700)={'pim6reg0\x00', <r13=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r7, &(0x7f0000002840)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0x98, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x1}, @ETHTOOL_A_MODULE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x34}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0xf5}, @ETHTOOL_A_MODULE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x841}, 0x20000000)
r14 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000028c0), r2)
sendmsg$auto_NETDEV_CMD_NAPI_GET2(r2, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x24, r14, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r13}, @NETDEV_A_NAPI_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000084)
ustat$auto(0x0, &(0x7f00000029c0)={0x1, 0x7fffffffffffffff, "9968858a5e88", "72c0da88392b"})
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r8, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x48, r11, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x8}, @ETHTOOL_A_MODULE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40)
mmap$auto(0x8, 0x2, 0x0, 0x971, r0, 0x6)
sendmsg$auto_NET_SHAPER_CMD_SET(r2, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r13}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x8}, @NET_SHAPER_A_BURST={0xc, 0x5, 0x2}, @NET_SHAPER_A_BW_MIN={0xc, 0x3, 0x40}]}, 0x3c}}, 0x40090)
executing program 4:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r1=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async)
socket(0x2, 0x3, 0x100) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async, rerun: 64)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10) (async)
eventfd$auto(0x3)
eventfd$auto(0x0) (async, rerun: 32)
pipe$auto(&(0x7f0000001000)=0x1) (rerun: 32)
r2 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4}, 0xa3) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
socket(0x15, 0x5, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
gettid() (async, rerun: 64)
mlockall$auto(0x7) (async, rerun: 64)
fallocate$auto(0x1, 0xa, 0xfbf9, 0x3)
executing program 6:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
arch_prctl$auto(0x5005, 0x9) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) (async)
ioctl$auto(0x3, 0x401070cd, 0x38)
executing program 6:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
connect$auto(0x3, 0x0, 0x54)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1)
io_uring_register$auto(0x2, 0x17, &(0x7f00000000c0), 0x1)
mincore$auto(0x1000, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async)
mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x3, 0x8000)
ioctl$auto(0x3, 0x8108551b, 0x1) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
capget$auto(0x0, 0xfffffffffffffffe) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x6, 0x0) (async)
getsockopt$auto(0x4, 0x10d, 0x2, 0xfffffffffffffffc, 0x0) (async)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffffa, 0x1, @inferred, @enumerated={0xefff, 0xfff, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a61b7382f979a0ff0b3d9581c0861bbe128e249d9f994ef5578e78507637044b73a4c4b5700", 0x9, 0x3ff}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"})
executing program 4:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)
executing program 7:
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8880)
process_vm_readv$auto(0xbd4, &(0x7f0000000040)={0x0}, 0x3ff, 0x0, 0x46, 0x0) (async)
process_vm_readv$auto(0xbd4, &(0x7f0000000040)={0x0}, 0x3ff, 0x0, 0x46, 0x0)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe) (async)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000002140), 0x80, 0x0)
ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000002180)={@padding, 0x3})
socket(0xb, 0x2, 0x5682)
r2 = socket(0x2, 0x1, 0x0)
memfd_create$auto(0x0, 0xe) (async)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
ioctl$auto(0x3, 0x4008550d, 0x1)
setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0x81) (async)
setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0x81)
executing program 3:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff})
r0 = socket(0x10, 0x2, 0x6)
mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0x401, 0x1)
r1 = socket(0x10, 0x2, 0x0)
close_range$auto(r1, r1, 0x85)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x6a)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x448141, 0x0)
sendfile$auto(r0, r2, 0x0, 0x3)
unshare$auto(0x40000080)
executing program 7:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:13/path\x00', 0x0, 0x0) (async)
mmap$auto(0x10000000, 0xe, 0x10000000000dc, 0xfffffffffffffe3b, 0x401, 0x8000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x80402, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0)
write$auto(0x3, 0x0, 0x100082)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f0000000280)="c282", 0x2) (async)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x4fffd) (async)
ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) (async)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
write$auto(r1, 0x0, 0x6) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
io_uring_setup$auto(0xa, 0x0) (async)
open(0x0, 0xa240, 0x15e) (async)
close_range$auto(0x0, 0x1c94, 0x2) (async)
socket(0x2, 0x5, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001100), 0x165300, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
inotify_init1$auto(0x3000000000000) (async)
inotify_add_watch$auto(0x4, 0x0, 0x9) (async)
inotify_add_watch$auto(0x4, 0x0, 0x80000000)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4106, 0xffffffffffffff57) (async)
r3 = socket(0xa, 0x801, 0x106)
openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f00000010c0), 0x4200, 0x0)
setsockopt$auto(r3, 0x1, 0x1, &(0x7f0000000000)='\x98\x00', 0xb559)
listen$auto(0x3, 0x81) (async)
getsockopt$auto(r3, 0x10, 0x1000004, 0xfffffffffffffffe, 0xfffffffffffffffd)
executing program 3:
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mlock$auto(0x3, 0x9)
executing program 4:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
read$auto(0x3, 0x0, 0x400000)
unshare$auto(0x40) (async)
unshare$auto(0x40)
executing program 7:
mmap$auto(0x1, 0x4020009, 0xdf, 0xeb5, 0x401, 0xaf8f)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x48, 0x0)
r0 = socket(0xa, 0x3, 0x73)
setsockopt$auto(r0, 0xff, 0x7, 0x0, 0xfff)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x88)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x801)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
socket(0x10, 0x3, 0x6)
socketpair$auto(0x1e, 0x5, 0xda0, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xa005)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r1 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6)
executing program 6:
r0 = socket(0x9, 0x3, 0x3)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) (async)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0)
setfsuid$auto(0xee01) (async)
r2 = setfsuid$auto(0xee01)
geteuid() (async)
r3 = geteuid()
sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001940)={&(0x7f0000000000), 0xc, &(0x7f0000001900)={&(0x7f0000000080)={0x1850, r1, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x3d, 0x5, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @generic="a720a2522c01086bc76e872ee085fea5ce3c9c5441150e1885970021b550171785f7d43d3d"]}, @TIPC_NLA_NAME_TABLE={0x274, 0x8, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @uid=r2}, @nested={0x8, 0x11a, 0x0, 0x1, [@typed={0x4, 0x5b}]}, @nested={0xd8, 0x101, 0x0, 0x1, [@nested={0x4, 0x13b}, @generic="2b73a6e93fe4fc51e51627b7b03ae9df668a398cef3f7a459898fa84ba173971b4ddb41a934c9f3433520311dacd113f5353e9f9922cada81d2d4c7c7712921cb51986f8026e8de77a3f29e1e47643b3440330fe4210", @typed={0x8, 0x57, 0x0, 0x0, @u32=0x3}, @typed={0x14, 0x138, 0x0, 0x0, @ipv6=@loopback}, @generic="68d2e17119256cc3aa6bfc56ced635d5a151fb1d743eefcfc311b4dac75d781a18359cf0d97659a55823c394c1331068e890d956c17e60aa2e40d8ef466f576464e2d99132db58ac0fd85f9c4d88c5f6e8fd5a3f98e032a8db42c89b9fdb"]}, @nested={0xc, 0xc7, 0x0, 0x1, [@typed={0x8, 0xf5, 0x0, 0x0, @u32=0x9}]}, @nested={0x179, 0x60, 0x0, 0x1, [@generic="0e8bf969cf99048dea561239906d52eca79d4a93d8b5d8c41848342f7da04b4effd4a37a6b6c338d655e95ac2882e244a0ef722bfcca5ae1882c2acfd86f9b2a375837ea3d6b09941cbadfed329d0bb30a1a", @nested={0x4, 0x17}, @generic="aee862b1963bf40d3df6f9daa87c", @generic="d988fd864c859fc25c480dc525f3337e346119a888341e30e8087551113b921bd1ca1b97c0e2688118e3953726743f8ff475af1bcc1b483342b3b67d635f", @typed={0xc, 0x1e, 0x0, 0x0, @str='-}[:\xd4+*\x00'}, @generic="6ba46b96473c8d5cff9eb35dbdf7bbc5c4839824f72e53cca466eaee380ef7e146ea8f2a2a0a7f780e9b860b4d1df8455bf8445654bb41874916c67bb7326d9066257e41aef9a1873d2bc72907464968a26a621e1ae5e0065e926c9388034033d86e76ec789a03f911f4c5c61bad078b46b772d702df73cee95a0bf0a26b8546014b78963399e4be3a6d61469261a60cb6695a9ebd3082b24bf6ee14739b3e857a6f52d58ff45e6293ae6af3b73c181a9825d3f5af4b1f9ff20472d1884b133bb4e1c6", @nested={0x4, 0xce}]}]}, @TIPC_NLA_LINK={0x3b, 0x4, 0x0, 0x1, [@nested={0x10, 0xde, 0x0, 0x1, [@nested={0x4, 0x90}, @typed={0x8, 0x11b, 0x0, 0x0, @uid=r3}]}, @generic="8e6aa00c5c776b4050fc55d4f94045bd9265b0cb4ccf", @generic="98be183ddf9ccdc0e808c92649be0eb2cd"]}, @TIPC_NLA_SOCK={0x1cc, 0x2, 0x0, 0x1, [@nested={0x1c7, 0x1f, 0x0, 0x1, [@generic="bf5d2630e6ed1ddff6269fdb5380f6555d0d7c9cee9282bae6070af2a2e525df23106570df1d7e83c59c9b066ba45b8666443f56e28f19e71c202d6e49f07ad7c8cef0336e2dc5dd745474bf3c701231575eb226a1ecd066d8b7f41e473a6a24fe9d891c5d7bd0b2209a6880e0cfccebd904fefe11d6a303832095ef8197f9a2c550a2cd1ee649d74b3c5d0ef355a8576fc0b480b361a5d33fec6a8db8", @generic="e71758c65a1e842a4ba054868fe2a16b1ae2b1e777c6df2556634a37dcd3ca854988938233a23accb1d07f8af2424fe54e42458cdf7cdc9f7849355be7bd383c7a592952c98b250adbc3d8742c64da6171214f843d4c675687caafc3944649ed02afe8f00c2864bf694b477f135e603be16b56ad17d6a1ddb549cd26d916eb9ac1f354b8294a92206d43c401ad68a9a977470793c3abc1e56db4d5a9fd4dea461591", @typed={0x5, 0x146, 0x0, 0x0, @str='\x00'}, @generic="f577dca3f00ba62dccd637b0990cacc7282afc2d01be3a68afdcd5871db86efc63da621eb3236cc013a73a61c57d98010ae898c9493c43f70cddb1149c528240edcfa4e23bdfc9933956f4d005f44e64719b1234867ecc33c5d9e9fc86d488490c6a7a186013f0c4145c10bdef72a646d9598e90", @typed={0x8, 0x39, 0x0, 0x0, @uid=0xee01}]}]}, @TIPC_NLA_NODE={0x130a, 0x6, 0x0, 0x1, [@nested={0x1d7, 0x111, 0x0, 0x1, [@typed={0x4, 0x75}, @generic="41c7197eef99ee6a64f118c12036087acd7538771d6637a55c00dcda95019adb7cba77f8f9c04d23331948f699c97cae102ce07e86ba69f596618333555dbfc6a688454508f09b8dd10aa37b66a37a293f98183595ef16d333567e350babafcd2c0ad0414f0a9891d56d0242cb5e26242134442c36fa3e49e3100337f4611f8e8f00e5ec8e978c7be69f", @typed={0x5, 0xaf, 0x0, 0x0, @str='\x00'}, @generic="b9f7b786", @typed={0x48, 0xda, 0x0, 0x0, @binary="f857fb1c39a66aae52832b953a35d773ca28a5c6069ee9d88786a2310419bf8a1581e0f3bf90003615bced837de9dddcaf26399c1e4a98313ffb0c55c5ebabe07c9c914b"}, @nested={0x4, 0xad}, @generic="a9ef23d3c0e43d0b554e10757e51364b60c3f55baaca66665fcd90ba5462f9fd09d20016fdccfa510972720dd05c648843eac1cbfdbd84d93c29c2ab627e528087b4ea8a8509d14f468f0072255ba782c19a2718aa95c9463d03e358d5533ffbe9c41742470126a2187b939ca1c5b51f090f080d7627ee66e03a6f8bb6d069a47512bfe32899e55f45d06a5154c838a1cac9380748ed8052434e605453d564b7dcfb62b09feeebf1b9c7cf602b27421e157fe5ffc6a4b044b627e26d3403fe29e810dd1b485f2ff3be6432057589630e76e37371f53ff59e95de7cde3e38eda00767cb61fc9255ef8d6582a626"]}, @nested={0x100c, 0x8e, 0x0, 0x1, [@typed={0x5, 0x53, 0x0, 0x0, @str='\x00'}, @generic="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"]}, @generic="7b93407443879e77b6df054db9935b1f2780a2e29804269684ce1ef85047fee90ffff6aeead796a17a563c553b73feb72b01d5f2081e98fe9e625bd3040a9e103ad801daf84b3bd4d2c044d69be13fe304ba3bb18653f256e59ad55709d45467107e7c99b936357b4c441495d03a67c36a5e87123a16bf0e9fbaaf3e893b21934b1e1e7804ed3e56e801aac954527406bfe3923621700290077e4fbfa76f8220ab59c0e4b8e05ed590b0972b5411ccda5933cdb7be69042383f3", @generic="a6c91b7cdd454acb2c217172c1051cf6589baad33b69608f95a89cceed3132ef75bac3dea5af0d885bff7f9b2d4e63a184c99da1815e57e20ac6224ebed69ceb60b52d984da1138e8d88fffef1f8a9f46e7727e853f6e47b28b6c6e1e74ee37611b6fabb92238471"]}, @TIPC_NLA_MON={0x73, 0x9, 0x0, 0x1, [@typed={0xc, 0x3b, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="8c13448c33ebf548235707aadd0e9f64b402ba969af5c92c6d9c4bf0dd0208490d1aa795b9e637d8227a2730baeebab8ac4b77e6501ea897b70b5f37698b7058bd9cedf555599adc9345c6f2b866b4eaecd88999f282609799464c"]}]}, 0x1850}, 0x1, 0x0, 0x0, 0x2404a885}, 0x40000)
r4 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000001980)='/sys/kernel/tracing/trace_marker_raw\x00', 0x8200, 0x0)
write$auto_tracing_mark_raw_fops_trace(r4, &(0x7f00000019c0)="4fee5b2d11d6e2ae6ef419e19b1333a831627f5054bfe374f5e6b49a2ea8dcf64b9bf17f98242fb32bac27c33dda5b82818b993182e100fbaac650e58fd4c1b65839a28ecba9323093ce029ad5109659db851a91b848affff2ece9320cf41af899254219736625e558e98142c739a5b7469cdf1508a78501777294bfd9370cf897a1fa83dc835c7832faefc3f26b69e92d4907331d199d44a4becd799cd16485f561b970d74d4cd8593c4096556dba0a6e960e68f774eecf4ea4d6b166050ac85447f4cdf093c44a79d552ed7ee022fdb5", 0xd1)
umount2$auto(&(0x7f0000001ac0)='TIPCv2\x00', 0x1) (async)
umount2$auto(&(0x7f0000001ac0)='TIPCv2\x00', 0x1)
r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001b00), 0x501000, 0x0)
r6 = socket(0x2c, 0x6, 0x1)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/ptyu2\x00', 0x200000, 0x0)
ioctl$auto_TIOCCBRK2(r7, 0x5428, 0x0) (async)
ioctl$auto_TIOCCBRK2(r7, 0x5428, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b80), r6) (async)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b80), r6)
setsockopt$auto(r4, 0x7, 0xf9, &(0x7f0000001bc0)='\x00', 0x0)
madvise$auto(0x0, 0x1, 0x80)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001c00)='/sys/kernel/debug/block/nbd10/rqos/wbt/id\x00', 0x40, 0x0)
r9 = eventfd$auto(0x6)
openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000001c40), 0x8000, 0x0) (async)
r10 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000001c40), 0x8000, 0x0)
close_range$auto(r9, r10, 0xfffffff8)
keyctl$auto(0x6, r2, r3, 0xee00, 0x10001)
openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/ieee80211/phy16/short_retry_limit\x00', 0x40800, 0x0) (async)
r11 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/ieee80211/phy16/short_retry_limit\x00', 0x40800, 0x0)
io_uring_setup$auto(0x6, &(0x7f0000001cc0)={0x26, 0x72, 0x2e4, 0x5, 0x9e0, 0x9, r11, [0x1, 0x9, 0xd5e], {0x9, 0xf, 0x5f24e83c, 0xff, 0x28000, 0x751, 0x5, 0x5}, {0x1, 0x1, 0x80000000, 0x7f, 0x0, 0x4, 0x9, 0x7f, 0x5}})
statmount$auto(&(0x7f0000001d40)={0x2, @inferred=r5, 0x10000, 0x7, 0xffffffffffff3001}, &(0x7f0000001d80)={0x3, 0x780, 0x3, 0x2, 0x9, 0x5, 0xffff, 0x80, 0x3, 0x4, 0xe, 0x3, 0x6, 0x2, 0x6, 0x4, 0x6, 0x7, 0x9, 0x4, 0x40, 0xa7, 0xd675, 0x7, 0x6, 0x7, [0x1, 0x2, 0x0, 0x3, 0x50e8, 0x5, 0x7, 0x9, 0x7, 0x9, 0x7, 0x0, 0x6, 0x7ff, 0x1, 0x1, 0x7, 0x8, 0x1, 0x101, 0x3, 0xeac, 0x0, 0x3, 0xa6db, 0x5, 0x9, 0x9, 0x7fffffff, 0x6, 0x6, 0x2, 0x1000000000000, 0x8, 0x7fffffffffffffff, 0x9ed, 0x49cd, 0x100000001, 0x4, 0x5, 0x400, 0x7fffffffffffffff, 0x8000000000000000, 0x9, 0x9, 0x5], "833f1358ba"}, 0x9, 0x3)
r12 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/ttyprintk\x00', 0x90842, 0x0)
ioctl$auto_TIOCCONS2(r12, 0x541d, 0x0) (async)
ioctl$auto_TIOCCONS2(r12, 0x541d, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002000)={'vlan0\x00'})
open(&(0x7f0000002040)='./file0\x00', 0x400, 0x0) (async)
r13 = open(&(0x7f0000002040)='./file0\x00', 0x400, 0x0)
statmount$auto(&(0x7f0000002080)={0x2, @inferred=r13, 0x10000, 0xc, 0x80}, &(0x7f00000020c0)={0xfff, 0x5, 0x3, 0x4, 0x6, 0x3, 0x9, 0x6b5, 0x400, 0x64c, 0x1535, 0x1, 0x2, 0x308a, 0x36, 0x9, 0x3, 0x2, 0x0, 0x1, 0x1, 0xb, 0x6e8, 0x9, 0x3, 0x4, [0x6, 0x18704338, 0x6, 0x9e, 0x5, 0x5, 0x80, 0xfffffffffffff77d, 0x8001, 0x1, 0x0, 0x10001, 0x6, 0x7fffffff, 0x2, 0x58, 0x9481, 0x1, 0x100000001, 0x4, 0x96, 0x2e, 0x4, 0x2, 0xffffffffffffffff, 0x7ff, 0x4, 0x0, 0x1, 0x800000000, 0x2, 0x8f, 0x0, 0x1, 0xee, 0xfff, 0xaa, 0x3, 0x1, 0x10001, 0x7, 0x9, 0x50, 0x1, 0x2, 0x1], "0cb70e4e0e087c3df96548121a232e1b9b2cd2942669df202d88b5a22adeb573541a4a9d8a9f7d94890839d46deb3c9b451b099086523a0b0e36af75be62ea81159fbc238ef801b64cb70a6f1ae296fcbe0071e763523bb05f3cbf386c887d6317aff976fb02fcc8ed9f3e85f14516fcbdb6eb4e348943a10f624ebad9d4c8c2a6f582666f8096fb929ade690073eed9a3976f0decd0db1195dd87733c53843393924237abc9194d6584b8cd4018241da0"}, 0x5, 0x3)
sendmsg$auto_NL80211_CMD_START_NAN(r13, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0)
sendfile$auto(r10, r0, &(0x7f0000002480)=0x100, 0x6)
executing program 3:
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x4000000)
r0 = open$auto(&(0x7f0000000140)='./file0\x00', 0x3, 0xfffd)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyw5\x00', 0xc8340, 0x0)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
ioctl$auto(r1, 0x5459, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$auto_ima_measure_policy_ops_ima_fs(r2, &(0x7f0000000000)='#', 0x1)
r3 = socket(0x1e, 0x1, 0x0)
getsockname$auto(r3, &(0x7f0000000000), 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
socket(0x1e, 0x4, 0x0)
connect$auto(r3, &(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0x10)
ioctl$auto(0x3, 0x5404, 0x38)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000001480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001440)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="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"], 0x11c0}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000880)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/dma_heap/system/uevent\x00', 0x1e1042, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)=""/158, 0x9e)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r6, 0x1b, 0x70bd26, 0x25dfdbfa, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0xc}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590820806"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
io_uring_setup$auto(0x1, 0x0)
executing program 4:
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9f4e79f46ea89b5}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0x1, 0x5, 0x0) (async)
r1 = socket(0x1, 0x5, 0x0)
bind$auto(r1, 0x0, 0x6b)
listen$auto(0x3, 0x81) (async)
listen$auto(0x3, 0x81)
select$auto(0x1ff, 0x0, &(0x7f0000000100)={[0xf, 0x200, 0x800000000000008, 0x5, 0x9, 0x7, 0x3, 0x2, 0x40009, 0x20000005e582972, 0x4000000000000000, 0x14, 0x5, 0x8, 0x8, 0x80000000003]}, 0x0, 0x0)
executing program 7:
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041)
r1 = socket(0x2a, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000080), 0x6b)
connect$auto(0x3, &(0x7f00000000c0)=@can, 0x57)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
fcntl$auto(0xffffffffffffffff, 0x401, 0x5)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40)
write$auto(0x3, 0x0, 0xfffffdef)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0x9f, 0x9b72, 0xffffffffffffffff, 0x0)
sysfs$auto(0x2, 0x10000000000002d, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r1)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
r2 = gettid()
mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000)
sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x8000)
unshare$auto(0x40000080)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0x20200, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x19, 0x401, 0x8000)
rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00')
process_vm_readv$auto(r2, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x3, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm0p/sub3/hw_params\x00', 0x224600, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
executing program 6:
r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x61a842, 0x0)
read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50)
write$auto(r0, &(0x7f0000000000)='/proc/self/environ\x00', 0x5)
openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x61a842, 0x0) (async)
read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50) (async)
write$auto(r0, &(0x7f0000000000)='/proc/self/environ\x00', 0x5) (async)
executing program 3:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop15/queue/scheduler\x00', 0x0, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop15/queue/scheduler\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zram0\x00', 0x1c1740, 0x0) (async)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zram0\x00', 0x1c1740, 0x0)
r1 = socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0x4000eb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0x4000eb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0) (async)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0x2b6ac0, 0x50)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x1, 0x5c, 0xfffffffffffffffa, 0x8000)
socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/cgroup/delegate\x00', 0x80, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/17, 0x11)
write$auto(r3, 0x0, 0xff)
r5 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r5, 0x29, 0x11, &(0x7f0000000040)='!\x00', 0x1ff)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x0, 0x100) (async)
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x0, 0x100)
mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffefffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3)
membarrier$auto(0x0, 0x100000000, 0x8000000000000001)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0xfffffdf3) (async)
write$auto(0x3, 0x0, 0xfffffdf3)
r6 = socket(0x1d, 0x1, 0x6)
r7 = getsockopt$auto(r6, 0x6a, 0x5, 0x0, 0x0)
getcwd$auto(&(0x7f0000000040)='\x00', 0x3)
close_range$auto(r7, r0, 0x4) (async)
close_range$auto(r7, r0, 0x4)
executing program 6:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: bisecting 50 programs
bisect: split chunks (needed=false): <49>
bisect: split chunk #0 of len 49 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m48s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 16, 27, 27, 6, 17, 30, 20, 5, 5, 5, 18, 27, 30, 30, 8, 17, 12, 18, 28, 17, 29, 6, 5, 29, 40, 30, 17, 29, 40, 6, 40, 18]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="325f0320000000", @ANYBLOB="1200", @ANYBLOB="1600"], 0x1ac}}, 0x8000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000f7501fb7bd5d15b77a8295e434bb6c1549dc3922f74d71ce3448f51a2555b8458f5a52481ae59dddf7ac6200047c6e906fa7e642fb73a3dd140881e593785cbeabc4960000000000000000e79fcf8ef75e9d520b20e04f8ce5b3c308ae129e698e892e75ffa206000000a2ce0bf4c78565a8a060ca2e1dcda69bce8e96207e74097923e52b1af5371494de46d7a73ca3f37acfef55f340b902", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x4)
recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
executing program 1:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 1:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 34:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0xa6c}, 0x8000, 0x0, 0x6)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0x3, 0x15)
setrlimit$auto(0x1000000007, 0x0) (async)
setrlimit$auto(0x1000000007, 0x0)
executing program 5:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x1e, 0x5, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) (async)
r0 = bpf$auto(0x9, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socketpair$auto(0xfff, 0x5, 0x10, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00'})
sendmsg$auto_ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000600)={&(0x7f0000000080), 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) (async)
ioprio_set$auto(0x3, 0x0, 0x4b34) (async)
socket(0x15, 0x5, 0x0) (async)
madvise$auto(0x1ffff000, 0x7, 0x100000000) (async)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x6, 0xfffffffb)
mknod$auto(0x0, 0xc9, 0xc8)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x2664c0, 0x0) (async)
execve$auto(0x0, 0x0, 0x0)
mbind$auto(0x2, 0x100000004, 0x100000000, 0x0, 0x3ff, 0x24000)
shmget$auto(0xa, 0x10563, 0x568d1af2)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
io_uring_setup$auto(0x5, 0x0)
shmat$auto(0x0, 0x0, 0xfffffffa) (async)
mremap$auto(0x0, 0x4, 0x3fd6, 0x3, 0x20000000)
shmctl$auto(0x0, 0x0, 0xfffffffffffffffd)
open(0x0, 0x210800, 0xe1d2b27bdc14aaa8) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
mlock$auto(0xfbe8, 0x4)
executing program 5:
unshare$auto(0x40000080)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptye0\x00', 0x121200, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003e8, 0x14)
madvise$auto(0x0, 0xffffffffffff0005, 0x8)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x103400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f)
r2 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x40202, 0x0)
r3 = pidfd_open$auto(0x1, 0x0)
setns(r3, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
clock_getres$auto(0x5, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000280), r3)
recvmmsg$auto(r2, &(0x7f0000000200)={{&(0x7f0000000040)="4507b66c36452a47ed53d6a0d4ee1c242b50eb998ea974cc27124a26d9391eb70d834fceebe0a770c3252033350b74b5bf210bd4ebb0d906f5a3aac466718de83d24144fd6cdb269eec9b1c33391a92a1840a2b424d04303ba120bd62b233c95d7fc5d483c8d3cfde6af678c4f6e436b989978383da2586e78c616c9b29439e92e359440ad6356448e24e3d5275b880cd89717c5382d8cf3303ffa2e8d82e5b7c9aa5028a4bc7505a740b079ed8cedd4ce1270ffa83d3cfdb106ab75377feeacd1e60c0572fb126969e92f5335", 0x1, &(0x7f0000000180)={&(0x7f0000000140)="103ef13422702fb78fad6b8b7198d08a003394dc8ec06cea4f", 0x4}, 0x4, &(0x7f00000001c0)="358888fa5a2abd3605722cad7c5f38e0f706da486f710a4bbd3f0f2ad35b1011036477b061", 0x1ff, 0xfffffff9}, 0x8}, 0x5, 0x2, &(0x7f0000000240)={0xd8, 0x800})
executing program 5:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 5:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (fail_nth: 1)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 35:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (fail_nth: 1)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 3:
io_cancel$auto(0x8, 0x0, &(0x7f0000000140)={0x0, 0x100000001, 0x2, 0x6})
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x0, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, [0x1b16, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x94)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/net/bonding_masters\x00', 0x100, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa801, 0x0)
ioctl$auto(0x3, 0x80045518, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0)
ioctl$auto(0x3, 0xc0481273, 0x38)
ioctl$auto(0x3, 0x1276, 0x7)
executing program 6:
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fedd, 0x3, 0x6, 0x80000002, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x82)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130008000300", @ANYRES32, @ANYBLOB="0800610002"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async, rerun: 32)
io_uring_setup$auto(0x6, 0x0) (async)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73) (async)
socket(0x2, 0x1, 0x84) (async, rerun: 64)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
iopl$auto(0x3) (rerun: 64)
mmap$auto(0x0, 0x400005, 0xdf, 0x9f72, 0x5, 0x8000)
sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) (async)
read$auto(0xffffffffffffffff, 0x0, 0x80000001)
open(0x0, 0x2a4c0, 0x20) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) (async)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000380)="0cc1ea2f336f190d7826e46bcd67faebde0a7fe1730345df355440ebf3ecc867751ccb0abc426dbf08cea73392463555e4d6e2a5b2246c7e22b3b8a82fad9bdfa6ae538a8df8e671ada6bcb165738f3a8aade4ee4736fafc674bb4e01a291bcae11e08ad7c55f5cadfd50883a8ed176f11152424", 0x6, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xd}, 0xfff}, 0x5, 0x311)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x800}, 0x7}, 0x3, 0x0) (rerun: 32)
executing program 4:
r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x440200, 0x0)
r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0)
ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xf6}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x85}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x3}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xc}]}, @NL80211_ATTR_FILS_NONCES={0x75, 0xf3, "1c11ecd9970e67e4d40fc69b3cf07ff1b3544de65a6bbb8f228880b363db04fe56c0dad6506ef4279fcc2d81fb50fac4b49b0cf46aac3a1e3b80f978bf462b95281f8c3d40e30318c39c48b3c0d1baef067bf8e40628cb83f13eae2c56743fa9ef1d3b38a99de97a522fd6ef4978606b63"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40c0}, 0x2000805)
ioctl$auto_LOOP_CTL_GET_FREE(r1, 0x4c82, 0x0)
r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/dev_snmp6/veth1_to_bond\x00', 0x80180, 0x0)
r5 = semctl$auto(0x523, 0x3, 0x4, 0x7)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x26c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0x75, 0x1f, "aa75166a13596112e01d1659150b3fdca197630b1d349ba43d834caa49ea684aaebffac526e9e83a12591eb2ba61d43ea7fc728f73b7e576631aab55b8e0c9f5122bf1ebcd6ab3c3db162222e75b5398f50aa1683e79c8b2de8f4f30302ac9726401d7bd03a332cc64b9ef4eedd1ad71b5"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x72a4}, @NFC_ATTR_LLC_SDP={0x1d8, 0x13, 0x0, 0x1, [@nested={0x1d1, 0x13b, 0x0, 0x1, [@nested={0x4, 0x11e}, @generic="0777cb0fdb6614ffce8b4d461aa94883cd7b6763a7adc4f9a717478684c96cf66eba2d0b8c86", @typed={0xa, 0x23, 0x0, 0x0, @str=')#(\xc4%\x00'}, @typed={0x4, 0xa4}, @nested={0x4, 0x147}, @generic="db5a6a7663b6a4473c7d1e7774cc117b1bcd6a1d2dc078377b02208d0dbcf57a651fa5155fe3b48dc5e8ebd50ca958fbbe9d79d7b8ecb113e5cc774ed2db1031a7e9422fe8b4ed886c14f793a5bb82a372afb3e8b1729c0efdb9434bd142fbf631adf6908975fc54bd8b5f221e9a1f71b9b1de2d4e68ff2d7ddd7a833b58e08e1b1a53a9c1b018c5b7180d98700077e1a5e36631b52c8da79e13f8521a37a9b9e2f860fa83dc5956f1dc23644449aaf9b67a3c32da", @generic="a8887fc44731fd1faa3e52f12625640b51024e4ed017ce3c0b85521654187949e8ae0604c8cbbd10de61f64bc152338cf42c50cbf74f89ec80ad585f8310adaedd4a5e61fba69f183c8a8d9dd22e885ffb4c0715c0702b98fc3cfe97c49d89edb77cc65fce6fa785e0f6c87561d7009948f35bf3fdbe03af3c963775670966f29450e959ecbb1b6f67e60f169bf52dc726a3995fe1ef0704fecc7f685144ddbb47e78de21512dd8bb844205d5ec8dcb0685ecc2368e89c100270899828ec", @nested={0x4, 0x7b}, @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x124}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24008800}, 0x48005)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = io_uring_setup$auto(0xc, &(0x7f0000000600)={0x8, 0x180000, 0x6, 0x5c40, 0xff, 0x20000, <r8=>r2, [0x1000, 0xf2, 0x401], {0x3, 0x7fffffff, 0xa, 0x7, 0x10, 0x3, 0x7ff, 0x8, 0x4}, {0xfffffffd, 0x7, 0x7, 0x7fffffff, 0x2, 0x9, 0x8001, 0x3, 0x4}})
sendmsg$auto_NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x110, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xf1, 0xbd, "8cb284331f41af92bcaba07531342b34bfc7de75578aebfab51514549da81564348a3d0bc519cb0179022330dcad9c1305338c01ad3a0834e08e89dd5f913d5dc59c05450171b85efcfa88311637141e58e29c91b0a9809b7a3614fc4c01723e77f4651d1498f50e67baf4f0b68b189cf87ccf378feec00710458375bc3cd8e2e7cc45cfd65d78fc8497d234cfe68adb6b36def59f17758162288f3716d29d8ba67e3ad26108ba9ff5be09aad829428d94622a6dbc68fc7f9f7107a3f850146186411783ce28700db5938abb1cac114ad9a11e5dff0780a8e34396ffc42d7156ad6fef2198c3241e70484c0e7b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x110}}, 0x20048014)
sendmmsg$auto(r6, &(0x7f0000000a40)={{&(0x7f0000000880)="c8ab1d74e1780591b27536fbc7a4ed054b1a035a53cd8217e07b6254898e9a82365af7f5a06a3ceb48f8b68b5e41a6a5f7ea7a9717a2c953694e1a50750b0d5098f68c88ebcfb53ecbcf8c2af67319bd3aa6", 0x1, &(0x7f0000000980)={&(0x7f0000000900)="1cfcbbd7c3a0d1b27220d859397359cdd924f4d71c94bb6ca8169949765dc79496b4d349adea0d8266227572ab90aff963974eea161983b7c1115079c92909e290bf3ed91bbb98799469fc4add18366802264fd565a1b7dd9b149f2f29db3ba37d2ae1b9071fc1881455a0d192c3112e88853689042cee", 0x2}, 0x79, &(0x7f00000009c0)="efdd869f14a5eb598f89fdef63fd3f5671ea42e41a89a02c0dd77f5251f3c1e7b96611a78768f12f066ed502199b6d4cf08d52205ea560bb5864f3b4a6de80b020ca7f921c77899013817de381384d3d0839de", 0x8}, 0x7}, 0xa, 0x7)
r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000ac0), r7)
sendmsg$auto_NFC_CMD_DISABLE_SE(r7, &(0x7f0000002040)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002000)={&(0x7f0000000b00)={0x1500, r9, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x1bf, 0x13, 0x0, 0x1, [@generic="b5a93028647cc948654396626e76e4ea07a35f80abe6e024813eacb1c7dc92662186b1c84e2c9a22cbddfd09263823c00003add2fcac4e61264eb0d0e386ba0447718272c9f82e8881ea184c6c726e1d698f695ae73e44a321ad04742da7450c26dd8b90b8e74f6e7cf7a6b89e3b6ef1103f06e6cb67c77e9fd66fd6a54d3e58b12171aef3c868614a543d872d1fa15c1b45f23b34", @typed={0x57, 0x12, 0x0, 0x0, @binary="3c71924d0efc6da202998e280745a48875f04acd9625e2e8af9f60fed8744066421b027a80841c257e886535b8461093d7be8a3d2b625e52bfb32422ec592b25988fa950d43cdd158a353a961d35d4496e3887"}, @generic="517855dcbabc55df8fef813160cc0b86640b4d0c7cf6", @typed={0x4, 0x29}, @generic="b0ba94cd55f4c5a31acbb9b230a371fc25dd3e836da012cd6bd43efed66260ab7d8dda27a2a9184109cdcf6449195ae38198dd2655bc76e33b0ae80d8dbf18021d17cd27b845fd58c85ae3be54eef7d14eefb79cca6ad4a2e8e81061a3037b54a45a126555bc31097e5c3bea0e05cf2879fc2e4c5267fae82aea5eaade58bfe2b28ba4ca28c4385c5f09c8f1eb6fa1dbcd9d948ecc61eb4a28a1ae341360d52d856454470cec96cc2a93bae99f058218e6946df5"]}, @NFC_ATTR_LLC_SDP={0x1304, 0x13, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @pid=r5}, @generic="3688d1845da8951c51b120ad4955c652b9c067cbb57d575f9efeff688de6cdda0cd92cd150066c29effa16584af436f9105fa3a52a7ad41049d2f117183e2706c72cbd6432e0da5694220462", @nested={0x23, 0x13c, 0x0, 0x1, [@typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@mcast2}, @generic="3893d3bfc2aa91", @nested={0x4, 0xc7}]}, @generic="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", @nested={0x280, 0x94, 0x0, 0x1, [@generic="a51e2533e04ec9895d0837fd9d8062c010fb80affe17bd69ef5870d8d2427cee31577319995ce9c7aec1146e6ca51518f3334a586d4a58d5a7f244aac2759be6e8cb51880d911b0ebefde35fd2c4c18fe7066ccdfabd848e0dd92ba63dcc4855e1a89dd04be42b52215a8f", @nested={0x4, 0x7d}, @typed={0x8, 0x7f, 0x0, 0x0, @fd=r4}, @typed={0x4, 0x90}, @nested={0x4, 0xf}, @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="716000b609e86e7eb2634f7346d82dd9e0b47e4380fec2a7aa08b849b3fa1bd0dd89a11f7dab135e840c4bd4bc3524aca5d938940a61bd41bb70b258bb3d2eece98edd1932a9e5e8f890dfbae70cd7c388a7240d15bb13c358137246a6c22d0bab460ae041a47dc2df6aba0093ad5f77d6d83bbd", @generic="ea13e1e4a9df7d72c1382302916fcd1ec2d5b8142a1dbdc9c0f180e678e80000ef8e30e90ceb7e71d742c9b610915917001431a4f0e04e7f4d494bf09f7ec384b0c742215bb2da3f2eeee3e75e1ad7cde9317cf414911e435485b63596d9dd0d9bdb62a3dd3f47c5c364b5c07d6866030b93fccf84d8a2c3140325d05630412956d7d4ca0ebedd8977c729720441bedc82b9de408bd7f6e09d85aa90583956aeac815e774780bf610b8c4bc6b780d945588076288e8d012a630f906e7dc8b641adb99988de3f01436d698b73daa148795e350d8dba6905f4cda3ba069dcae0037d6d38", @typed={0x8, 0x52, 0x0, 0x0, @pid=r5}, @generic="0603a215645985a28ca9c72a7401923390353359178be19bd6bf9da854c173ba7c629148531a61aa504a30a29c4e1486bc3c6d646c94ad551ded3947fb344b01b3ae11bbd7110fb153eef80be93da1bcc871c04073e21fb53af40ec407dcaff756cac0ece5dd65c64c81dc7618fb77fadf584e79f484a7b32cead163d4816298204f2d2892f299699d7f95275222dc517793fd8a7e37"]}, @generic="db9921b8712c4187"]}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7fff}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0xffffb3bf}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x9}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x38}]}, 0x1500}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r10 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000020c0), r8)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x24, r10, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x9}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x90c7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$auto_NL80211_CMD_TDLS_OPER(r7, &(0x7f0000002600)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002200)={0x3a4, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x100}, @NL80211_ATTR_FILS_CACHE_ID={0xac, 0xfd, "a69e3773297a672e3cc4978a49ebfee2709e127ccf3a18ae51c058db24769ad2f7be817fd348fa2bb981a08cfcbe7bfa7847af6b72aee4ffee752aa3567c1475317db1133bf054d3314dfd898a688ae185607c524a19f524bfd9e77c91f8a40bdad8d93cea79c3cc3262162fa3bee630ff10befcab6635e4e01459042cbbb94860f5da58bedf59cacb8ef25606d34c8e7fc25cf682caf3c3bb33f9829a60053cdc5bc114c9866b51"}, @NL80211_ATTR_MPATH_NEXT_HOP={0x60, 0x1a, "09bb2d4be93c57cd2ac4e77998782b8c26821725c886d13fe61141ec9e2e029b347e1b8dd8462ee46d902d20e458b90b2bc27174f50994b2ee6c3636ef9e89325fbb9170e55ba3f86b3b9d234842d914ade7eb7c209e2c5044c5d2b5"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfff}, @NL80211_ATTR_EMA_RNR_ELEMS={0x123, 0x145, 0x0, 0x1, [@generic="9435e0081e48ed0dd83493f6ef418ec4c027d8839529568e27dfe8f79416d2636918e6c6cbb69a081f8fdd0462b2f3e648a3745c3f4a82d7350180a4fb904b692c01c878aaceb6674ab0", @generic="a98fd30e79486ba62a8d53df878139f6c865a8857da9f8d040b71cd35487397adb34c350b2f7df2906149d2e73b3a315037cfb13fef0274feedcfe36d66fe9d1bdf9c38f2ce0a6a32593d06861d097b863ce9a4389fedb086570512d0a666c9447ecf745e60701d27b4419887efb10ab9b33fb872804f4737046b276bcf09e30fcd281ea72ab1f963fdaa0fb08d82a5e9dbc167d820145d9a9776bbb1ce59a1c1de1434d10d1810b5cbaebc7b2d8aa9870da70423bcfdf583a0b4a360337cc8ee81cfa3317f87efaae2cf858759c2dd8df246e1efe"]}, @NL80211_ATTR_REG_RULES={0x139, 0x22, 0x0, 0x1, [@nested={0x1c, 0xfe, 0x0, 0x1, [@typed={0xc, 0x95, 0x0, 0x0, @u64=0x4}, @typed={0xc, 0x83, 0x0, 0x0, @u64=0x7}]}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@private1}, @generic="fc59aef7f55aca20a7b4d9e8b5cd254eb87572d0c6a5970d42394d8b7d52eef5bee031533e7f929ae466d680a8ce6860f8740cf4ffa8524e89b1c1c6721021aef30e548dce5f6b439dbb8a28c88acab6eb09a13bfa", @generic="1ec45b56d2c065b967d8d326086c14a2bc31e93c886d539facaf5925b70e6b67c77e20fef3e56ffbfc8fc3ede408ab129f3a387372624cc6b0dd3ef2656316c51789244d9fa1058d5faf7106cff6c33daaf195a8b1ea8b15656eb51bc73d8840a53f61184e760c75b3e3d1e5787deba0f342ac78261a297b8309d7a22049ce437bef2212d6f1cb13aa8a8766ab48eaa23412b69ff4fcc6f8c94460d9920643a4a9763b18", @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x3a}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x800}, 0x20008800)
r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002680), r8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000026c0)={'pim6reg\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002700)={'pim6reg0\x00', <r13=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r7, &(0x7f0000002840)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0x98, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x1}, @ETHTOOL_A_MODULE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x34}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0xf5}, @ETHTOOL_A_MODULE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x841}, 0x20000000)
r14 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000028c0), r2)
sendmsg$auto_NETDEV_CMD_NAPI_GET2(r2, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x24, r14, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r13}, @NETDEV_A_NAPI_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000084)
ustat$auto(0x0, &(0x7f00000029c0)={0x1, 0x7fffffffffffffff, "9968858a5e88", "72c0da88392b"})
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r8, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x48, r11, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x8}, @ETHTOOL_A_MODULE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40)
mmap$auto(0x8, 0x2, 0x0, 0x971, r0, 0x6)
sendmsg$auto_NET_SHAPER_CMD_SET(r2, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r13}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x8}, @NET_SHAPER_A_BURST={0xc, 0x5, 0x2}, @NET_SHAPER_A_BW_MIN={0xc, 0x3, 0x40}]}, 0x3c}}, 0x40090)
executing program 4:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r1=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async)
socket(0x2, 0x3, 0x100) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async, rerun: 64)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10) (async)
eventfd$auto(0x3)
eventfd$auto(0x0) (async, rerun: 32)
pipe$auto(&(0x7f0000001000)=0x1) (rerun: 32)
r2 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4}, 0xa3) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
socket(0x15, 0x5, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
gettid() (async, rerun: 64)
mlockall$auto(0x7) (async, rerun: 64)
fallocate$auto(0x1, 0xa, 0xfbf9, 0x3)
executing program 6:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
arch_prctl$auto(0x5005, 0x9) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) (async)
ioctl$auto(0x3, 0x401070cd, 0x38)
executing program 6:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
connect$auto(0x3, 0x0, 0x54)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1)
io_uring_register$auto(0x2, 0x17, &(0x7f00000000c0), 0x1)
mincore$auto(0x1000, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async)
mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x3, 0x8000)
ioctl$auto(0x3, 0x8108551b, 0x1) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
capget$auto(0x0, 0xfffffffffffffffe) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x6, 0x0) (async)
getsockopt$auto(0x4, 0x10d, 0x2, 0xfffffffffffffffc, 0x0) (async)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffffa, 0x1, @inferred, @enumerated={0xefff, 0xfff, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a61b7382f979a0ff0b3d9581c0861bbe128e249d9f994ef5578e78507637044b73a4c4b5700", 0x9, 0x3ff}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"})
executing program 4:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)
executing program 7:
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8880)
process_vm_readv$auto(0xbd4, &(0x7f0000000040)={0x0}, 0x3ff, 0x0, 0x46, 0x0) (async)
process_vm_readv$auto(0xbd4, &(0x7f0000000040)={0x0}, 0x3ff, 0x0, 0x46, 0x0)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe) (async)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000002140), 0x80, 0x0)
ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000002180)={@padding, 0x3})
socket(0xb, 0x2, 0x5682)
r2 = socket(0x2, 0x1, 0x0)
memfd_create$auto(0x0, 0xe) (async)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
ioctl$auto(0x3, 0x4008550d, 0x1)
setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0x81) (async)
setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0x81)
executing program 3:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff})
r0 = socket(0x10, 0x2, 0x6)
mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0x401, 0x1)
r1 = socket(0x10, 0x2, 0x0)
close_range$auto(r1, r1, 0x85)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x6a)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x448141, 0x0)
sendfile$auto(r0, r2, 0x0, 0x3)
unshare$auto(0x40000080)
executing program 7:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:13/path\x00', 0x0, 0x0) (async)
mmap$auto(0x10000000, 0xe, 0x10000000000dc, 0xfffffffffffffe3b, 0x401, 0x8000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x80402, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0)
write$auto(0x3, 0x0, 0x100082)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f0000000280)="c282", 0x2) (async)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x4fffd) (async)
ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) (async)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
write$auto(r1, 0x0, 0x6) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
io_uring_setup$auto(0xa, 0x0) (async)
open(0x0, 0xa240, 0x15e) (async)
close_range$auto(0x0, 0x1c94, 0x2) (async)
socket(0x2, 0x5, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001100), 0x165300, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
inotify_init1$auto(0x3000000000000) (async)
inotify_add_watch$auto(0x4, 0x0, 0x9) (async)
inotify_add_watch$auto(0x4, 0x0, 0x80000000)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4106, 0xffffffffffffff57) (async)
r3 = socket(0xa, 0x801, 0x106)
openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f00000010c0), 0x4200, 0x0)
setsockopt$auto(r3, 0x1, 0x1, &(0x7f0000000000)='\x98\x00', 0xb559)
listen$auto(0x3, 0x81) (async)
getsockopt$auto(r3, 0x10, 0x1000004, 0xfffffffffffffffe, 0xfffffffffffffffd)
executing program 3:
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mlock$auto(0x3, 0x9)
executing program 4:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
read$auto(0x3, 0x0, 0x400000)
unshare$auto(0x40) (async)
unshare$auto(0x40)
executing program 7:
mmap$auto(0x1, 0x4020009, 0xdf, 0xeb5, 0x401, 0xaf8f)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x48, 0x0)
r0 = socket(0xa, 0x3, 0x73)
setsockopt$auto(r0, 0xff, 0x7, 0x0, 0xfff)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x88)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x801)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
socket(0x10, 0x3, 0x6)
socketpair$auto(0x1e, 0x5, 0xda0, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xa005)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r1 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6)
executing program 6:
r0 = socket(0x9, 0x3, 0x3)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) (async)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0)
setfsuid$auto(0xee01) (async)
r2 = setfsuid$auto(0xee01)
geteuid() (async)
r3 = geteuid()
sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001940)={&(0x7f0000000000), 0xc, &(0x7f0000001900)={&(0x7f0000000080)={0x1850, r1, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x3d, 0x5, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @generic="a720a2522c01086bc76e872ee085fea5ce3c9c5441150e1885970021b550171785f7d43d3d"]}, @TIPC_NLA_NAME_TABLE={0x274, 0x8, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @uid=r2}, @nested={0x8, 0x11a, 0x0, 0x1, [@typed={0x4, 0x5b}]}, @nested={0xd8, 0x101, 0x0, 0x1, [@nested={0x4, 0x13b}, @generic="2b73a6e93fe4fc51e51627b7b03ae9df668a398cef3f7a459898fa84ba173971b4ddb41a934c9f3433520311dacd113f5353e9f9922cada81d2d4c7c7712921cb51986f8026e8de77a3f29e1e47643b3440330fe4210", @typed={0x8, 0x57, 0x0, 0x0, @u32=0x3}, @typed={0x14, 0x138, 0x0, 0x0, @ipv6=@loopback}, @generic="68d2e17119256cc3aa6bfc56ced635d5a151fb1d743eefcfc311b4dac75d781a18359cf0d97659a55823c394c1331068e890d956c17e60aa2e40d8ef466f576464e2d99132db58ac0fd85f9c4d88c5f6e8fd5a3f98e032a8db42c89b9fdb"]}, @nested={0xc, 0xc7, 0x0, 0x1, [@typed={0x8, 0xf5, 0x0, 0x0, @u32=0x9}]}, @nested={0x179, 0x60, 0x0, 0x1, [@generic="0e8bf969cf99048dea561239906d52eca79d4a93d8b5d8c41848342f7da04b4effd4a37a6b6c338d655e95ac2882e244a0ef722bfcca5ae1882c2acfd86f9b2a375837ea3d6b09941cbadfed329d0bb30a1a", @nested={0x4, 0x17}, @generic="aee862b1963bf40d3df6f9daa87c", @generic="d988fd864c859fc25c480dc525f3337e346119a888341e30e8087551113b921bd1ca1b97c0e2688118e3953726743f8ff475af1bcc1b483342b3b67d635f", @typed={0xc, 0x1e, 0x0, 0x0, @str='-}[:\xd4+*\x00'}, @generic="6ba46b96473c8d5cff9eb35dbdf7bbc5c4839824f72e53cca466eaee380ef7e146ea8f2a2a0a7f780e9b860b4d1df8455bf8445654bb41874916c67bb7326d9066257e41aef9a1873d2bc72907464968a26a621e1ae5e0065e926c9388034033d86e76ec789a03f911f4c5c61bad078b46b772d702df73cee95a0bf0a26b8546014b78963399e4be3a6d61469261a60cb6695a9ebd3082b24bf6ee14739b3e857a6f52d58ff45e6293ae6af3b73c181a9825d3f5af4b1f9ff20472d1884b133bb4e1c6", @nested={0x4, 0xce}]}]}, @TIPC_NLA_LINK={0x3b, 0x4, 0x0, 0x1, [@nested={0x10, 0xde, 0x0, 0x1, [@nested={0x4, 0x90}, @typed={0x8, 0x11b, 0x0, 0x0, @uid=r3}]}, @generic="8e6aa00c5c776b4050fc55d4f94045bd9265b0cb4ccf", @generic="98be183ddf9ccdc0e808c92649be0eb2cd"]}, @TIPC_NLA_SOCK={0x1cc, 0x2, 0x0, 0x1, [@nested={0x1c7, 0x1f, 0x0, 0x1, [@generic="bf5d2630e6ed1ddff6269fdb5380f6555d0d7c9cee9282bae6070af2a2e525df23106570df1d7e83c59c9b066ba45b8666443f56e28f19e71c202d6e49f07ad7c8cef0336e2dc5dd745474bf3c701231575eb226a1ecd066d8b7f41e473a6a24fe9d891c5d7bd0b2209a6880e0cfccebd904fefe11d6a303832095ef8197f9a2c550a2cd1ee649d74b3c5d0ef355a8576fc0b480b361a5d33fec6a8db8", @generic="e71758c65a1e842a4ba054868fe2a16b1ae2b1e777c6df2556634a37dcd3ca854988938233a23accb1d07f8af2424fe54e42458cdf7cdc9f7849355be7bd383c7a592952c98b250adbc3d8742c64da6171214f843d4c675687caafc3944649ed02afe8f00c2864bf694b477f135e603be16b56ad17d6a1ddb549cd26d916eb9ac1f354b8294a92206d43c401ad68a9a977470793c3abc1e56db4d5a9fd4dea461591", @typed={0x5, 0x146, 0x0, 0x0, @str='\x00'}, @generic="f577dca3f00ba62dccd637b0990cacc7282afc2d01be3a68afdcd5871db86efc63da621eb3236cc013a73a61c57d98010ae898c9493c43f70cddb1149c528240edcfa4e23bdfc9933956f4d005f44e64719b1234867ecc33c5d9e9fc86d488490c6a7a186013f0c4145c10bdef72a646d9598e90", @typed={0x8, 0x39, 0x0, 0x0, @uid=0xee01}]}]}, @TIPC_NLA_NODE={0x130a, 0x6, 0x0, 0x1, [@nested={0x1d7, 0x111, 0x0, 0x1, [@typed={0x4, 0x75}, @generic="41c7197eef99ee6a64f118c12036087acd7538771d6637a55c00dcda95019adb7cba77f8f9c04d23331948f699c97cae102ce07e86ba69f596618333555dbfc6a688454508f09b8dd10aa37b66a37a293f98183595ef16d333567e350babafcd2c0ad0414f0a9891d56d0242cb5e26242134442c36fa3e49e3100337f4611f8e8f00e5ec8e978c7be69f", @typed={0x5, 0xaf, 0x0, 0x0, @str='\x00'}, @generic="b9f7b786", @typed={0x48, 0xda, 0x0, 0x0, @binary="f857fb1c39a66aae52832b953a35d773ca28a5c6069ee9d88786a2310419bf8a1581e0f3bf90003615bced837de9dddcaf26399c1e4a98313ffb0c55c5ebabe07c9c914b"}, @nested={0x4, 0xad}, @generic="a9ef23d3c0e43d0b554e10757e51364b60c3f55baaca66665fcd90ba5462f9fd09d20016fdccfa510972720dd05c648843eac1cbfdbd84d93c29c2ab627e528087b4ea8a8509d14f468f0072255ba782c19a2718aa95c9463d03e358d5533ffbe9c41742470126a2187b939ca1c5b51f090f080d7627ee66e03a6f8bb6d069a47512bfe32899e55f45d06a5154c838a1cac9380748ed8052434e605453d564b7dcfb62b09feeebf1b9c7cf602b27421e157fe5ffc6a4b044b627e26d3403fe29e810dd1b485f2ff3be6432057589630e76e37371f53ff59e95de7cde3e38eda00767cb61fc9255ef8d6582a626"]}, @nested={0x100c, 0x8e, 0x0, 0x1, [@typed={0x5, 0x53, 0x0, 0x0, @str='\x00'}, @generic="6614840ab282d92059956d8618c0c928d59242fb60bdd3b34b1c71ac40b95c20046fe949f475c2595534ab9c259eb2b190282603b53a1b6d6756570281ddd310f59704c102735e770137409b356f6cfd22e1d9c90d03614097992eb7b0a1f4fc1af68a4876b7394fb965685d48747b707637c650fa86ca800670e73c8a1353b881509ae552863e9f61ae534e55db32ed84aa25f86871527d4c50dd1bdf155904cfba78dee11b937be634dd01c5ed1d4e9537d2f2eb418ab64016ae48d68c94e5b0ff62244d0a4422477e5a6d3da175353d69eb839c05e3585d84d782197c7e7c98f8c7febca2754b0218f27e0a7f693b9ddd719da38ca27cb19d522e520cd987e518789fcbef258ed9977be9b6560b00d90bda8ba89c5a60a7fbc772a0d74adea9b585018c60f3e970399fee951d960b463d0b07938da6025561897187d07f2e4e2173464a3ba10dce83625425fdbd69c9cc85adb026461f5b3e4295ea45e4ea4f592d398c035e0b0bfd008e85405b495e13f4941a76ce361cb4b771d0ba824cccdbbf0a3abb51c83d8a4a23664cbfb537d3d1219a3d11c3a933fd99dd554e57482c2ce7928f89fc1315961b1fc36e2e570fb662a2f85ddb7c0cd6f67c588abf144a56dc02f44f01de2f7d8f8346174bb519a4d8370ced6cbb2cde9f3ea7f2c9fe750bb54cd40c2b45ded61bd07ad0d251fcafa3f91e531439ed09ac45dadf9562e0fb861c898b692061e20955347a0d8ae34161afa90a6eed088a394ee85b81893c19506e1c0d50a09c9a5c511db5891797568d6857c2ef7bc5282c5418c4bcf7af6eb3038f3a7493d3adcc06165e9c8ab447f8bd86920df37d04e1eb5bae247d4dd737308a46a0b4c9c55b55b36db97d91548df660b6a9277ca94048e1615fb8485ce809ddd0236ac751dc10826b1275f2df75455529b91e958dcc013a5db54d3b95d394f8b412fae9cf32094a53713922f539eaf4d0209641cd47bc13bf8825e2572d1adb481741e56a1e6af8c801f6db9a5063cc755572c56c07a3d6fe989c4ffef75e75ab4f1a0f7b337b70957774236e73269f52597c23f9b6302a7ea08ccada91bf8d99394917efcf99632874cd35d2e7c8a73fcc7fceaab895ea192a0dec088f6bf3cb52ec4775c8dac31e98eb74bfb65651746bd4781fb4d9cf994d81de951230dea3c4076e4433acbe54619a694d113fa60bec12e60200d9e09e44b5035312e8e2146ba46e66bb37f75b873058d880d48aeaee9b7b3b6533a092176f0293e0eeea4927e2c76b3f5ddeeda79dc350f076b0df2584f439d8ad90b1ba34e83929b0e662f73c81e9b3cabea32682d2e946f9da1710503d7fb978ed35a2ca665c813c4800db1e96d05288175c1e9b197672a3e81264ccf9573ad9ed4594dcb5e5d50cb494b2e0bce9d354628c356c6d7098356f39558318a85988c9c7dea3a00b0103b09b656e133e18799f58d6af432c7c891d691646200d6c2723223dbf2311d5dc17a81efbfc5e2dffad36ce44b1c53f9b5960877ecae7b46fcd8d1d0ef6290c8b637dba49ab93ef2ea9a1ea4a31828f3183f2dcb2111a8a0d8b53b74296f0699bcb0f2b4ef4f0583553ee2827f66403bbf35001742fa7b5a49279e4c449a9479ce1db8b8b36d88d82e92aa9aec590fc38b0dac5ed0bf4bf57219be4570c76547fb12473f932c140ef0c2d3c6e7be1f7af42f455744162d50f78e22174590a1ad0407accda1599d56de5a7b2341ff353e2f3f22857c7d61934e9771466f702804f730c7d2c1dd667bd45ffba87bc2a2a2a356db3486e88ea0db118d97101410491e981343e524bb1a3db3a000198daf5f5d3d132a73c5afb2c38277eb806704658d134aafcb03f7864f0241818597474a2516d1ae368030104fd45d21e43a823b447a97b96fafd6224054401417d6a50abdebcfade4361c419ad4a2eb424c2411ccbbc3bf4a1e0b3ed360021ec147db811db978ffaf9ad86434e7efb152f86cff787453d49eaf78278c22b64598400ff98114daf03aaeab15c1b37ab8844d8c1dadb75e233313ea07dac83354da41eb6fa8a9e365afb339a208d50e23fc28ecad9c4ae98c4dbfc9acd6b0012794ddadea5bb2e1648167bcc76fffd17b5c7ffe23d2c1bd5efc30734f8229115d8b7e778302e99907265f583f86eff33a3c1e6db118d2daa35322152a9b0d89aab5b483adfa9fad271be0cc39fd97e05675d1a173ef5aeefc8788fe2128956c2972f78142f6a3600a453ea1865a98401cefd2e802936044dd7cd3b57649033b2408edcde93ee9c2c933f53862cebe4e7a24c7e6d0147442b0d1d5cda637284fa71e1a14c5e85e2025b020d08d70f74bf44feea5ad0b9f9938b5826ac33791dc3adda6f2129570ec408319e675006e03a5b83918b6216cc965a9699195bfd0681dc0ad30a44ccb827f34ebb4c2cd163c5cc3e0eb9820ab6ec2b4a5368ee0eb678d9a3c649bd2ac622c86c90a02c4650c55c229476bf8046ba4d20a3feb6a0a9acdc46c3389218f108e1e3825e569306e9214e0b672a55a192c333a6e59025aa6eaf84b8961e05e3a1eb980731cb8cd24cf4b575187b5a75d4e80b9479a8468bb2245bb0fc0b311d06b79e91c3cb8a9ebdba99afc8883be7621d7abaa75d65640cbdf92859b597ea4cbc60b848097c69a5b481936dc71422db7edef1f76167ece5807d417440d279eb67671889138af03d00e228f91e9330deb39a7b72f8fc288c19b8738cab3dd4dcfb8f592aaa784c3b0655fe2469d2d3a4be0593c26d950821b7c5d43c6a1e10aadabb5ab3c6a52cbba59f4cf0d50108adc9d402a8832cf24fda4af61f941999b1e5d8d096b76d0acba75f73bdd102680f0dc0ee096358aba9495d212d870d2f496437d2ff1aed4b31f0b5079e1407fa25392084000bdac9548d400506f2c88cfb8df6cec673e007e9313d4e925acc9ea77de732d59ccb9f4b99ce941ad3aa70bdea64d80a79a65e417a243dee2926060dc9bed389e55da07674a212e0f621cc59c813fdb3155d9907cea4d43ae7e3411f7fddb361f9e1171501fcbc7216c2e794998ba190d0e06c53439a94806aefc24264f64a2b126a4d886c79f658645494d4319db3e11c7dfdf78a48389cc2af8bacaa36e7bebbdd2b8dcae233911205fe66e3118cc0ae527caa6d3533d584ae4a1dc83696bd264b9f9e9c46ebab75b70464afd6dcd9b8f7eb364ec4a4c6d98dac250a0c840310d530b7a616809c15dfc67040ab273f0f4392062cdae9844353a38ae0fe512dfd206e283bc4bf4b6bcd2fee73f56cb0d16e9f96929cf98710a9b4b746e15fbcd52958e18cf7860bbd20ef67130e885f1cec90fc6d2d45539a1964bede8e628eaa22523b873e5dcf061a2ee8f14c1d2a1dec46c2c5800a3c3598b3908d6ef98dd8c0cc488b863af240ca852db7870f7eedcb2d0bcb761437cc8c97cf9f2d044ad75c9391aef3979fb187f57ae0f5ba16b6b12708221c427f934cb7b24eec4511468089bbf0b3a2ee34adfc470c627ff13a2483df0e5d50fba634e17d45d509ee279b37fd27afaa73a8fe99b185e0bfa9481788a080c540093ea695b7ff2a49d4d5e18405efc1504f03ae6aa7b564372f7c5c11360da43ae96ee8848476d46d95d4186449cc001753a354fe7e463ab218d329dc14c887b4954d737af8c2759df0dcc4be7ae089bc8da1aa5a9a901677162ae0f50040ffb5580e2530fc270217ecb7c795da598f5acd61ca63c8f5b08d7c7cf65343f08fdc71d701406708754c2804e740d402cb86fc04c19441875b356c6ee0a9fd85da1894bfdf720215ea5cab4a8d17c7da5f91e8e13d4a823377387df0359d0db6ece2c0c5b895bf38b47fa07356279caa34fc39a060a680c54c9f5b6edf87575fc4ed89d176cd7b25bfc378d2513a84dccacf66be8dc97a08e765d9ce94ee7b97bc2f14626a40fea7cf0cd213959ff51a771da45ed37bc755b20b6652d3d80e4d285e13ff8f5a14de9c22f20ca7e9db1941354def6d4f689602941ce751c3d17fffd59c01ed71c6b4dcf8d86373c8795bb3322a4c51d829cf9f4f56e8c8fb0c3f844f951b4dd064a6151a87eb5a979c17c19cca37d49671a84f42272f49cdc2b442149d21045543c747de8b9dea1f8e07b0da473e06efb45d75251e97a47dd370fb5297a5b979db22e6180b96c7c136f50ce6d6b5af4686109d497898db8984f41fb32c0246fb28109606e2a04370254c13bbe9dbf4a0860b56de9d8cb918ed1cb47031d154f033efbfda771b3a2713de9ab72e5457a38502343eb144005d05fbf0029cf3555d69a80d313c3561269d6f2f5be19c58e421f362e5c2833a9dc1115cf6b1f01585cab39bc352e6dc8fc8c1f01692c1fbd667765d8d5c179087f838693ddb81d0eb943d9ff0bcb71f4eea8129737d9a9b9ef7a7748541efec14483e9bbd71d1e209d754187325376ccdeace8fd4534485f585c8dd4496e4fc91a44051ab0bb3bc590c4516e4163f94939ac3cc95b7f21f839b7e795fb1b579ffe716bc4528bbb9feb12afb6502e2551e5d5c2c89f442ff5309f29afc42eb8cc70236aa64f4fbe5ac6e89288901402db5e2144fec14f7650ef1d99d1382d9f38661b4288593ea1b5ca8fb587fe284cd8d1ab8a3b175f36695788f242c4958c538aceef72e760dc759b86f5fdf893e5bc737658dd9e4d93dd791e1e18b2272d36fdc8a51f0219a31181dd573025818abd748f60d96971197954a1652f632326e34ef8daf79e8088e77fb273ad660ae511563c308d0fb694b4bf37ba279bf50a69ae5a7b03dd6e8db9946c6b34798d78fe12ec05b401b444ca95f8a607ec5f9107b1b122ca3d3e29e99d321ebd0513eced8aae6769e9b780224f00fda32cc6702661299996897a563e637787751c3247df25b9b49e7927a94e2ce5079514ecbdd625de2acc2a4411264f91e0c22e89d8228dec3d2759cc9925654bdcb4fb94b0ef06a2429ed0d194da8d638b729b06df9818e128f70c499d9d0b91e2176168602a1fe160b3a562e6c41b85ea730c21019fc2db9d4cde326544d6a55b8d77764c7e0bc5618b9db2ad566e727e7c32b65e3f8bbf0463acb153ab72373b4118f123198f4fd673e67ec02ca840af1c9126d5982128944ddce3fac13792f65eb1a600c571054c5a5c350c6b4f401addfaf21764409150292da2ecdfc8da8ab75cad37451f28bb70d3131c9165cfa4eb265a288d83c0c29bf64ceb8051030af47e7e1c6c611132352206b639761900096eaebb5ede73c0c160232435a8eacfdb841af38c631f659bab875836c37e6c49f89ba98c830edb6ff062936972dd762a306e52e2769306edd2958239f9c6ba2e28f4ddea8b336bae0df2d9ce8274f9768de2a6ce1984b57b72c7d988bfab48324586ba55ffd2b9fff7d56817534525aea1b4fd81b32d71dc9c8c8d2c2d692dfb918a51aaaf50b432db14039c63f853a699d1fec44ace476d924e771e3b37bf297955da04b5098aedc31ce817a59a9363a21d8a5067009b7bbeb95996482d90fef2a752843bc9e2da97e01285795d58dd052829053ce5b05242c0b46ead201ab048e76abbd47ff214f1ec8c6142daef180e4d3d67766eb8612c8f346b32d4a060ff638f7298919e41ebb6bb757130409bfe791869b94987ae2ffddcc8a2141f3968fd19067868d3774ff051fe3f797658a989935b4db5d9189e2a5c30ab918a7b3e2d5bdd90de0cf0a562c7c14ae769d6f4991b3f1414c9e51854213d4619ea05b8d5b1dc87ce132ea31c06067dc7405d2ef36cd0342"]}, @generic="7b93407443879e77b6df054db9935b1f2780a2e29804269684ce1ef85047fee90ffff6aeead796a17a563c553b73feb72b01d5f2081e98fe9e625bd3040a9e103ad801daf84b3bd4d2c044d69be13fe304ba3bb18653f256e59ad55709d45467107e7c99b936357b4c441495d03a67c36a5e87123a16bf0e9fbaaf3e893b21934b1e1e7804ed3e56e801aac954527406bfe3923621700290077e4fbfa76f8220ab59c0e4b8e05ed590b0972b5411ccda5933cdb7be69042383f3", @generic="a6c91b7cdd454acb2c217172c1051cf6589baad33b69608f95a89cceed3132ef75bac3dea5af0d885bff7f9b2d4e63a184c99da1815e57e20ac6224ebed69ceb60b52d984da1138e8d88fffef1f8a9f46e7727e853f6e47b28b6c6e1e74ee37611b6fabb92238471"]}, @TIPC_NLA_MON={0x73, 0x9, 0x0, 0x1, [@typed={0xc, 0x3b, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="8c13448c33ebf548235707aadd0e9f64b402ba969af5c92c6d9c4bf0dd0208490d1aa795b9e637d8227a2730baeebab8ac4b77e6501ea897b70b5f37698b7058bd9cedf555599adc9345c6f2b866b4eaecd88999f282609799464c"]}]}, 0x1850}, 0x1, 0x0, 0x0, 0x2404a885}, 0x40000)
r4 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000001980)='/sys/kernel/tracing/trace_marker_raw\x00', 0x8200, 0x0)
write$auto_tracing_mark_raw_fops_trace(r4, &(0x7f00000019c0)="4fee5b2d11d6e2ae6ef419e19b1333a831627f5054bfe374f5e6b49a2ea8dcf64b9bf17f98242fb32bac27c33dda5b82818b993182e100fbaac650e58fd4c1b65839a28ecba9323093ce029ad5109659db851a91b848affff2ece9320cf41af899254219736625e558e98142c739a5b7469cdf1508a78501777294bfd9370cf897a1fa83dc835c7832faefc3f26b69e92d4907331d199d44a4becd799cd16485f561b970d74d4cd8593c4096556dba0a6e960e68f774eecf4ea4d6b166050ac85447f4cdf093c44a79d552ed7ee022fdb5", 0xd1)
umount2$auto(&(0x7f0000001ac0)='TIPCv2\x00', 0x1) (async)
umount2$auto(&(0x7f0000001ac0)='TIPCv2\x00', 0x1)
r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001b00), 0x501000, 0x0)
r6 = socket(0x2c, 0x6, 0x1)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/ptyu2\x00', 0x200000, 0x0)
ioctl$auto_TIOCCBRK2(r7, 0x5428, 0x0) (async)
ioctl$auto_TIOCCBRK2(r7, 0x5428, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b80), r6) (async)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b80), r6)
setsockopt$auto(r4, 0x7, 0xf9, &(0x7f0000001bc0)='\x00', 0x0)
madvise$auto(0x0, 0x1, 0x80)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001c00)='/sys/kernel/debug/block/nbd10/rqos/wbt/id\x00', 0x40, 0x0)
r9 = eventfd$auto(0x6)
openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000001c40), 0x8000, 0x0) (async)
r10 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000001c40), 0x8000, 0x0)
close_range$auto(r9, r10, 0xfffffff8)
keyctl$auto(0x6, r2, r3, 0xee00, 0x10001)
openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/ieee80211/phy16/short_retry_limit\x00', 0x40800, 0x0) (async)
r11 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/ieee80211/phy16/short_retry_limit\x00', 0x40800, 0x0)
io_uring_setup$auto(0x6, &(0x7f0000001cc0)={0x26, 0x72, 0x2e4, 0x5, 0x9e0, 0x9, r11, [0x1, 0x9, 0xd5e], {0x9, 0xf, 0x5f24e83c, 0xff, 0x28000, 0x751, 0x5, 0x5}, {0x1, 0x1, 0x80000000, 0x7f, 0x0, 0x4, 0x9, 0x7f, 0x5}})
statmount$auto(&(0x7f0000001d40)={0x2, @inferred=r5, 0x10000, 0x7, 0xffffffffffff3001}, &(0x7f0000001d80)={0x3, 0x780, 0x3, 0x2, 0x9, 0x5, 0xffff, 0x80, 0x3, 0x4, 0xe, 0x3, 0x6, 0x2, 0x6, 0x4, 0x6, 0x7, 0x9, 0x4, 0x40, 0xa7, 0xd675, 0x7, 0x6, 0x7, [0x1, 0x2, 0x0, 0x3, 0x50e8, 0x5, 0x7, 0x9, 0x7, 0x9, 0x7, 0x0, 0x6, 0x7ff, 0x1, 0x1, 0x7, 0x8, 0x1, 0x101, 0x3, 0xeac, 0x0, 0x3, 0xa6db, 0x5, 0x9, 0x9, 0x7fffffff, 0x6, 0x6, 0x2, 0x1000000000000, 0x8, 0x7fffffffffffffff, 0x9ed, 0x49cd, 0x100000001, 0x4, 0x5, 0x400, 0x7fffffffffffffff, 0x8000000000000000, 0x9, 0x9, 0x5], "833f1358ba"}, 0x9, 0x3)
r12 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/ttyprintk\x00', 0x90842, 0x0)
ioctl$auto_TIOCCONS2(r12, 0x541d, 0x0) (async)
ioctl$auto_TIOCCONS2(r12, 0x541d, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002000)={'vlan0\x00'})
open(&(0x7f0000002040)='./file0\x00', 0x400, 0x0) (async)
r13 = open(&(0x7f0000002040)='./file0\x00', 0x400, 0x0)
statmount$auto(&(0x7f0000002080)={0x2, @inferred=r13, 0x10000, 0xc, 0x80}, &(0x7f00000020c0)={0xfff, 0x5, 0x3, 0x4, 0x6, 0x3, 0x9, 0x6b5, 0x400, 0x64c, 0x1535, 0x1, 0x2, 0x308a, 0x36, 0x9, 0x3, 0x2, 0x0, 0x1, 0x1, 0xb, 0x6e8, 0x9, 0x3, 0x4, [0x6, 0x18704338, 0x6, 0x9e, 0x5, 0x5, 0x80, 0xfffffffffffff77d, 0x8001, 0x1, 0x0, 0x10001, 0x6, 0x7fffffff, 0x2, 0x58, 0x9481, 0x1, 0x100000001, 0x4, 0x96, 0x2e, 0x4, 0x2, 0xffffffffffffffff, 0x7ff, 0x4, 0x0, 0x1, 0x800000000, 0x2, 0x8f, 0x0, 0x1, 0xee, 0xfff, 0xaa, 0x3, 0x1, 0x10001, 0x7, 0x9, 0x50, 0x1, 0x2, 0x1], "0cb70e4e0e087c3df96548121a232e1b9b2cd2942669df202d88b5a22adeb573541a4a9d8a9f7d94890839d46deb3c9b451b099086523a0b0e36af75be62ea81159fbc238ef801b64cb70a6f1ae296fcbe0071e763523bb05f3cbf386c887d6317aff976fb02fcc8ed9f3e85f14516fcbdb6eb4e348943a10f624ebad9d4c8c2a6f582666f8096fb929ade690073eed9a3976f0decd0db1195dd87733c53843393924237abc9194d6584b8cd4018241da0"}, 0x5, 0x3)
sendmsg$auto_NL80211_CMD_START_NAN(r13, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0)
sendfile$auto(r10, r0, &(0x7f0000002480)=0x100, 0x6)
executing program 3:
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x4000000)
r0 = open$auto(&(0x7f0000000140)='./file0\x00', 0x3, 0xfffd)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyw5\x00', 0xc8340, 0x0)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
ioctl$auto(r1, 0x5459, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$auto_ima_measure_policy_ops_ima_fs(r2, &(0x7f0000000000)='#', 0x1)
r3 = socket(0x1e, 0x1, 0x0)
getsockname$auto(r3, &(0x7f0000000000), 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
socket(0x1e, 0x4, 0x0)
connect$auto(r3, &(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0x10)
ioctl$auto(0x3, 0x5404, 0x38)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000001480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001440)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="000225bd7000fcdbdf250b0000000000960000010000e800d7002dd32ab9b5a6c2ff4a828dcfd6838842dc32ba761231fc5e579d4b8e5419a1964daeb7bd56a518325f1e73787da52b279ec6bc2c918b67c33d928a0d7aed724d36842067b016c95ca4d6b2521768f65565d683d9e74b0d1d50770a7c0ce3210c842750fff47b208b47829dfee4e877f887cca034922205152e172e9cc8f13ac4df508c7016e295a21e5a20848669f8f9e6bb3f411b71af5ec65db7f0188bb3db2fc3d335767ca3fa6ba6549919e59be85d0065d7bb73ab803d3b08bf7f339165121b36dc570b8b3b7f8c0bc019f25867e72d67994fcd9964d7e1fd667dc800000000350110b6000004105500fbac0a905dbd896143d81d79799c48b7613d78be8137f8719711c750c780f3c43d4b9136b7334f6b98418263d118227b08a070f4033e0f805ebbe72d28988da6616bd5ef718b4ef7cfc97732aa9e2eb55af204ccbbc5f5f08068499b13e2b0241d2affd6af99945662811badeadadbae3d981689c44d270ac77e63322026865f76da0ac6083ac990387b5f0aab7e675159cc02dd69b67ba1b60190a12eb5d80e25d83c710d0975ac2494bc15dd0817997bf6a808fb906cb37833ed6ee5d2901451c6dfbd4ce0c138ff684727f5b34ec50099aa2e61c32e68f038949e28b212c544151579813f799dcc8aa711cb799392cbe5a157e4156957e77e107c561bfb78246ab83c9ac58fe2f456704f14ef4fbd3550606f177a8b6965667009161823f24869e7ffd33254a5b37a7e2a0384354b09da6c084cd31794e9a99070cd20a6f339e62b50f1cbe06b7f4d1153cdc6193df7ed1cf3404007403452c602d2a7be0e3cd9d373b62120c246884e13508ad99e49a4f8c3e21781ea5a414e8d157bdd1158cba1b12387108b13c386c8e4ffaadd25783b5c6f7b2b5e9e5b8a8239e047c09d67d01ed2d2f5f6ecad3be61d12c2b05f1848e91c12a6cee7b2cc6ead3c05bfa337d0daefc630be4ce541e6fa38e32e7bffc8b333c49cb24e978a873840210e15715293d2ad2059147341572ffd1540996fcfcb1f443fc3205a597d9553bb6fc4855bb488e174c1f4330c6596f7b24926dc280fe1b3f7ef0167ceedf54016ed83f27cf1fa7e3dc9fbef74ebf78965597669d098159d8ff97c65cc9593f9d99b2268089b6294279a6dd0f59e8d1d97b16fef5a76d076a6c353c44322c4c90415e9017d79b1c9a14b1851cb3f9e1a5e1f4bb49854abae93b7d40dd81693444f16e9dadab0f73182192cdda41fa638f6e5b2c8bfa5ef32086e46fbf0ae6071a60b49fa67ade8be72fb28168d35206895a1b2a1348ce4c8c3755f35494fc8cd36e0da5feff882b1680850035fb74988eb4357b9c0942716d1f83daf18610c80975a0885c6d1edfc55d52eaea235069f917ada174ebc4a4d4fd75ba515700c080c3a19d6e1dcd494f16358dd6f3785aced37656d8d5744f594ecf4e2a1f238260c030f069974f0a3ecf757488fc3a1430517872e21ddb529e72e01908e9c9e094eaa6f8ce252d78f3a5b832377980e268ca580c4bfecb1cceb0f197e4d4bb98995bc1b282cf53b5f599a1ac413581214863a654a7195f43d3307b1895be257c10ca78833b36c87005447315238dc9bc89058f056e327830fc56bc3bc4d71404c2b30cbde19b071d09e87bc574ebe757aae9ef865eea8edeffea64def1860dcdf76d17b8515ebae048b09feae489adaa16b8084d323d20f049cc3499e907533269a430ef96be41c38a1e4bcc477fd61b65ebdd344e2364c195bf330b830db164d602ee2ab36218e3f443b85978b3282cfb96b5362bffeee7a63d816254c1c748b6b916f36477c1e75b4e0d235c89b2a1b558703d8b9cd388c553b8fe1cfc804c2511b88d9c1f48bd683fca242e8bd99b34ae71a3e57029616525bb6dda00cecca95512adc7847cd268ddf4226e4e4436cd2bb9843370ea9334e5a01e8b208982802092ce23b6b1431062ff62575526bbd1b821158cbc90917f9d1acfee8cbd67563b2c0f8f146bbaaaa333cb85ada8fd7fd9a1f2654e9271794f24b007a1387798f989f76df9f718f3b17f8182eb77a3bfec18613dac19941bb6016d7c4dcde29b8555a5f831a03921ec8a0eebe36ad2a0b4c0cce9f5a1724a6e8e0ac73d86e08c2a7b73bf1caf4be14840abeee5144abef13d017371aea52b4a371cee75400b9b094cb435a42af5782b3db76dc95a55fcec34a2fcb6f93ef6ef18feb97d51cc2765d0dc9a9a7ca8d6284e93117d567953d2c32d7960c42daaddea1b7b3f5c6a6ee63befb1b2b97877aab38251426b9da02fabeb833bd3d611282c2e4191c0a5070e1c131b727b1952ba5a291ac534c9e3f89384dbff194fb5f08c085c2145bb9678a0ef3aba25844737df42496f7f1621ae47680e5a312a7b9c3b28a041463249318c24b1b904980b2aeb65f588c270db3f5e2100bd3dda596eca153fb867987e386f43a7f62c1ee89edb24eb360a56e82a8ab3e86062ac9fde285ed60fe83d85ad72a267e112bb5ac62402e6be8521da6bb0da6e3dfbaf3656173231ecb30ba7d6a99e602e51e755bb351ba69c1f66b393467ef1569464b1acc526ceb0fbc3fa3dcbdb514e7a735d42ab607e8f88c7b7f49a1f000f5c02581923c1a0d2d23c8c420d768f8254b861632762dea35c57f1142c57df90aa6fb5f91d0844289b1256b713105345133f142e5b78a8043385fd873b97bfff0b407d1ba877259b0169db9c863fa414ac717f7024ba8435cc7a5a181c966f641b9ab9f295a953082c186b445c0efc8b2c9a086fcea966e488035e02c5bfa59c4c498dab3976867f1b52917dfd71e7c1f05e3d58d1216a56643940af4dfc0048979babf35eb9b1a8ad5092142a19d8442b1d4fc3a9ae0c8f0d6807379fe7f0fa629bfa7f762bb42f361e1b54631ec45556ef50a5d7aa1da99062f7c047e73a79b27d9d5728a169747eaaec19493eb0919fb6514babb11a29839c78cafaa5d102b0c4d1db4d729df57014e23378493bbf4b4d5a98c512a6c51d912db95370e82e377002a87015d81eaee7513dd851fc0a96129af3b07ac1ae7e97fe9b5a1fc74c841a2e2d1d14e5f9d06aebde53d6322c97e168bbaeb9e47c14654c9ec9ff906832575f699b9fe9d0902b6095f7de4928ec83456d84e6fbbe95cc38172fdf4ad0514dc2248e003b37898f017a25e13210a5aef3e7d4544bcb390f5b3502d9710101b65eb9512d42a0120aa1f19e88a625ccdec38b45982920bedf0ed97c3864197e96b98afc49ff42b146a9935c5190f5926db6e5d57bb486a0015d798573dc022fa04e2abb175285321eab6713efed6688ab0c788c13e763cb66d566dd21af234e2f94799a71c102571939fb7d6296f3be0b8b05ee343113174a70930dd687275e71a371daf70f59d0b577d747b39f4a158d2b37b426a1e775628a97bcc9b8906f57bf601a7f2bcd6278c5ca66bb5e41cfd15cc98d8b947eb1885f85fd63d59e3ee00a9c7d5f8cb6b890a75a055981e510a3ba76cc6a433628914f8cedd77ee388928c5265d90f86c0fc735b3783246e0f656c2dad36147ebd87064d11d5d03d6112ba9c5ef9ef4d35149bd164a6ee2d7281367363d5531f2a7c22ce87fdfcc1c086c15934a8a045392a135ae878b390b377067824532e77561f596f52f1fded4f1018f05c6beadfd9418f4afb7d45cc606d092f4c256dc6be82bdf953142874f2349e6b323dbc84c46d7b0f80b575da308df34e2796f0ce6a6e40d9d36e5cf98fb87af1319253673122aee3a1d22bde16bf277b2bf8a0afccc875bfbe823d51c7b2e443e92d9b2092617bc3d66d6b4856c0935b113498af59eb43c06047ce0f06a1bc9a4c2b710483a3bbc7df391320eb9988cfbf2424aa57e659facafd87b955234c3a9ca478e22d79cf17eee9d2050613863ccd37778e1ecf87dd6afedfa8782d928932833fe4d9a9556a234402682ec9ce69563375f3b281b365d0f51f2084c1eac2135db5f33a8b022a9cd116d94505f45640205746117141332a334904ee759b94886f8ab80657997f408512a38c32f7ed44983723df247692147c7e5782bf265a4c9ec58fc160744c720939f543c5cfe4035b5e7b53d336f737e4cee470ea18ef8816e9b21503f1ad3b7463ff67369e506cf618f3788eac24678dd45b8e64e9d2828e7de2be782f99af9be8c5fcd42b6067c091568767d858f58580a977eb3a3ddcd236ffb893e6b123073b8c0a81a79ace7d3e985f0436c99e565071928f0b53c6be8df55fcfbd91be6a479d46805b00514e9bfe44a8118be1a78a415cb573a0abf8f4da06e489fe98b9309f89d4f72004d701f17d293f52ce08e2315829664bc8e2fa2e8459dbc8bf52ea2fd43f48b72c5693ee847a17fff21bc4af6bd1685a2f5fb7283294cc78b64e91586a4a9348da9cde484f1ca4ab5510c273c646df56d723e56c487af5db390299e0d8b9329a3fafbdeffbe42f0c4a6edb0a7c151ef48cb3a09795673e2f6feb75725b87624d42b69e3fd16e6344af3951a30f8026facc57c5e234f7d99791ad4a34c8878425f7f0452c656c6182adc800db0a9b4f5d9e145565b3f267590e6b5fb1377b2951c4dda0a15e096dba2f8000bb348582e93d21d47fbafde7e89bca347720b9fa374c676e5abdd57f7c23fbbc0f402ad4443dec6f3e6fc07be7e94cffd101e00094d544a84ec54aa4fa3656b83731467f334b85db859528f10e8bd129cddad0f9157fed8d4214de5496b6471c4f532069e56ba538b158539206d9d410cab2e20e3591a6edd5f7ba62277795f719760cd3d5dc0a71a7f1a476c7ff5778e14d94a0358a4d1797edfbe0c6d048332eb2c37b45e7e592e87afe0ecbdd51382010606b6f14e3f9c208e6aa5852a8f063f7f71bfaaccd7e94976aedb3d9b1dcede6076d6b82f38ba516ab89fe041ff4ccf3eee1d0c4cd70168ce9b8e39be7cd54a0ca8f42b8fc9fb938fae9af3ddd4fd0ab506ab178be8fb5a55fa6a93e837f77f1d2e5ffef46154cfe67124f666025b2dc0a9c8cb5ca4a1cc2ed7f1f180cb1b8d36b8b3c04cf42f6a63819617d69f677bc3c2ded771c4460e2ac0bd80171e2c2c8e8e14db08a1e2a99cbe29f64ec52cc4cd634bfc3fdd2ed01c27012f0fdd452cfbe20cb23f7938d6979df73be54256d703682ba2e8680e4ba81a90ae0b82570fe7d2ce8acddfbeed120f744c0d198c10aa3e06918747babf1b9b4a029ba78176dfb8a97ac7bc4175292ee00d791f0a3f178ca9abecc1c3c56d56f60a6f4016aae9b3fe6877b15bda13c1632c49c35a324c55e448f785fd4201c86c2f0ae00cd862689117072bd6bfabbe5f34266e24969bfbf0c0669842520672a598ab35fab581d9dad7806ee612418a445d280368ef818cda257b5385a44c7feb3ecb0a4ee3a6030948d0ae6bf8934601ce728e7bc5412c929505a2506e91d8127dcdd2b3de2e59de2bb17bda26a50562b58023d27584bd21e6f94f9d91871b47e5999538386471d8117224890c2814e940ebd0d147d93f25ea79325f34de561b8c0ae35275d80cb680ed6d5463f6f7bef51a8ff56b76db0686e88638117d23f7325faaf63a1f3b95046a5b6807a46507ae735f9cb37c7e0e63ce53d2c6af4a9c7e4e86cb3860fbe5c31ac9203f6c90cd6f6ae1d776782610bf1092307622804058a4d8d7347d4fae89197104dc000e3571b33ccb390f17c6107136b386a0977b3548a86f2a9d52ec3f0002b9d1bcacf7d028b1747a274083a7ae6ab85dc01cc7e07bf7e1c9665845095d35a4f05dec602c3e18da8dd1c310551fd1173993217fbf4b47d8876d3657215e0136df1d2bccef51cadd68e5d9706914acd52f210f994bed77a2efa3e3bb15484e1f8403ac11aee7f5c2f9e12d3c34b614f1b7e31a056a0b075e08008dff72dea99dc3b6746df22c725e1637b6e42744337b7e23b377d61446bb84fa8bb60f28cb2fd5d0a61a45f78b6ec49e6b38d5e2992c852fa595178bb98c979589314ddd062a6964a68682c0a55dcfa18b9ece2b2915c85afc3ed8f1c1f1be4946b1de9ecf80438596cd4e7230e9827283e136d1d43020784a10d11834b2abf1b9918ecdb2acdcb481a5f55553e787b747fed900c3c72627b3b7675fff6200090000000800a00005000000"], 0x11c0}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000880)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/dma_heap/system/uevent\x00', 0x1e1042, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)=""/158, 0x9e)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r6, 0x1b, 0x70bd26, 0x25dfdbfa, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0xc}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590820806"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
io_uring_setup$auto(0x1, 0x0)
executing program 4:
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9f4e79f46ea89b5}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0x1, 0x5, 0x0) (async)
r1 = socket(0x1, 0x5, 0x0)
bind$auto(r1, 0x0, 0x6b)
listen$auto(0x3, 0x81) (async)
listen$auto(0x3, 0x81)
select$auto(0x1ff, 0x0, &(0x7f0000000100)={[0xf, 0x200, 0x800000000000008, 0x5, 0x9, 0x7, 0x3, 0x2, 0x40009, 0x20000005e582972, 0x4000000000000000, 0x14, 0x5, 0x8, 0x8, 0x80000000003]}, 0x0, 0x0)
executing program 7:
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041)
r1 = socket(0x2a, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000080), 0x6b)
connect$auto(0x3, &(0x7f00000000c0)=@can, 0x57)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
fcntl$auto(0xffffffffffffffff, 0x401, 0x5)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40)
write$auto(0x3, 0x0, 0xfffffdef)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0x9f, 0x9b72, 0xffffffffffffffff, 0x0)
sysfs$auto(0x2, 0x10000000000002d, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r1)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
r2 = gettid()
mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000)
sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x8000)
unshare$auto(0x40000080)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0x20200, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x19, 0x401, 0x8000)
rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00')
process_vm_readv$auto(r2, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x3, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm0p/sub3/hw_params\x00', 0x224600, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
executing program 6:
r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x61a842, 0x0)
read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50)
write$auto(r0, &(0x7f0000000000)='/proc/self/environ\x00', 0x5)
openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x61a842, 0x0) (async)
read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50) (async)
write$auto(r0, &(0x7f0000000000)='/proc/self/environ\x00', 0x5) (async)
executing program 3:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop15/queue/scheduler\x00', 0x0, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop15/queue/scheduler\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zram0\x00', 0x1c1740, 0x0) (async)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zram0\x00', 0x1c1740, 0x0)
r1 = socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0x4000eb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0x4000eb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0) (async)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0x2b6ac0, 0x50)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x1, 0x5c, 0xfffffffffffffffa, 0x8000)
socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/cgroup/delegate\x00', 0x80, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/17, 0x11)
write$auto(r3, 0x0, 0xff)
r5 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r5, 0x29, 0x11, &(0x7f0000000040)='!\x00', 0x1ff)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x0, 0x100) (async)
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x0, 0x100)
mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffefffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3)
membarrier$auto(0x0, 0x100000000, 0x8000000000000001)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0xfffffdf3) (async)
write$auto(0x3, 0x0, 0xfffffdf3)
r6 = socket(0x1d, 0x1, 0x6)
r7 = getsockopt$auto(r6, 0x6a, 0x5, 0x0, 0x0)
getcwd$auto(&(0x7f0000000040)='\x00', 0x3)
close_range$auto(r7, r0, 0x4) (async)
close_range$auto(r7, r0, 0x4)
executing program 6:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 18, 28, 17, 29, 6, 5, 29, 40, 30, 17, 29, 40, 6, 40, 18]
detailed listing:
executing program 3:
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async)
mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x3, 0x8000)
ioctl$auto(0x3, 0x8108551b, 0x1) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
capget$auto(0x0, 0xfffffffffffffffe) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x6, 0x0) (async)
getsockopt$auto(0x4, 0x10d, 0x2, 0xfffffffffffffffc, 0x0) (async)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffffa, 0x1, @inferred, @enumerated={0xefff, 0xfff, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a61b7382f979a0ff0b3d9581c0861bbe128e249d9f994ef5578e78507637044b73a4c4b5700", 0x9, 0x3ff}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"})
executing program 4:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)
executing program 7:
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8880)
process_vm_readv$auto(0xbd4, &(0x7f0000000040)={0x0}, 0x3ff, 0x0, 0x46, 0x0) (async)
process_vm_readv$auto(0xbd4, &(0x7f0000000040)={0x0}, 0x3ff, 0x0, 0x46, 0x0)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe) (async)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000002140), 0x80, 0x0)
ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000002180)={@padding, 0x3})
socket(0xb, 0x2, 0x5682)
r2 = socket(0x2, 0x1, 0x0)
memfd_create$auto(0x0, 0xe) (async)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
ioctl$auto(0x3, 0x4008550d, 0x1)
setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0x81) (async)
setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0x81)
executing program 3:
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff})
r0 = socket(0x10, 0x2, 0x6)
mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0x401, 0x1)
r1 = socket(0x10, 0x2, 0x0)
close_range$auto(r1, r1, 0x85)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x6a)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x448141, 0x0)
sendfile$auto(r0, r2, 0x0, 0x3)
unshare$auto(0x40000080)
executing program 7:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:13/path\x00', 0x0, 0x0) (async)
mmap$auto(0x10000000, 0xe, 0x10000000000dc, 0xfffffffffffffe3b, 0x401, 0x8000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x80402, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0)
write$auto(0x3, 0x0, 0x100082)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f0000000280)="c282", 0x2) (async)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x4fffd) (async)
ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) (async)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
write$auto(r1, 0x0, 0x6) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
io_uring_setup$auto(0xa, 0x0) (async)
open(0x0, 0xa240, 0x15e) (async)
close_range$auto(0x0, 0x1c94, 0x2) (async)
socket(0x2, 0x5, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001100), 0x165300, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
inotify_init1$auto(0x3000000000000) (async)
inotify_add_watch$auto(0x4, 0x0, 0x9) (async)
inotify_add_watch$auto(0x4, 0x0, 0x80000000)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4106, 0xffffffffffffff57) (async)
r3 = socket(0xa, 0x801, 0x106)
openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f00000010c0), 0x4200, 0x0)
setsockopt$auto(r3, 0x1, 0x1, &(0x7f0000000000)='\x98\x00', 0xb559)
listen$auto(0x3, 0x81) (async)
getsockopt$auto(r3, 0x10, 0x1000004, 0xfffffffffffffffe, 0xfffffffffffffffd)
executing program 3:
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mlock$auto(0x3, 0x9)
executing program 4:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
read$auto(0x3, 0x0, 0x400000)
unshare$auto(0x40) (async)
unshare$auto(0x40)
executing program 7:
mmap$auto(0x1, 0x4020009, 0xdf, 0xeb5, 0x401, 0xaf8f)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x48, 0x0)
r0 = socket(0xa, 0x3, 0x73)
setsockopt$auto(r0, 0xff, 0x7, 0x0, 0xfff)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x88)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x801)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
socket(0x10, 0x3, 0x6)
socketpair$auto(0x1e, 0x5, 0xda0, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xa005)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r1 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6)
executing program 6:
r0 = socket(0x9, 0x3, 0x3)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) (async)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0)
setfsuid$auto(0xee01) (async)
r2 = setfsuid$auto(0xee01)
geteuid() (async)
r3 = geteuid()
sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001940)={&(0x7f0000000000), 0xc, &(0x7f0000001900)={&(0x7f0000000080)={0x1850, r1, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x3d, 0x5, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @generic="a720a2522c01086bc76e872ee085fea5ce3c9c5441150e1885970021b550171785f7d43d3d"]}, @TIPC_NLA_NAME_TABLE={0x274, 0x8, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @uid=r2}, @nested={0x8, 0x11a, 0x0, 0x1, [@typed={0x4, 0x5b}]}, @nested={0xd8, 0x101, 0x0, 0x1, [@nested={0x4, 0x13b}, @generic="2b73a6e93fe4fc51e51627b7b03ae9df668a398cef3f7a459898fa84ba173971b4ddb41a934c9f3433520311dacd113f5353e9f9922cada81d2d4c7c7712921cb51986f8026e8de77a3f29e1e47643b3440330fe4210", @typed={0x8, 0x57, 0x0, 0x0, @u32=0x3}, @typed={0x14, 0x138, 0x0, 0x0, @ipv6=@loopback}, @generic="68d2e17119256cc3aa6bfc56ced635d5a151fb1d743eefcfc311b4dac75d781a18359cf0d97659a55823c394c1331068e890d956c17e60aa2e40d8ef466f576464e2d99132db58ac0fd85f9c4d88c5f6e8fd5a3f98e032a8db42c89b9fdb"]}, @nested={0xc, 0xc7, 0x0, 0x1, [@typed={0x8, 0xf5, 0x0, 0x0, @u32=0x9}]}, @nested={0x179, 0x60, 0x0, 0x1, [@generic="0e8bf969cf99048dea561239906d52eca79d4a93d8b5d8c41848342f7da04b4effd4a37a6b6c338d655e95ac2882e244a0ef722bfcca5ae1882c2acfd86f9b2a375837ea3d6b09941cbadfed329d0bb30a1a", @nested={0x4, 0x17}, @generic="aee862b1963bf40d3df6f9daa87c", @generic="d988fd864c859fc25c480dc525f3337e346119a888341e30e8087551113b921bd1ca1b97c0e2688118e3953726743f8ff475af1bcc1b483342b3b67d635f", @typed={0xc, 0x1e, 0x0, 0x0, @str='-}[:\xd4+*\x00'}, @generic="6ba46b96473c8d5cff9eb35dbdf7bbc5c4839824f72e53cca466eaee380ef7e146ea8f2a2a0a7f780e9b860b4d1df8455bf8445654bb41874916c67bb7326d9066257e41aef9a1873d2bc72907464968a26a621e1ae5e0065e926c9388034033d86e76ec789a03f911f4c5c61bad078b46b772d702df73cee95a0bf0a26b8546014b78963399e4be3a6d61469261a60cb6695a9ebd3082b24bf6ee14739b3e857a6f52d58ff45e6293ae6af3b73c181a9825d3f5af4b1f9ff20472d1884b133bb4e1c6", @nested={0x4, 0xce}]}]}, @TIPC_NLA_LINK={0x3b, 0x4, 0x0, 0x1, [@nested={0x10, 0xde, 0x0, 0x1, [@nested={0x4, 0x90}, @typed={0x8, 0x11b, 0x0, 0x0, @uid=r3}]}, @generic="8e6aa00c5c776b4050fc55d4f94045bd9265b0cb4ccf", @generic="98be183ddf9ccdc0e808c92649be0eb2cd"]}, @TIPC_NLA_SOCK={0x1cc, 0x2, 0x0, 0x1, [@nested={0x1c7, 0x1f, 0x0, 0x1, [@generic="bf5d2630e6ed1ddff6269fdb5380f6555d0d7c9cee9282bae6070af2a2e525df23106570df1d7e83c59c9b066ba45b8666443f56e28f19e71c202d6e49f07ad7c8cef0336e2dc5dd745474bf3c701231575eb226a1ecd066d8b7f41e473a6a24fe9d891c5d7bd0b2209a6880e0cfccebd904fefe11d6a303832095ef8197f9a2c550a2cd1ee649d74b3c5d0ef355a8576fc0b480b361a5d33fec6a8db8", @generic="e71758c65a1e842a4ba054868fe2a16b1ae2b1e777c6df2556634a37dcd3ca854988938233a23accb1d07f8af2424fe54e42458cdf7cdc9f7849355be7bd383c7a592952c98b250adbc3d8742c64da6171214f843d4c675687caafc3944649ed02afe8f00c2864bf694b477f135e603be16b56ad17d6a1ddb549cd26d916eb9ac1f354b8294a92206d43c401ad68a9a977470793c3abc1e56db4d5a9fd4dea461591", @typed={0x5, 0x146, 0x0, 0x0, @str='\x00'}, @generic="f577dca3f00ba62dccd637b0990cacc7282afc2d01be3a68afdcd5871db86efc63da621eb3236cc013a73a61c57d98010ae898c9493c43f70cddb1149c528240edcfa4e23bdfc9933956f4d005f44e64719b1234867ecc33c5d9e9fc86d488490c6a7a186013f0c4145c10bdef72a646d9598e90", @typed={0x8, 0x39, 0x0, 0x0, @uid=0xee01}]}]}, @TIPC_NLA_NODE={0x130a, 0x6, 0x0, 0x1, [@nested={0x1d7, 0x111, 0x0, 0x1, [@typed={0x4, 0x75}, @generic="41c7197eef99ee6a64f118c12036087acd7538771d6637a55c00dcda95019adb7cba77f8f9c04d23331948f699c97cae102ce07e86ba69f596618333555dbfc6a688454508f09b8dd10aa37b66a37a293f98183595ef16d333567e350babafcd2c0ad0414f0a9891d56d0242cb5e26242134442c36fa3e49e3100337f4611f8e8f00e5ec8e978c7be69f", @typed={0x5, 0xaf, 0x0, 0x0, @str='\x00'}, @generic="b9f7b786", @typed={0x48, 0xda, 0x0, 0x0, @binary="f857fb1c39a66aae52832b953a35d773ca28a5c6069ee9d88786a2310419bf8a1581e0f3bf90003615bced837de9dddcaf26399c1e4a98313ffb0c55c5ebabe07c9c914b"}, @nested={0x4, 0xad}, @generic="a9ef23d3c0e43d0b554e10757e51364b60c3f55baaca66665fcd90ba5462f9fd09d20016fdccfa510972720dd05c648843eac1cbfdbd84d93c29c2ab627e528087b4ea8a8509d14f468f0072255ba782c19a2718aa95c9463d03e358d5533ffbe9c41742470126a2187b939ca1c5b51f090f080d7627ee66e03a6f8bb6d069a47512bfe32899e55f45d06a5154c838a1cac9380748ed8052434e605453d564b7dcfb62b09feeebf1b9c7cf602b27421e157fe5ffc6a4b044b627e26d3403fe29e810dd1b485f2ff3be6432057589630e76e37371f53ff59e95de7cde3e38eda00767cb61fc9255ef8d6582a626"]}, @nested={0x100c, 0x8e, 0x0, 0x1, [@typed={0x5, 0x53, 0x0, 0x0, @str='\x00'}, @generic="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"]}, @generic="7b93407443879e77b6df054db9935b1f2780a2e29804269684ce1ef85047fee90ffff6aeead796a17a563c553b73feb72b01d5f2081e98fe9e625bd3040a9e103ad801daf84b3bd4d2c044d69be13fe304ba3bb18653f256e59ad55709d45467107e7c99b936357b4c441495d03a67c36a5e87123a16bf0e9fbaaf3e893b21934b1e1e7804ed3e56e801aac954527406bfe3923621700290077e4fbfa76f8220ab59c0e4b8e05ed590b0972b5411ccda5933cdb7be69042383f3", @generic="a6c91b7cdd454acb2c217172c1051cf6589baad33b69608f95a89cceed3132ef75bac3dea5af0d885bff7f9b2d4e63a184c99da1815e57e20ac6224ebed69ceb60b52d984da1138e8d88fffef1f8a9f46e7727e853f6e47b28b6c6e1e74ee37611b6fabb92238471"]}, @TIPC_NLA_MON={0x73, 0x9, 0x0, 0x1, [@typed={0xc, 0x3b, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="8c13448c33ebf548235707aadd0e9f64b402ba969af5c92c6d9c4bf0dd0208490d1aa795b9e637d8227a2730baeebab8ac4b77e6501ea897b70b5f37698b7058bd9cedf555599adc9345c6f2b866b4eaecd88999f282609799464c"]}]}, 0x1850}, 0x1, 0x0, 0x0, 0x2404a885}, 0x40000)
r4 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000001980)='/sys/kernel/tracing/trace_marker_raw\x00', 0x8200, 0x0)
write$auto_tracing_mark_raw_fops_trace(r4, &(0x7f00000019c0)="4fee5b2d11d6e2ae6ef419e19b1333a831627f5054bfe374f5e6b49a2ea8dcf64b9bf17f98242fb32bac27c33dda5b82818b993182e100fbaac650e58fd4c1b65839a28ecba9323093ce029ad5109659db851a91b848affff2ece9320cf41af899254219736625e558e98142c739a5b7469cdf1508a78501777294bfd9370cf897a1fa83dc835c7832faefc3f26b69e92d4907331d199d44a4becd799cd16485f561b970d74d4cd8593c4096556dba0a6e960e68f774eecf4ea4d6b166050ac85447f4cdf093c44a79d552ed7ee022fdb5", 0xd1)
umount2$auto(&(0x7f0000001ac0)='TIPCv2\x00', 0x1) (async)
umount2$auto(&(0x7f0000001ac0)='TIPCv2\x00', 0x1)
r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001b00), 0x501000, 0x0)
r6 = socket(0x2c, 0x6, 0x1)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/ptyu2\x00', 0x200000, 0x0)
ioctl$auto_TIOCCBRK2(r7, 0x5428, 0x0) (async)
ioctl$auto_TIOCCBRK2(r7, 0x5428, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b80), r6) (async)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b80), r6)
setsockopt$auto(r4, 0x7, 0xf9, &(0x7f0000001bc0)='\x00', 0x0)
madvise$auto(0x0, 0x1, 0x80)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001c00)='/sys/kernel/debug/block/nbd10/rqos/wbt/id\x00', 0x40, 0x0)
r9 = eventfd$auto(0x6)
openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000001c40), 0x8000, 0x0) (async)
r10 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000001c40), 0x8000, 0x0)
close_range$auto(r9, r10, 0xfffffff8)
keyctl$auto(0x6, r2, r3, 0xee00, 0x10001)
openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/ieee80211/phy16/short_retry_limit\x00', 0x40800, 0x0) (async)
r11 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/ieee80211/phy16/short_retry_limit\x00', 0x40800, 0x0)
io_uring_setup$auto(0x6, &(0x7f0000001cc0)={0x26, 0x72, 0x2e4, 0x5, 0x9e0, 0x9, r11, [0x1, 0x9, 0xd5e], {0x9, 0xf, 0x5f24e83c, 0xff, 0x28000, 0x751, 0x5, 0x5}, {0x1, 0x1, 0x80000000, 0x7f, 0x0, 0x4, 0x9, 0x7f, 0x5}})
statmount$auto(&(0x7f0000001d40)={0x2, @inferred=r5, 0x10000, 0x7, 0xffffffffffff3001}, &(0x7f0000001d80)={0x3, 0x780, 0x3, 0x2, 0x9, 0x5, 0xffff, 0x80, 0x3, 0x4, 0xe, 0x3, 0x6, 0x2, 0x6, 0x4, 0x6, 0x7, 0x9, 0x4, 0x40, 0xa7, 0xd675, 0x7, 0x6, 0x7, [0x1, 0x2, 0x0, 0x3, 0x50e8, 0x5, 0x7, 0x9, 0x7, 0x9, 0x7, 0x0, 0x6, 0x7ff, 0x1, 0x1, 0x7, 0x8, 0x1, 0x101, 0x3, 0xeac, 0x0, 0x3, 0xa6db, 0x5, 0x9, 0x9, 0x7fffffff, 0x6, 0x6, 0x2, 0x1000000000000, 0x8, 0x7fffffffffffffff, 0x9ed, 0x49cd, 0x100000001, 0x4, 0x5, 0x400, 0x7fffffffffffffff, 0x8000000000000000, 0x9, 0x9, 0x5], "833f1358ba"}, 0x9, 0x3)
r12 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/ttyprintk\x00', 0x90842, 0x0)
ioctl$auto_TIOCCONS2(r12, 0x541d, 0x0) (async)
ioctl$auto_TIOCCONS2(r12, 0x541d, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002000)={'vlan0\x00'})
open(&(0x7f0000002040)='./file0\x00', 0x400, 0x0) (async)
r13 = open(&(0x7f0000002040)='./file0\x00', 0x400, 0x0)
statmount$auto(&(0x7f0000002080)={0x2, @inferred=r13, 0x10000, 0xc, 0x80}, &(0x7f00000020c0)={0xfff, 0x5, 0x3, 0x4, 0x6, 0x3, 0x9, 0x6b5, 0x400, 0x64c, 0x1535, 0x1, 0x2, 0x308a, 0x36, 0x9, 0x3, 0x2, 0x0, 0x1, 0x1, 0xb, 0x6e8, 0x9, 0x3, 0x4, [0x6, 0x18704338, 0x6, 0x9e, 0x5, 0x5, 0x80, 0xfffffffffffff77d, 0x8001, 0x1, 0x0, 0x10001, 0x6, 0x7fffffff, 0x2, 0x58, 0x9481, 0x1, 0x100000001, 0x4, 0x96, 0x2e, 0x4, 0x2, 0xffffffffffffffff, 0x7ff, 0x4, 0x0, 0x1, 0x800000000, 0x2, 0x8f, 0x0, 0x1, 0xee, 0xfff, 0xaa, 0x3, 0x1, 0x10001, 0x7, 0x9, 0x50, 0x1, 0x2, 0x1], "0cb70e4e0e087c3df96548121a232e1b9b2cd2942669df202d88b5a22adeb573541a4a9d8a9f7d94890839d46deb3c9b451b099086523a0b0e36af75be62ea81159fbc238ef801b64cb70a6f1ae296fcbe0071e763523bb05f3cbf386c887d6317aff976fb02fcc8ed9f3e85f14516fcbdb6eb4e348943a10f624ebad9d4c8c2a6f582666f8096fb929ade690073eed9a3976f0decd0db1195dd87733c53843393924237abc9194d6584b8cd4018241da0"}, 0x5, 0x3)
sendmsg$auto_NL80211_CMD_START_NAN(r13, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0)
sendfile$auto(r10, r0, &(0x7f0000002480)=0x100, 0x6)
executing program 3:
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x4000000)
r0 = open$auto(&(0x7f0000000140)='./file0\x00', 0x3, 0xfffd)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyw5\x00', 0xc8340, 0x0)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
ioctl$auto(r1, 0x5459, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$auto_ima_measure_policy_ops_ima_fs(r2, &(0x7f0000000000)='#', 0x1)
r3 = socket(0x1e, 0x1, 0x0)
getsockname$auto(r3, &(0x7f0000000000), 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
socket(0x1e, 0x4, 0x0)
connect$auto(r3, &(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0x10)
ioctl$auto(0x3, 0x5404, 0x38)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000001480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001440)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="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"], 0x11c0}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000880)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/dma_heap/system/uevent\x00', 0x1e1042, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)=""/158, 0x9e)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r6, 0x1b, 0x70bd26, 0x25dfdbfa, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0xc}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590820806"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
io_uring_setup$auto(0x1, 0x0)
executing program 4:
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9f4e79f46ea89b5}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0x1, 0x5, 0x0) (async)
r1 = socket(0x1, 0x5, 0x0)
bind$auto(r1, 0x0, 0x6b)
listen$auto(0x3, 0x81) (async)
listen$auto(0x3, 0x81)
select$auto(0x1ff, 0x0, &(0x7f0000000100)={[0xf, 0x200, 0x800000000000008, 0x5, 0x9, 0x7, 0x3, 0x2, 0x40009, 0x20000005e582972, 0x4000000000000000, 0x14, 0x5, 0x8, 0x8, 0x80000000003]}, 0x0, 0x0)
executing program 7:
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041)
r1 = socket(0x2a, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000080), 0x6b)
connect$auto(0x3, &(0x7f00000000c0)=@can, 0x57)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
fcntl$auto(0xffffffffffffffff, 0x401, 0x5)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40)
write$auto(0x3, 0x0, 0xfffffdef)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0x9f, 0x9b72, 0xffffffffffffffff, 0x0)
sysfs$auto(0x2, 0x10000000000002d, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r1)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
r2 = gettid()
mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000)
sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x8000)
unshare$auto(0x40000080)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0x20200, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x19, 0x401, 0x8000)
rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00')
process_vm_readv$auto(r2, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x3, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm0p/sub3/hw_params\x00', 0x224600, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
executing program 6:
r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x61a842, 0x0)
read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50)
write$auto(r0, &(0x7f0000000000)='/proc/self/environ\x00', 0x5)
openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x61a842, 0x0) (async)
read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50) (async)
write$auto(r0, &(0x7f0000000000)='/proc/self/environ\x00', 0x5) (async)
executing program 3:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop15/queue/scheduler\x00', 0x0, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop15/queue/scheduler\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zram0\x00', 0x1c1740, 0x0) (async)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zram0\x00', 0x1c1740, 0x0)
r1 = socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0x4000eb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0x4000eb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0) (async)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0x2b6ac0, 0x50)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x1, 0x5c, 0xfffffffffffffffa, 0x8000)
socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/cgroup/delegate\x00', 0x80, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/17, 0x11)
write$auto(r3, 0x0, 0xff)
r5 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r5, 0x29, 0x11, &(0x7f0000000040)='!\x00', 0x1ff)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x0, 0x100) (async)
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x0, 0x100)
mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffefffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3)
membarrier$auto(0x0, 0x100000000, 0x8000000000000001)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0xfffffdf3) (async)
write$auto(0x3, 0x0, 0xfffffdf3)
r6 = socket(0x1d, 0x1, 0x6)
r7 = getsockopt$auto(r6, 0x6a, 0x5, 0x0, 0x0)
getcwd$auto(&(0x7f0000000040)='\x00', 0x3)
close_range$auto(r7, r0, 0x4) (async)
close_range$auto(r7, r0, 0x4)
executing program 6:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)

program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 16, 27, 27, 6, 17, 30, 20, 5, 5, 5, 18, 27, 30, 30, 8, 17, 40]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="325f0320000000", @ANYBLOB="1200", @ANYBLOB="1600"], 0x1ac}}, 0x8000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000f7501fb7bd5d15b77a8295e434bb6c1549dc3922f74d71ce3448f51a2555b8458f5a52481ae59dddf7ac6200047c6e906fa7e642fb73a3dd140881e593785cbeabc4960000000000000000e79fcf8ef75e9d520b20e04f8ce5b3c308ae129e698e892e75ffa206000000a2ce0bf4c78565a8a060ca2e1dcda69bce8e96207e74097923e52b1af5371494de46d7a73ca3f37acfef55f340b902", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x4)
recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
executing program 1:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 1:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 34:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0xa6c}, 0x8000, 0x0, 0x6)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0x3, 0x15)
setrlimit$auto(0x1000000007, 0x0) (async)
setrlimit$auto(0x1000000007, 0x0)
executing program 5:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x1e, 0x5, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) (async)
r0 = bpf$auto(0x9, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socketpair$auto(0xfff, 0x5, 0x10, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00'})
sendmsg$auto_ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000600)={&(0x7f0000000080), 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) (async)
ioprio_set$auto(0x3, 0x0, 0x4b34) (async)
socket(0x15, 0x5, 0x0) (async)
madvise$auto(0x1ffff000, 0x7, 0x100000000) (async)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x6, 0xfffffffb)
mknod$auto(0x0, 0xc9, 0xc8)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x2664c0, 0x0) (async)
execve$auto(0x0, 0x0, 0x0)
mbind$auto(0x2, 0x100000004, 0x100000000, 0x0, 0x3ff, 0x24000)
shmget$auto(0xa, 0x10563, 0x568d1af2)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
io_uring_setup$auto(0x5, 0x0)
shmat$auto(0x0, 0x0, 0xfffffffa) (async)
mremap$auto(0x0, 0x4, 0x3fd6, 0x3, 0x20000000)
shmctl$auto(0x0, 0x0, 0xfffffffffffffffd)
open(0x0, 0x210800, 0xe1d2b27bdc14aaa8) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
mlock$auto(0xfbe8, 0x4)
executing program 5:
unshare$auto(0x40000080)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptye0\x00', 0x121200, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003e8, 0x14)
madvise$auto(0x0, 0xffffffffffff0005, 0x8)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x103400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f)
r2 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x40202, 0x0)
r3 = pidfd_open$auto(0x1, 0x0)
setns(r3, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
clock_getres$auto(0x5, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000280), r3)
recvmmsg$auto(r2, &(0x7f0000000200)={{&(0x7f0000000040)="4507b66c36452a47ed53d6a0d4ee1c242b50eb998ea974cc27124a26d9391eb70d834fceebe0a770c3252033350b74b5bf210bd4ebb0d906f5a3aac466718de83d24144fd6cdb269eec9b1c33391a92a1840a2b424d04303ba120bd62b233c95d7fc5d483c8d3cfde6af678c4f6e436b989978383da2586e78c616c9b29439e92e359440ad6356448e24e3d5275b880cd89717c5382d8cf3303ffa2e8d82e5b7c9aa5028a4bc7505a740b079ed8cedd4ce1270ffa83d3cfdb106ab75377feeacd1e60c0572fb126969e92f5335", 0x1, &(0x7f0000000180)={&(0x7f0000000140)="103ef13422702fb78fad6b8b7198d08a003394dc8ec06cea4f", 0x4}, 0x4, &(0x7f00000001c0)="358888fa5a2abd3605722cad7c5f38e0f706da486f710a4bbd3f0f2ad35b1011036477b061", 0x1ff, 0xfffffff9}, 0x8}, 0x5, 0x2, &(0x7f0000000240)={0xd8, 0x800})
executing program 5:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 5:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (fail_nth: 1)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 35:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (fail_nth: 1)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 3:
io_cancel$auto(0x8, 0x0, &(0x7f0000000140)={0x0, 0x100000001, 0x2, 0x6})
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x0, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, [0x1b16, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x94)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/net/bonding_masters\x00', 0x100, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa801, 0x0)
ioctl$auto(0x3, 0x80045518, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0)
ioctl$auto(0x3, 0xc0481273, 0x38)
ioctl$auto(0x3, 0x1276, 0x7)
executing program 6:
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fedd, 0x3, 0x6, 0x80000002, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x82)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130008000300", @ANYRES32, @ANYBLOB="0800610002"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async, rerun: 32)
io_uring_setup$auto(0x6, 0x0) (async)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73) (async)
socket(0x2, 0x1, 0x84) (async, rerun: 64)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
iopl$auto(0x3) (rerun: 64)
mmap$auto(0x0, 0x400005, 0xdf, 0x9f72, 0x5, 0x8000)
sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) (async)
read$auto(0xffffffffffffffff, 0x0, 0x80000001)
open(0x0, 0x2a4c0, 0x20) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) (async)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000380)="0cc1ea2f336f190d7826e46bcd67faebde0a7fe1730345df355440ebf3ecc867751ccb0abc426dbf08cea73392463555e4d6e2a5b2246c7e22b3b8a82fad9bdfa6ae538a8df8e671ada6bcb165738f3a8aade4ee4736fafc674bb4e01a291bcae11e08ad7c55f5cadfd50883a8ed176f11152424", 0x6, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xd}, 0xfff}, 0x5, 0x311)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x800}, 0x7}, 0x3, 0x0) (rerun: 32)
executing program 4:
r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x440200, 0x0)
r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0)
ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xf6}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x85}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x3}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xc}]}, @NL80211_ATTR_FILS_NONCES={0x75, 0xf3, "1c11ecd9970e67e4d40fc69b3cf07ff1b3544de65a6bbb8f228880b363db04fe56c0dad6506ef4279fcc2d81fb50fac4b49b0cf46aac3a1e3b80f978bf462b95281f8c3d40e30318c39c48b3c0d1baef067bf8e40628cb83f13eae2c56743fa9ef1d3b38a99de97a522fd6ef4978606b63"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40c0}, 0x2000805)
ioctl$auto_LOOP_CTL_GET_FREE(r1, 0x4c82, 0x0)
r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/dev_snmp6/veth1_to_bond\x00', 0x80180, 0x0)
r5 = semctl$auto(0x523, 0x3, 0x4, 0x7)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x26c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0x75, 0x1f, "aa75166a13596112e01d1659150b3fdca197630b1d349ba43d834caa49ea684aaebffac526e9e83a12591eb2ba61d43ea7fc728f73b7e576631aab55b8e0c9f5122bf1ebcd6ab3c3db162222e75b5398f50aa1683e79c8b2de8f4f30302ac9726401d7bd03a332cc64b9ef4eedd1ad71b5"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x72a4}, @NFC_ATTR_LLC_SDP={0x1d8, 0x13, 0x0, 0x1, [@nested={0x1d1, 0x13b, 0x0, 0x1, [@nested={0x4, 0x11e}, @generic="0777cb0fdb6614ffce8b4d461aa94883cd7b6763a7adc4f9a717478684c96cf66eba2d0b8c86", @typed={0xa, 0x23, 0x0, 0x0, @str=')#(\xc4%\x00'}, @typed={0x4, 0xa4}, @nested={0x4, 0x147}, @generic="db5a6a7663b6a4473c7d1e7774cc117b1bcd6a1d2dc078377b02208d0dbcf57a651fa5155fe3b48dc5e8ebd50ca958fbbe9d79d7b8ecb113e5cc774ed2db1031a7e9422fe8b4ed886c14f793a5bb82a372afb3e8b1729c0efdb9434bd142fbf631adf6908975fc54bd8b5f221e9a1f71b9b1de2d4e68ff2d7ddd7a833b58e08e1b1a53a9c1b018c5b7180d98700077e1a5e36631b52c8da79e13f8521a37a9b9e2f860fa83dc5956f1dc23644449aaf9b67a3c32da", @generic="a8887fc44731fd1faa3e52f12625640b51024e4ed017ce3c0b85521654187949e8ae0604c8cbbd10de61f64bc152338cf42c50cbf74f89ec80ad585f8310adaedd4a5e61fba69f183c8a8d9dd22e885ffb4c0715c0702b98fc3cfe97c49d89edb77cc65fce6fa785e0f6c87561d7009948f35bf3fdbe03af3c963775670966f29450e959ecbb1b6f67e60f169bf52dc726a3995fe1ef0704fecc7f685144ddbb47e78de21512dd8bb844205d5ec8dcb0685ecc2368e89c100270899828ec", @nested={0x4, 0x7b}, @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x124}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24008800}, 0x48005)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = io_uring_setup$auto(0xc, &(0x7f0000000600)={0x8, 0x180000, 0x6, 0x5c40, 0xff, 0x20000, <r8=>r2, [0x1000, 0xf2, 0x401], {0x3, 0x7fffffff, 0xa, 0x7, 0x10, 0x3, 0x7ff, 0x8, 0x4}, {0xfffffffd, 0x7, 0x7, 0x7fffffff, 0x2, 0x9, 0x8001, 0x3, 0x4}})
sendmsg$auto_NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x110, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xf1, 0xbd, "8cb284331f41af92bcaba07531342b34bfc7de75578aebfab51514549da81564348a3d0bc519cb0179022330dcad9c1305338c01ad3a0834e08e89dd5f913d5dc59c05450171b85efcfa88311637141e58e29c91b0a9809b7a3614fc4c01723e77f4651d1498f50e67baf4f0b68b189cf87ccf378feec00710458375bc3cd8e2e7cc45cfd65d78fc8497d234cfe68adb6b36def59f17758162288f3716d29d8ba67e3ad26108ba9ff5be09aad829428d94622a6dbc68fc7f9f7107a3f850146186411783ce28700db5938abb1cac114ad9a11e5dff0780a8e34396ffc42d7156ad6fef2198c3241e70484c0e7b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x110}}, 0x20048014)
sendmmsg$auto(r6, &(0x7f0000000a40)={{&(0x7f0000000880)="c8ab1d74e1780591b27536fbc7a4ed054b1a035a53cd8217e07b6254898e9a82365af7f5a06a3ceb48f8b68b5e41a6a5f7ea7a9717a2c953694e1a50750b0d5098f68c88ebcfb53ecbcf8c2af67319bd3aa6", 0x1, &(0x7f0000000980)={&(0x7f0000000900)="1cfcbbd7c3a0d1b27220d859397359cdd924f4d71c94bb6ca8169949765dc79496b4d349adea0d8266227572ab90aff963974eea161983b7c1115079c92909e290bf3ed91bbb98799469fc4add18366802264fd565a1b7dd9b149f2f29db3ba37d2ae1b9071fc1881455a0d192c3112e88853689042cee", 0x2}, 0x79, &(0x7f00000009c0)="efdd869f14a5eb598f89fdef63fd3f5671ea42e41a89a02c0dd77f5251f3c1e7b96611a78768f12f066ed502199b6d4cf08d52205ea560bb5864f3b4a6de80b020ca7f921c77899013817de381384d3d0839de", 0x8}, 0x7}, 0xa, 0x7)
r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000ac0), r7)
sendmsg$auto_NFC_CMD_DISABLE_SE(r7, &(0x7f0000002040)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002000)={&(0x7f0000000b00)={0x1500, r9, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x1bf, 0x13, 0x0, 0x1, [@generic="b5a93028647cc948654396626e76e4ea07a35f80abe6e024813eacb1c7dc92662186b1c84e2c9a22cbddfd09263823c00003add2fcac4e61264eb0d0e386ba0447718272c9f82e8881ea184c6c726e1d698f695ae73e44a321ad04742da7450c26dd8b90b8e74f6e7cf7a6b89e3b6ef1103f06e6cb67c77e9fd66fd6a54d3e58b12171aef3c868614a543d872d1fa15c1b45f23b34", @typed={0x57, 0x12, 0x0, 0x0, @binary="3c71924d0efc6da202998e280745a48875f04acd9625e2e8af9f60fed8744066421b027a80841c257e886535b8461093d7be8a3d2b625e52bfb32422ec592b25988fa950d43cdd158a353a961d35d4496e3887"}, @generic="517855dcbabc55df8fef813160cc0b86640b4d0c7cf6", @typed={0x4, 0x29}, @generic="b0ba94cd55f4c5a31acbb9b230a371fc25dd3e836da012cd6bd43efed66260ab7d8dda27a2a9184109cdcf6449195ae38198dd2655bc76e33b0ae80d8dbf18021d17cd27b845fd58c85ae3be54eef7d14eefb79cca6ad4a2e8e81061a3037b54a45a126555bc31097e5c3bea0e05cf2879fc2e4c5267fae82aea5eaade58bfe2b28ba4ca28c4385c5f09c8f1eb6fa1dbcd9d948ecc61eb4a28a1ae341360d52d856454470cec96cc2a93bae99f058218e6946df5"]}, @NFC_ATTR_LLC_SDP={0x1304, 0x13, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @pid=r5}, @generic="3688d1845da8951c51b120ad4955c652b9c067cbb57d575f9efeff688de6cdda0cd92cd150066c29effa16584af436f9105fa3a52a7ad41049d2f117183e2706c72cbd6432e0da5694220462", @nested={0x23, 0x13c, 0x0, 0x1, [@typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@mcast2}, @generic="3893d3bfc2aa91", @nested={0x4, 0xc7}]}, @generic="030ac1764ed39e2522da0607958631815ef3d4a07febf604f66ec6e51a87dc273b55a808e561020b922fcc0c0bce95c0d36feb7ea1164b9683691402ab1750c7dd4c42f5ffb16709dc7e0d0d3d1f93b4ad02ab292547b3b05ac7204866d34fcfc63dc46b3a1373b3156c0002908eec43dbc907061be804d0a0cc8b6497fb4688a99aadcd135adbe961ea414d80ebccfbee01ac9a44853e275f42244459f7c435be46101f4fe549b3641db75d76733fcecf02cf548c5d48f7cf8ed25ea74126eb22b3c1373cc102f8ea2ef832362b1d3db0ced1579b699b7abc1515edb257d8aba067a9066f0a71dc975bc620ec483b96d887d4f492591a12bef8df0dce26883d3fd368256e38fd9fe8fd3a4b247da0b854bd9e8fcb42984240ed93b93738f72da73b31580e20fdc470cbadc5bc7de788a4c92fd0aa8e7a441560ff3155252878416c4d11d35e8c2fd18e5122906a3053e4f41a6aad45afc0d13761cb622c1764039dba47f3901b569942d781eb6a4ea474215029c1f7447c3171a7eb11965e15bcd7f8545882e3ecfa8b2b3642f0ba293b353f78f5d89338486bb23238ef8ca7c98c963b67a670894f01f05858baccf2bb239a582c3c7c16ddf8d7a0fd7bf557b4646fc590f59ccb2ef59ea0868e8ea553fd8be8e2b514ee9eca40c2b5dedead57fd045a2820c6440fd967c70d5fa02e72f221696e3abfee34f7f9c42054d52163b394ad2064aa207fe8e7da2426717d7439e4c7c914637874f8470c3d3b96dee05a84ca4d3074781d9682b5bd996a264f931d8e8571a107123bdb3b44fc76df6c162a281db2c60e17d422a9c36f9d18116d35529ca5e44b7851309c9e940e335ea66b693d4b6bd29ad73ef65193ad7557d83e3a33e99511c55f28f108c8918af91c29358bc303d6acfe7db3b9a6563185a8559a6aa41866560f8ed74d93b798767e2a3f2a5de170b75679f052cba43aaa74b5bb821a57cb506f49572ca889932f7f8ed56ba0ef9182defb682fe9bfd121bb6a8aad95c63c98b959369bcd17384001ca9f43bd9e75d8e017c0ae81dacdae039849df67472586331dc0bed1955f748312714fb8ee230beb5470376023a5243307210b695b79af52468e1b4a11933036702088cb0c4da76c2b7d385b7946acb2b12033e9aa318e3284350d95450b8ef8998d98f64e3863d85cc8847f924f67410abd8138c58506f6e2f1d04badddeb7993a38b9a45cc49b29d541a3e4d62f1fd3537abd68eabbf2d91762f49c155b188304c5a30ae05dc7224e46ef050355428ecd3c406081836ac2fd3d9e11f989ed2b928f9f7d3eaf4a7311e417ee69b8d90e8d784d91db2a71822db1c692fa8d764bca84c9d71f00d28f135c17b4cfdb480a94fcdaf1d21022aca0cfe8dff7ca81a10c30d9081c0c7c4ef9c2656f6536d7f7ac077d6f6e7e18a1250b03b29a359443effef50f19727778c767b8bc450820fdb3eadcbcecb1ce38c52ec2db8d70a93f89816a735896f4ef2cd1daaf06591bb1e52d59db9ab18e82fe15c1608d044b10cda40fa2db90af5f99194adc3b8feaf6208c857e5822f5c9d7c1d5aa1f602fbee2b212b58446deed0061741c82216cf415cb8ef13b9c590bfdb90b01d2ebd76c78267204fac4242e34e109a7010e8cf17b5befb38c040b8ae68e1e5d0bd4b7e5009868a1420ed5956f24276f93006d32556cedd434b3c2444d0b250b14541f8f92523efabb78ae60f746ecade8780169eef92e1af364f361afafd52054619deb63513d086ca1f80de83b355bf8424feb57a6725f6d7d0559b3d2fddef6dd198bea41d5847ad3d5a7a651c5575d3180e00c11a461b420770ceb81e041ef4d010e446df9d5c51aa174bbc3babffda93741da52ddce4ce43c9848e9a35e230675b5b62107413918b2fa8dd6236e3b7d4dcfaec42881fb4ed28b6b8632a0c383b1020b1c0b67bf16e84cdd5dd40ffc5290a1cf9957da50897b47dec5129d5f85887f0ca27c53cba26f00ef73609f7cae06e96fb6b1252dddec677f0e455a5ff09825cafab0c349b999d8032e8733538fe563cd1424b101b17cf4a263df053e5aa9977b1f113aa8cfdd9785e0e00b2a342772fa5fcb29b6be51b5c3fbd301f8f0fb062f82040e68ca8731a89eb4e875a6e05b27a3b1be8bd764e54b765d2ee5e57dd27ae713a10eb7f0274ddbb16797cfdb970437d3b0aefc65f3597ce4bfd4d37d4b74c5f8b36286af8a68f336b01d3747a60b1f5fcbe5f7c74244a4a3b27a8f4a3372a36ae9dab923365aae5918850b0e11cd239065bf41c9e8059198cda3dfb13dce93c331f462b799e3143277b8f47164fce7c8f8297d4fad6b9039517095821a233a1cb07155689829a96418e66b477d9c667e07054a255d26a0e3fda3b7bed49d7f599cc5cd3d8570c9ea80ea3af6b8a2407918e64f8371a9e8c896a3733ec825dfd9b907e0ae8d5626706126ab4ecf530a004cc6f1dbdb4090f2c2e70190af997c64b5eddaec86a6cd92e40085e276620f45801274456dbfb6ebb0bd3d9be0f3805503bd516cc40972d5e03f4327c34f58cb4854c0fc4d2272d6d5bbb74f7df943229f295d5d5d3a461add37d64d5c4492d0ec1855e84f2a3e239b11bb22bb073827bc6dddf5af8d79f0abf4ba6aa1d9f502d866d012e719487d4fe59e86f85392a80b3984e97039caf8f5ff24bfcd4f630577526b7f931bd35621b4c9f2c5d2e6bd8e12caf1fb71264026faa7e76c7d00f85994adeda181cd07972f6c20fd9e93a7a72fc844b3334a0f2f6ae1875d98b60154db9858991ba37abe049b4cf1c4bda8282fde9c50cf7de8c4f944250e617dba2a3273287d4278b3dff6bf1a4b61df5ddbef3602bb5eb1306f60edfb00665a918283da325b94ec27e2e498abbd6112c28f49bc5c589c46fa3f3092a15905183156c52a561f27e878144ad8daa2d2508364183268822e027e0119d32a49ddb46cd95d8b0311491d4813ce32ec6cee48a149a6af9790dddf269931f2164a5ec8e6a383c2c34115daa8e681729cd598fd96118066f760b2caa0151fc1358b20375356f7af8842ed2e8acdd97c7034833826680e01f5d896429373690c600dd522b29385ea1d369014d8caa644eb6a1fe7fac312c7d4485fead58c922d7dee112f0956f8e9a05a54cc07b2ff2c2f55f15bf7f5c783224bbd5e2b23a2860039e99da5c1a56f8c07e0f8df696a8b6e48487e3e2b7f9b1b4226b681aa4b3e3cb6b1efd653261483295c32bed4271fb2888fcfe7575fc16fb3258f6d022ddb515e0dda3bb8decd2df63154ddadb27f6ac738eec1394763a7bc35a849aebf89983dace2ad5a65e40db91320c55502aa72c3b6327a4aa43a11a9eeec015899b0a94e7c33d8b3bdec1d5757c99fd3d6dde319cab3cc9404f096dcb3fbbad829b935dc3e5435fad27ca429d399a06bcc6f3f3ece42d67ca444fcc288f7fbb2a416d8c4c764144ecde6412016b9dda53e8bb76735fcef10718b899aa090c0dd7510e6b55f22b051a335aeed90dd3acb2b1915c180c93a42ebd259ea154db206e7bef96eb8f6c35a6147263e2f137fdfeda54bd320972bc89c976afd2e312fda0141f7db4930c7c2d96d4c9d1f2e4da1066c3bdb4a5986f61b6ad7c6736b5229c5be7d5b4e8114c2ffa85a7b66904d71ad6add260ba6025b976b1ded742a29d6e1d78ddc44e30903ac6fd0ea24f978305dd9d50a0cfabe9c80789f5c6a53803642fdbad91e47b50e24e695b69606cee5f1457e0a614eb322600a44a99e51f8c0767826f8220c0a91ce5b0fcec52c0ff5b1045c183cc1c84e2d3b0ed22c419aba3ee6a90ce33b2c23f7b76645efd11bc9e59073b70d78adcaee65872f0f3d531fa744d616302ca072e344ccaf655977424011f68fa2f53430c8aa9661b840e24a8c60a43608d41021e274154708901b9b7357e37ca6ef6ed15c672fcc80b286e8dc5da32105e32aa1a2b9ce0b1206fbc61efcbc07c33403da9aada59c87f4badfde845a5cfa53b07fefcbc52c928b1e5155e5047eb73686ec5611f417c981c3fff7bda4b6b3b177b7cb13630ee643838452402fc64a731e88aeb7b1f7a0b693c37e8a8086e9e35dd4a113a1eb9f2937b75605863a9905af04cf8499cb360318ecb142a37be49d0791ef9e00860e7bffab4fe13f6fd6f33541f5661735670ecacf8f5941f8fada1c3e223af421f2f196ad64b1aa5f3f6d85c06e19614521e129a57a8eeeefeae63c6bb6fbbcdee89f1129ed9a5e90ca0cc0b5737a11709b2021a0fb85fe24d3e8e006bd6cc469fb68acaea9cb9f7288df50c476df36ae3ef452cfa24c1cbae0cb2e3cc7ad8736865e67c56493c4e92df4f3ac2d3c447e9bd2e470d705a20b2a7395b700499b4679b2bfd5f8e455db2634969c5249a5da7a5491f6004f53cd757a80f8337c50132b4961a1a53390c54ddf8a144f26009130061d94d64a2b68f70245e7f5fb54d125ee57aa2fba65dae070e9794f78ea1556f142fd65c350c4cbbdc89ebd2a0ff05b8374c6478e68af21e6f89efd0d7b74a02842d182cdbd7452e006e1b1d6503c3eef4f289964635ef3b966aca6c1975e758337d99b1f9ac8a6f46baab6f3cff75bf0d71afaf889503eae08ac75fba54b30e16f97a20492809cd49e8f007348d6acab25e2b557ae2ae6ac370d41cc4ef0ab9622eb9552c882ada503587bdd25268f5abe386016032a238e861c924ecc8673d96e0f0a4aa9f505ce77e6e0e9dbb9c813253482cd8554f05eb46e5196ab53875c0d3c46ad2a5eaf465679107780ae7a85e0055de3cc0aacd45bdd5f5338d0c5b2223e0f585496a878712cce1d2122a83bdc3c818251eead0aecd0959b87dcc5d0ce263e7a17602e90f0c93504957ca0654298e27a4207fb42aa1eb0a131c9821f737c73fc351c60999eb3a2600c61b823aca521a283f7f76178a5a973de00e2d2a2cdb329eb4d32518e17b048bd2687ad3a8ddf114a33ce55f92b2f50bef5fa64dd986d9e647dfd364ff83a7671a3b7209caf78d1747983d22693f517b8bfe5777ab53c0750a90502da694835ee31f2423387ad4fa207e023756161dd224717b90038c74f05fe106fea4d184f2db52595034ba968db73f1c673eb61025a76e9f9c420ca80f2694dd06571cb2600a6cc340aa6f7d61fb32e000add585725cf92dd5582517a9eacc5db01137ae689bf2f2d7796d1c431829bac149e59128bcd058cbcb332338d8c6242b1fd1a20e2019f85b6c71a84553d94b53d5302daef0fc1326b42e84637b7827c4add9b00b45d12e3c128a004b182ebeabdede9b2f14c67d5b872ff4d1b8b0a3d496e90fe54f3ff4a7cd27818f4dbce2bcacd80aa6e0427caaaa0513fd605f196e4b6553f411a896f2b2526c64d8654e5c53cf5b5fb21cc0a021f7d3655c7698ab3e86a4553e7af249014199f5644527bbf812adf9453c52a2bde974808490c5bde3c6521d47e37eec3fb2150af44ac290c6048bd9a5e96852ca5503bf978488055846ea9d8f7120fdc897878bbe90574edb73e1a26ac4cef2f9ff9c058cd58215886aa8d7da51a5115b5a854a4c22b5be79352476d0d989d3c81d17bc947411382f58824dc53e02ac14f80c7888deb26a11383c584795d9cb1fd6444d30473eb3e4dca93896995b147b936a440e48bde599a20d3d18a0f4521d07104ab69fb6d178bfb1ae59988440239f5513bc885f71ddf0a28db2ad4bd70bb5c8f79136ccee4ffc226171e696a638d1a9337d158abb5a5578708d33a0cdbaf115bd2ae2ff3a967ad0217b34578bf23b1f", @nested={0x280, 0x94, 0x0, 0x1, [@generic="a51e2533e04ec9895d0837fd9d8062c010fb80affe17bd69ef5870d8d2427cee31577319995ce9c7aec1146e6ca51518f3334a586d4a58d5a7f244aac2759be6e8cb51880d911b0ebefde35fd2c4c18fe7066ccdfabd848e0dd92ba63dcc4855e1a89dd04be42b52215a8f", @nested={0x4, 0x7d}, @typed={0x8, 0x7f, 0x0, 0x0, @fd=r4}, @typed={0x4, 0x90}, @nested={0x4, 0xf}, @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="716000b609e86e7eb2634f7346d82dd9e0b47e4380fec2a7aa08b849b3fa1bd0dd89a11f7dab135e840c4bd4bc3524aca5d938940a61bd41bb70b258bb3d2eece98edd1932a9e5e8f890dfbae70cd7c388a7240d15bb13c358137246a6c22d0bab460ae041a47dc2df6aba0093ad5f77d6d83bbd", @generic="ea13e1e4a9df7d72c1382302916fcd1ec2d5b8142a1dbdc9c0f180e678e80000ef8e30e90ceb7e71d742c9b610915917001431a4f0e04e7f4d494bf09f7ec384b0c742215bb2da3f2eeee3e75e1ad7cde9317cf414911e435485b63596d9dd0d9bdb62a3dd3f47c5c364b5c07d6866030b93fccf84d8a2c3140325d05630412956d7d4ca0ebedd8977c729720441bedc82b9de408bd7f6e09d85aa90583956aeac815e774780bf610b8c4bc6b780d945588076288e8d012a630f906e7dc8b641adb99988de3f01436d698b73daa148795e350d8dba6905f4cda3ba069dcae0037d6d38", @typed={0x8, 0x52, 0x0, 0x0, @pid=r5}, @generic="0603a215645985a28ca9c72a7401923390353359178be19bd6bf9da854c173ba7c629148531a61aa504a30a29c4e1486bc3c6d646c94ad551ded3947fb344b01b3ae11bbd7110fb153eef80be93da1bcc871c04073e21fb53af40ec407dcaff756cac0ece5dd65c64c81dc7618fb77fadf584e79f484a7b32cead163d4816298204f2d2892f299699d7f95275222dc517793fd8a7e37"]}, @generic="db9921b8712c4187"]}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7fff}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0xffffb3bf}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x9}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x38}]}, 0x1500}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r10 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000020c0), r8)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x24, r10, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x9}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x90c7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$auto_NL80211_CMD_TDLS_OPER(r7, &(0x7f0000002600)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002200)={0x3a4, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x100}, @NL80211_ATTR_FILS_CACHE_ID={0xac, 0xfd, "a69e3773297a672e3cc4978a49ebfee2709e127ccf3a18ae51c058db24769ad2f7be817fd348fa2bb981a08cfcbe7bfa7847af6b72aee4ffee752aa3567c1475317db1133bf054d3314dfd898a688ae185607c524a19f524bfd9e77c91f8a40bdad8d93cea79c3cc3262162fa3bee630ff10befcab6635e4e01459042cbbb94860f5da58bedf59cacb8ef25606d34c8e7fc25cf682caf3c3bb33f9829a60053cdc5bc114c9866b51"}, @NL80211_ATTR_MPATH_NEXT_HOP={0x60, 0x1a, "09bb2d4be93c57cd2ac4e77998782b8c26821725c886d13fe61141ec9e2e029b347e1b8dd8462ee46d902d20e458b90b2bc27174f50994b2ee6c3636ef9e89325fbb9170e55ba3f86b3b9d234842d914ade7eb7c209e2c5044c5d2b5"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfff}, @NL80211_ATTR_EMA_RNR_ELEMS={0x123, 0x145, 0x0, 0x1, [@generic="9435e0081e48ed0dd83493f6ef418ec4c027d8839529568e27dfe8f79416d2636918e6c6cbb69a081f8fdd0462b2f3e648a3745c3f4a82d7350180a4fb904b692c01c878aaceb6674ab0", @generic="a98fd30e79486ba62a8d53df878139f6c865a8857da9f8d040b71cd35487397adb34c350b2f7df2906149d2e73b3a315037cfb13fef0274feedcfe36d66fe9d1bdf9c38f2ce0a6a32593d06861d097b863ce9a4389fedb086570512d0a666c9447ecf745e60701d27b4419887efb10ab9b33fb872804f4737046b276bcf09e30fcd281ea72ab1f963fdaa0fb08d82a5e9dbc167d820145d9a9776bbb1ce59a1c1de1434d10d1810b5cbaebc7b2d8aa9870da70423bcfdf583a0b4a360337cc8ee81cfa3317f87efaae2cf858759c2dd8df246e1efe"]}, @NL80211_ATTR_REG_RULES={0x139, 0x22, 0x0, 0x1, [@nested={0x1c, 0xfe, 0x0, 0x1, [@typed={0xc, 0x95, 0x0, 0x0, @u64=0x4}, @typed={0xc, 0x83, 0x0, 0x0, @u64=0x7}]}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@private1}, @generic="fc59aef7f55aca20a7b4d9e8b5cd254eb87572d0c6a5970d42394d8b7d52eef5bee031533e7f929ae466d680a8ce6860f8740cf4ffa8524e89b1c1c6721021aef30e548dce5f6b439dbb8a28c88acab6eb09a13bfa", @generic="1ec45b56d2c065b967d8d326086c14a2bc31e93c886d539facaf5925b70e6b67c77e20fef3e56ffbfc8fc3ede408ab129f3a387372624cc6b0dd3ef2656316c51789244d9fa1058d5faf7106cff6c33daaf195a8b1ea8b15656eb51bc73d8840a53f61184e760c75b3e3d1e5787deba0f342ac78261a297b8309d7a22049ce437bef2212d6f1cb13aa8a8766ab48eaa23412b69ff4fcc6f8c94460d9920643a4a9763b18", @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x3a}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x800}, 0x20008800)
r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002680), r8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000026c0)={'pim6reg\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002700)={'pim6reg0\x00', <r13=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r7, &(0x7f0000002840)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0x98, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x1}, @ETHTOOL_A_MODULE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x34}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0xf5}, @ETHTOOL_A_MODULE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x841}, 0x20000000)
r14 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000028c0), r2)
sendmsg$auto_NETDEV_CMD_NAPI_GET2(r2, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x24, r14, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r13}, @NETDEV_A_NAPI_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000084)
ustat$auto(0x0, &(0x7f00000029c0)={0x1, 0x7fffffffffffffff, "9968858a5e88", "72c0da88392b"})
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r8, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x48, r11, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x8}, @ETHTOOL_A_MODULE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40)
mmap$auto(0x8, 0x2, 0x0, 0x971, r0, 0x6)
sendmsg$auto_NET_SHAPER_CMD_SET(r2, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r13}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x8}, @NET_SHAPER_A_BURST={0xc, 0x5, 0x2}, @NET_SHAPER_A_BW_MIN={0xc, 0x3, 0x40}]}, 0x3c}}, 0x40090)
executing program 4:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r1=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async)
socket(0x2, 0x3, 0x100) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async, rerun: 64)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10) (async)
eventfd$auto(0x3)
eventfd$auto(0x0) (async, rerun: 32)
pipe$auto(&(0x7f0000001000)=0x1) (rerun: 32)
r2 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4}, 0xa3) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
socket(0x15, 0x5, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
gettid() (async, rerun: 64)
mlockall$auto(0x7) (async, rerun: 64)
fallocate$auto(0x1, 0xa, 0xfbf9, 0x3)
executing program 6:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
arch_prctl$auto(0x5005, 0x9) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) (async)
ioctl$auto(0x3, 0x401070cd, 0x38)
executing program 6:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
connect$auto(0x3, 0x0, 0x54)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1)
io_uring_register$auto(0x2, 0x17, &(0x7f00000000c0), 0x1)
mincore$auto(0x1000, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <17>
bisect: split chunk #0 of len 17 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 18, 27, 30, 30, 8, 17, 40]
detailed listing:
executing program 5:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (fail_nth: 1)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 35:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (fail_nth: 1)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 3:
io_cancel$auto(0x8, 0x0, &(0x7f0000000140)={0x0, 0x100000001, 0x2, 0x6})
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x0, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, [0x1b16, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x94)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/net/bonding_masters\x00', 0x100, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa801, 0x0)
ioctl$auto(0x3, 0x80045518, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0)
ioctl$auto(0x3, 0xc0481273, 0x38)
ioctl$auto(0x3, 0x1276, 0x7)
executing program 6:
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fedd, 0x3, 0x6, 0x80000002, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x82)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130008000300", @ANYRES32, @ANYBLOB="0800610002"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async, rerun: 32)
io_uring_setup$auto(0x6, 0x0) (async)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73) (async)
socket(0x2, 0x1, 0x84) (async, rerun: 64)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
iopl$auto(0x3) (rerun: 64)
mmap$auto(0x0, 0x400005, 0xdf, 0x9f72, 0x5, 0x8000)
sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) (async)
read$auto(0xffffffffffffffff, 0x0, 0x80000001)
open(0x0, 0x2a4c0, 0x20) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) (async)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000380)="0cc1ea2f336f190d7826e46bcd67faebde0a7fe1730345df355440ebf3ecc867751ccb0abc426dbf08cea73392463555e4d6e2a5b2246c7e22b3b8a82fad9bdfa6ae538a8df8e671ada6bcb165738f3a8aade4ee4736fafc674bb4e01a291bcae11e08ad7c55f5cadfd50883a8ed176f11152424", 0x6, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xd}, 0xfff}, 0x5, 0x311)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x800}, 0x7}, 0x3, 0x0) (rerun: 32)
executing program 4:
r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x440200, 0x0)
r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0)
ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xf6}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x85}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x3}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xc}]}, @NL80211_ATTR_FILS_NONCES={0x75, 0xf3, "1c11ecd9970e67e4d40fc69b3cf07ff1b3544de65a6bbb8f228880b363db04fe56c0dad6506ef4279fcc2d81fb50fac4b49b0cf46aac3a1e3b80f978bf462b95281f8c3d40e30318c39c48b3c0d1baef067bf8e40628cb83f13eae2c56743fa9ef1d3b38a99de97a522fd6ef4978606b63"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40c0}, 0x2000805)
ioctl$auto_LOOP_CTL_GET_FREE(r1, 0x4c82, 0x0)
r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/dev_snmp6/veth1_to_bond\x00', 0x80180, 0x0)
r5 = semctl$auto(0x523, 0x3, 0x4, 0x7)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x26c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0x75, 0x1f, "aa75166a13596112e01d1659150b3fdca197630b1d349ba43d834caa49ea684aaebffac526e9e83a12591eb2ba61d43ea7fc728f73b7e576631aab55b8e0c9f5122bf1ebcd6ab3c3db162222e75b5398f50aa1683e79c8b2de8f4f30302ac9726401d7bd03a332cc64b9ef4eedd1ad71b5"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x72a4}, @NFC_ATTR_LLC_SDP={0x1d8, 0x13, 0x0, 0x1, [@nested={0x1d1, 0x13b, 0x0, 0x1, [@nested={0x4, 0x11e}, @generic="0777cb0fdb6614ffce8b4d461aa94883cd7b6763a7adc4f9a717478684c96cf66eba2d0b8c86", @typed={0xa, 0x23, 0x0, 0x0, @str=')#(\xc4%\x00'}, @typed={0x4, 0xa4}, @nested={0x4, 0x147}, @generic="db5a6a7663b6a4473c7d1e7774cc117b1bcd6a1d2dc078377b02208d0dbcf57a651fa5155fe3b48dc5e8ebd50ca958fbbe9d79d7b8ecb113e5cc774ed2db1031a7e9422fe8b4ed886c14f793a5bb82a372afb3e8b1729c0efdb9434bd142fbf631adf6908975fc54bd8b5f221e9a1f71b9b1de2d4e68ff2d7ddd7a833b58e08e1b1a53a9c1b018c5b7180d98700077e1a5e36631b52c8da79e13f8521a37a9b9e2f860fa83dc5956f1dc23644449aaf9b67a3c32da", @generic="a8887fc44731fd1faa3e52f12625640b51024e4ed017ce3c0b85521654187949e8ae0604c8cbbd10de61f64bc152338cf42c50cbf74f89ec80ad585f8310adaedd4a5e61fba69f183c8a8d9dd22e885ffb4c0715c0702b98fc3cfe97c49d89edb77cc65fce6fa785e0f6c87561d7009948f35bf3fdbe03af3c963775670966f29450e959ecbb1b6f67e60f169bf52dc726a3995fe1ef0704fecc7f685144ddbb47e78de21512dd8bb844205d5ec8dcb0685ecc2368e89c100270899828ec", @nested={0x4, 0x7b}, @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x124}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24008800}, 0x48005)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = io_uring_setup$auto(0xc, &(0x7f0000000600)={0x8, 0x180000, 0x6, 0x5c40, 0xff, 0x20000, <r8=>r2, [0x1000, 0xf2, 0x401], {0x3, 0x7fffffff, 0xa, 0x7, 0x10, 0x3, 0x7ff, 0x8, 0x4}, {0xfffffffd, 0x7, 0x7, 0x7fffffff, 0x2, 0x9, 0x8001, 0x3, 0x4}})
sendmsg$auto_NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x110, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xf1, 0xbd, "8cb284331f41af92bcaba07531342b34bfc7de75578aebfab51514549da81564348a3d0bc519cb0179022330dcad9c1305338c01ad3a0834e08e89dd5f913d5dc59c05450171b85efcfa88311637141e58e29c91b0a9809b7a3614fc4c01723e77f4651d1498f50e67baf4f0b68b189cf87ccf378feec00710458375bc3cd8e2e7cc45cfd65d78fc8497d234cfe68adb6b36def59f17758162288f3716d29d8ba67e3ad26108ba9ff5be09aad829428d94622a6dbc68fc7f9f7107a3f850146186411783ce28700db5938abb1cac114ad9a11e5dff0780a8e34396ffc42d7156ad6fef2198c3241e70484c0e7b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x110}}, 0x20048014)
sendmmsg$auto(r6, &(0x7f0000000a40)={{&(0x7f0000000880)="c8ab1d74e1780591b27536fbc7a4ed054b1a035a53cd8217e07b6254898e9a82365af7f5a06a3ceb48f8b68b5e41a6a5f7ea7a9717a2c953694e1a50750b0d5098f68c88ebcfb53ecbcf8c2af67319bd3aa6", 0x1, &(0x7f0000000980)={&(0x7f0000000900)="1cfcbbd7c3a0d1b27220d859397359cdd924f4d71c94bb6ca8169949765dc79496b4d349adea0d8266227572ab90aff963974eea161983b7c1115079c92909e290bf3ed91bbb98799469fc4add18366802264fd565a1b7dd9b149f2f29db3ba37d2ae1b9071fc1881455a0d192c3112e88853689042cee", 0x2}, 0x79, &(0x7f00000009c0)="efdd869f14a5eb598f89fdef63fd3f5671ea42e41a89a02c0dd77f5251f3c1e7b96611a78768f12f066ed502199b6d4cf08d52205ea560bb5864f3b4a6de80b020ca7f921c77899013817de381384d3d0839de", 0x8}, 0x7}, 0xa, 0x7)
r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000ac0), r7)
sendmsg$auto_NFC_CMD_DISABLE_SE(r7, &(0x7f0000002040)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002000)={&(0x7f0000000b00)={0x1500, r9, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x1bf, 0x13, 0x0, 0x1, [@generic="b5a93028647cc948654396626e76e4ea07a35f80abe6e024813eacb1c7dc92662186b1c84e2c9a22cbddfd09263823c00003add2fcac4e61264eb0d0e386ba0447718272c9f82e8881ea184c6c726e1d698f695ae73e44a321ad04742da7450c26dd8b90b8e74f6e7cf7a6b89e3b6ef1103f06e6cb67c77e9fd66fd6a54d3e58b12171aef3c868614a543d872d1fa15c1b45f23b34", @typed={0x57, 0x12, 0x0, 0x0, @binary="3c71924d0efc6da202998e280745a48875f04acd9625e2e8af9f60fed8744066421b027a80841c257e886535b8461093d7be8a3d2b625e52bfb32422ec592b25988fa950d43cdd158a353a961d35d4496e3887"}, @generic="517855dcbabc55df8fef813160cc0b86640b4d0c7cf6", @typed={0x4, 0x29}, @generic="b0ba94cd55f4c5a31acbb9b230a371fc25dd3e836da012cd6bd43efed66260ab7d8dda27a2a9184109cdcf6449195ae38198dd2655bc76e33b0ae80d8dbf18021d17cd27b845fd58c85ae3be54eef7d14eefb79cca6ad4a2e8e81061a3037b54a45a126555bc31097e5c3bea0e05cf2879fc2e4c5267fae82aea5eaade58bfe2b28ba4ca28c4385c5f09c8f1eb6fa1dbcd9d948ecc61eb4a28a1ae341360d52d856454470cec96cc2a93bae99f058218e6946df5"]}, @NFC_ATTR_LLC_SDP={0x1304, 0x13, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @pid=r5}, @generic="3688d1845da8951c51b120ad4955c652b9c067cbb57d575f9efeff688de6cdda0cd92cd150066c29effa16584af436f9105fa3a52a7ad41049d2f117183e2706c72cbd6432e0da5694220462", @nested={0x23, 0x13c, 0x0, 0x1, [@typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@mcast2}, @generic="3893d3bfc2aa91", @nested={0x4, 0xc7}]}, @generic="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", @nested={0x280, 0x94, 0x0, 0x1, [@generic="a51e2533e04ec9895d0837fd9d8062c010fb80affe17bd69ef5870d8d2427cee31577319995ce9c7aec1146e6ca51518f3334a586d4a58d5a7f244aac2759be6e8cb51880d911b0ebefde35fd2c4c18fe7066ccdfabd848e0dd92ba63dcc4855e1a89dd04be42b52215a8f", @nested={0x4, 0x7d}, @typed={0x8, 0x7f, 0x0, 0x0, @fd=r4}, @typed={0x4, 0x90}, @nested={0x4, 0xf}, @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="716000b609e86e7eb2634f7346d82dd9e0b47e4380fec2a7aa08b849b3fa1bd0dd89a11f7dab135e840c4bd4bc3524aca5d938940a61bd41bb70b258bb3d2eece98edd1932a9e5e8f890dfbae70cd7c388a7240d15bb13c358137246a6c22d0bab460ae041a47dc2df6aba0093ad5f77d6d83bbd", @generic="ea13e1e4a9df7d72c1382302916fcd1ec2d5b8142a1dbdc9c0f180e678e80000ef8e30e90ceb7e71d742c9b610915917001431a4f0e04e7f4d494bf09f7ec384b0c742215bb2da3f2eeee3e75e1ad7cde9317cf414911e435485b63596d9dd0d9bdb62a3dd3f47c5c364b5c07d6866030b93fccf84d8a2c3140325d05630412956d7d4ca0ebedd8977c729720441bedc82b9de408bd7f6e09d85aa90583956aeac815e774780bf610b8c4bc6b780d945588076288e8d012a630f906e7dc8b641adb99988de3f01436d698b73daa148795e350d8dba6905f4cda3ba069dcae0037d6d38", @typed={0x8, 0x52, 0x0, 0x0, @pid=r5}, @generic="0603a215645985a28ca9c72a7401923390353359178be19bd6bf9da854c173ba7c629148531a61aa504a30a29c4e1486bc3c6d646c94ad551ded3947fb344b01b3ae11bbd7110fb153eef80be93da1bcc871c04073e21fb53af40ec407dcaff756cac0ece5dd65c64c81dc7618fb77fadf584e79f484a7b32cead163d4816298204f2d2892f299699d7f95275222dc517793fd8a7e37"]}, @generic="db9921b8712c4187"]}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7fff}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0xffffb3bf}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x9}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x38}]}, 0x1500}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r10 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000020c0), r8)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x24, r10, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x9}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x90c7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$auto_NL80211_CMD_TDLS_OPER(r7, &(0x7f0000002600)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002200)={0x3a4, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x100}, @NL80211_ATTR_FILS_CACHE_ID={0xac, 0xfd, "a69e3773297a672e3cc4978a49ebfee2709e127ccf3a18ae51c058db24769ad2f7be817fd348fa2bb981a08cfcbe7bfa7847af6b72aee4ffee752aa3567c1475317db1133bf054d3314dfd898a688ae185607c524a19f524bfd9e77c91f8a40bdad8d93cea79c3cc3262162fa3bee630ff10befcab6635e4e01459042cbbb94860f5da58bedf59cacb8ef25606d34c8e7fc25cf682caf3c3bb33f9829a60053cdc5bc114c9866b51"}, @NL80211_ATTR_MPATH_NEXT_HOP={0x60, 0x1a, "09bb2d4be93c57cd2ac4e77998782b8c26821725c886d13fe61141ec9e2e029b347e1b8dd8462ee46d902d20e458b90b2bc27174f50994b2ee6c3636ef9e89325fbb9170e55ba3f86b3b9d234842d914ade7eb7c209e2c5044c5d2b5"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfff}, @NL80211_ATTR_EMA_RNR_ELEMS={0x123, 0x145, 0x0, 0x1, [@generic="9435e0081e48ed0dd83493f6ef418ec4c027d8839529568e27dfe8f79416d2636918e6c6cbb69a081f8fdd0462b2f3e648a3745c3f4a82d7350180a4fb904b692c01c878aaceb6674ab0", @generic="a98fd30e79486ba62a8d53df878139f6c865a8857da9f8d040b71cd35487397adb34c350b2f7df2906149d2e73b3a315037cfb13fef0274feedcfe36d66fe9d1bdf9c38f2ce0a6a32593d06861d097b863ce9a4389fedb086570512d0a666c9447ecf745e60701d27b4419887efb10ab9b33fb872804f4737046b276bcf09e30fcd281ea72ab1f963fdaa0fb08d82a5e9dbc167d820145d9a9776bbb1ce59a1c1de1434d10d1810b5cbaebc7b2d8aa9870da70423bcfdf583a0b4a360337cc8ee81cfa3317f87efaae2cf858759c2dd8df246e1efe"]}, @NL80211_ATTR_REG_RULES={0x139, 0x22, 0x0, 0x1, [@nested={0x1c, 0xfe, 0x0, 0x1, [@typed={0xc, 0x95, 0x0, 0x0, @u64=0x4}, @typed={0xc, 0x83, 0x0, 0x0, @u64=0x7}]}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@private1}, @generic="fc59aef7f55aca20a7b4d9e8b5cd254eb87572d0c6a5970d42394d8b7d52eef5bee031533e7f929ae466d680a8ce6860f8740cf4ffa8524e89b1c1c6721021aef30e548dce5f6b439dbb8a28c88acab6eb09a13bfa", @generic="1ec45b56d2c065b967d8d326086c14a2bc31e93c886d539facaf5925b70e6b67c77e20fef3e56ffbfc8fc3ede408ab129f3a387372624cc6b0dd3ef2656316c51789244d9fa1058d5faf7106cff6c33daaf195a8b1ea8b15656eb51bc73d8840a53f61184e760c75b3e3d1e5787deba0f342ac78261a297b8309d7a22049ce437bef2212d6f1cb13aa8a8766ab48eaa23412b69ff4fcc6f8c94460d9920643a4a9763b18", @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x3a}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x800}, 0x20008800)
r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002680), r8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000026c0)={'pim6reg\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002700)={'pim6reg0\x00', <r13=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r7, &(0x7f0000002840)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0x98, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x1}, @ETHTOOL_A_MODULE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x34}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0xf5}, @ETHTOOL_A_MODULE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x841}, 0x20000000)
r14 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000028c0), r2)
sendmsg$auto_NETDEV_CMD_NAPI_GET2(r2, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x24, r14, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r13}, @NETDEV_A_NAPI_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000084)
ustat$auto(0x0, &(0x7f00000029c0)={0x1, 0x7fffffffffffffff, "9968858a5e88", "72c0da88392b"})
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r8, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x48, r11, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x8}, @ETHTOOL_A_MODULE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40)
mmap$auto(0x8, 0x2, 0x0, 0x971, r0, 0x6)
sendmsg$auto_NET_SHAPER_CMD_SET(r2, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r13}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x8}, @NET_SHAPER_A_BURST={0xc, 0x5, 0x2}, @NET_SHAPER_A_BW_MIN={0xc, 0x3, 0x40}]}, 0x3c}}, 0x40090)
executing program 4:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r1=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async)
socket(0x2, 0x3, 0x100) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async, rerun: 64)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10) (async)
eventfd$auto(0x3)
eventfd$auto(0x0) (async, rerun: 32)
pipe$auto(&(0x7f0000001000)=0x1) (rerun: 32)
r2 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4}, 0xa3) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
socket(0x15, 0x5, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
gettid() (async, rerun: 64)
mlockall$auto(0x7) (async, rerun: 64)
fallocate$auto(0x1, 0xa, 0xfbf9, 0x3)
executing program 6:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
arch_prctl$auto(0x5005, 0x9) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) (async)
ioctl$auto(0x3, 0x401070cd, 0x38)
executing program 6:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
connect$auto(0x3, 0x0, 0x54)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1)
io_uring_register$auto(0x2, 0x17, &(0x7f00000000c0), 0x1)
mincore$auto(0x1000, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 16, 27, 27, 6, 17, 30, 20, 5, 40]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="325f0320000000", @ANYBLOB="1200", @ANYBLOB="1600"], 0x1ac}}, 0x8000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000f7501fb7bd5d15b77a8295e434bb6c1549dc3922f74d71ce3448f51a2555b8458f5a52481ae59dddf7ac6200047c6e906fa7e642fb73a3dd140881e593785cbeabc4960000000000000000e79fcf8ef75e9d520b20e04f8ce5b3c308ae129e698e892e75ffa206000000a2ce0bf4c78565a8a060ca2e1dcda69bce8e96207e74097923e52b1af5371494de46d7a73ca3f37acfef55f340b902", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x4)
recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
executing program 1:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 1:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 34:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0xa6c}, 0x8000, 0x0, 0x6)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0x3, 0x15)
setrlimit$auto(0x1000000007, 0x0) (async)
setrlimit$auto(0x1000000007, 0x0)
executing program 5:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x1e, 0x5, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) (async)
r0 = bpf$auto(0x9, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socketpair$auto(0xfff, 0x5, 0x10, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00'})
sendmsg$auto_ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000600)={&(0x7f0000000080), 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) (async)
ioprio_set$auto(0x3, 0x0, 0x4b34) (async)
socket(0x15, 0x5, 0x0) (async)
madvise$auto(0x1ffff000, 0x7, 0x100000000) (async)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x6, 0xfffffffb)
mknod$auto(0x0, 0xc9, 0xc8)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x2664c0, 0x0) (async)
execve$auto(0x0, 0x0, 0x0)
mbind$auto(0x2, 0x100000004, 0x100000000, 0x0, 0x3ff, 0x24000)
shmget$auto(0xa, 0x10563, 0x568d1af2)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
io_uring_setup$auto(0x5, 0x0)
shmat$auto(0x0, 0x0, 0xfffffffa) (async)
mremap$auto(0x0, 0x4, 0x3fd6, 0x3, 0x20000000)
shmctl$auto(0x0, 0x0, 0xfffffffffffffffd)
open(0x0, 0x210800, 0xe1d2b27bdc14aaa8) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
mlock$auto(0xfbe8, 0x4)
executing program 5:
unshare$auto(0x40000080)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptye0\x00', 0x121200, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003e8, 0x14)
madvise$auto(0x0, 0xffffffffffff0005, 0x8)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x103400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f)
r2 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x40202, 0x0)
r3 = pidfd_open$auto(0x1, 0x0)
setns(r3, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
clock_getres$auto(0x5, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000280), r3)
recvmmsg$auto(r2, &(0x7f0000000200)={{&(0x7f0000000040)="4507b66c36452a47ed53d6a0d4ee1c242b50eb998ea974cc27124a26d9391eb70d834fceebe0a770c3252033350b74b5bf210bd4ebb0d906f5a3aac466718de83d24144fd6cdb269eec9b1c33391a92a1840a2b424d04303ba120bd62b233c95d7fc5d483c8d3cfde6af678c4f6e436b989978383da2586e78c616c9b29439e92e359440ad6356448e24e3d5275b880cd89717c5382d8cf3303ffa2e8d82e5b7c9aa5028a4bc7505a740b079ed8cedd4ce1270ffa83d3cfdb106ab75377feeacd1e60c0572fb126969e92f5335", 0x1, &(0x7f0000000180)={&(0x7f0000000140)="103ef13422702fb78fad6b8b7198d08a003394dc8ec06cea4f", 0x4}, 0x4, &(0x7f00000001c0)="358888fa5a2abd3605722cad7c5f38e0f706da486f710a4bbd3f0f2ad35b1011036477b061", 0x1ff, 0xfffffff9}, 0x8}, 0x5, 0x2, &(0x7f0000000240)={0xd8, 0x800})
executing program 5:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <9>
bisect: split chunk #0 of len 9 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 30, 20, 5, 40]
detailed listing:
executing program 5:
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x192ff, 0x0)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x36, 0x2, 0x0, 0x3)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x1e, 0x5, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) (async)
r0 = bpf$auto(0x9, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socketpair$auto(0xfff, 0x5, 0x10, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00'})
sendmsg$auto_ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000600)={&(0x7f0000000080), 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) (async)
ioprio_set$auto(0x3, 0x0, 0x4b34) (async)
socket(0x15, 0x5, 0x0) (async)
madvise$auto(0x1ffff000, 0x7, 0x100000000) (async)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x6, 0xfffffffb)
mknod$auto(0x0, 0xc9, 0xc8)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x2664c0, 0x0) (async)
execve$auto(0x0, 0x0, 0x0)
mbind$auto(0x2, 0x100000004, 0x100000000, 0x0, 0x3ff, 0x24000)
shmget$auto(0xa, 0x10563, 0x568d1af2)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
io_uring_setup$auto(0x5, 0x0)
shmat$auto(0x0, 0x0, 0xfffffffa) (async)
mremap$auto(0x0, 0x4, 0x3fd6, 0x3, 0x20000000)
shmctl$auto(0x0, 0x0, 0xfffffffffffffffd)
open(0x0, 0x210800, 0xe1d2b27bdc14aaa8) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
mlock$auto(0xfbe8, 0x4)
executing program 5:
unshare$auto(0x40000080)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptye0\x00', 0x121200, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003e8, 0x14)
madvise$auto(0x0, 0xffffffffffff0005, 0x8)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x103400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f)
r2 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x40202, 0x0)
r3 = pidfd_open$auto(0x1, 0x0)
setns(r3, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
clock_getres$auto(0x5, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000280), r3)
recvmmsg$auto(r2, &(0x7f0000000200)={{&(0x7f0000000040)="4507b66c36452a47ed53d6a0d4ee1c242b50eb998ea974cc27124a26d9391eb70d834fceebe0a770c3252033350b74b5bf210bd4ebb0d906f5a3aac466718de83d24144fd6cdb269eec9b1c33391a92a1840a2b424d04303ba120bd62b233c95d7fc5d483c8d3cfde6af678c4f6e436b989978383da2586e78c616c9b29439e92e359440ad6356448e24e3d5275b880cd89717c5382d8cf3303ffa2e8d82e5b7c9aa5028a4bc7505a740b079ed8cedd4ce1270ffa83d3cfdb106ab75377feeacd1e60c0572fb126969e92f5335", 0x1, &(0x7f0000000180)={&(0x7f0000000140)="103ef13422702fb78fad6b8b7198d08a003394dc8ec06cea4f", 0x4}, 0x4, &(0x7f00000001c0)="358888fa5a2abd3605722cad7c5f38e0f706da486f710a4bbd3f0f2ad35b1011036477b061", 0x1ff, 0xfffffff9}, 0x8}, 0x5, 0x2, &(0x7f0000000240)={0xd8, 0x800})
executing program 5:
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000)
munmap$auto(0x1000000, 0x2000000c)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 16, 27, 27, 6, 40]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="325f0320000000", @ANYBLOB="1200", @ANYBLOB="1600"], 0x1ac}}, 0x8000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000f7501fb7bd5d15b77a8295e434bb6c1549dc3922f74d71ce3448f51a2555b8458f5a52481ae59dddf7ac6200047c6e906fa7e642fb73a3dd140881e593785cbeabc4960000000000000000e79fcf8ef75e9d520b20e04f8ce5b3c308ae129e698e892e75ffa206000000a2ce0bf4c78565a8a060ca2e1dcda69bce8e96207e74097923e52b1af5371494de46d7a73ca3f37acfef55f340b902", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x4)
recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
executing program 1:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 1:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 34:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0xa6c}, 0x8000, 0x0, 0x6)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0x3, 0x15)
setrlimit$auto(0x1000000007, 0x0) (async)
setrlimit$auto(0x1000000007, 0x0)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <5>
bisect: split chunk #0 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 6, 40]
detailed listing:
executing program 34:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0xa6c}, 0x8000, 0x0, 0x6)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0x3, 0x15)
setrlimit$auto(0x1000000007, 0x0) (async)
setrlimit$auto(0x1000000007, 0x0)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 16, 27, 40]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="325f0320000000", @ANYBLOB="1200", @ANYBLOB="1600"], 0x1ac}}, 0x8000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000f7501fb7bd5d15b77a8295e434bb6c1549dc3922f74d71ce3448f51a2555b8458f5a52481ae59dddf7ac6200047c6e906fa7e642fb73a3dd140881e593785cbeabc4960000000000000000e79fcf8ef75e9d520b20e04f8ce5b3c308ae129e698e892e75ffa206000000a2ce0bf4c78565a8a060ca2e1dcda69bce8e96207e74097923e52b1af5371494de46d7a73ca3f37acfef55f340b902", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x4)
recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
executing program 1:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 1:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <3>
bisect: split chunk #0 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 40]
detailed listing:
executing program 1:
r0 = socket(0xa, 0x801, 0x84)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8b0a, 0x8d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 16, 40]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="325f0320000000", @ANYBLOB="1200", @ANYBLOB="1600"], 0x1ac}}, 0x8000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000f7501fb7bd5d15b77a8295e434bb6c1549dc3922f74d71ce3448f51a2555b8458f5a52481ae59dddf7ac6200047c6e906fa7e642fb73a3dd140881e593785cbeabc4960000000000000000e79fcf8ef75e9d520b20e04f8ce5b3c308ae129e698e892e75ffa206000000a2ce0bf4c78565a8a060ca2e1dcda69bce8e96207e74097923e52b1af5371494de46d7a73ca3f37acfef55f340b902", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x4)
recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
executing program 1:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 40]
detailed listing:
executing program 1:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 2 programs left: 

executing program 1:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)


bisect: trying to concatenate
bisect: concatenate 2 entries
minimizing program #0 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
socket$nl_generic(0x10, 0x3, 0x10)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x310, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_MLD_ADDR={0xf3, 0x13a, "9d80b9f13d758cb8844555f4a29930f6e34768dc163299bdc2acc2cecbd4f5c9c8653fafc3c9eba4da3af488df391b229e6c8f356f978e9ab976c38fa56299d572e59abd053f0d509a1f33d4683d27fee594989352c23e7a976f052517634055aa49ae829a12bb5fbe6eead5dbc55e40c5ac8e4e5b89db97730ef2866f6aa5ca577d86f0938bf2fd2f70819587d2e945e90e2f45ce5cb395cbcffd5fe66a6f6f7f9946951861481bd71aeaf7df3da1bbe778fba2c90a8f9d559e514e524a52a4f4cf69869fea56e52861196ed4e236046139dab801b3ea9acfdcfb8a7ffcb5a9b3e4f98c0e232c8ad9634e12a75f0a"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc1, 0x6e, 0x0, 0x1, [@generic="54cba0f8e850aeca802a0cf8bcb9601c2d744165be835ea8d9096dccc6710afb8903ad2a9b049db4656fcfd4e7319a0da99396da1dee9c560b92a184ecd02cb7523a8749405876d586c8e439e6fc3679c61fcec9872e7e3eaf2c924c1d79e1c7aaa133830a4356f53f8d66fc3b7fea416a7bae4169b670c2757555c24d8c05bc003881c2f8ffaadc61e03824c34b5901de696d5af97408013aee0a254064421fcc6b8e5f6a5bf6fffe8f4dd2da5ff84e51cf84a2ed", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "087df262b2e835f217d6d525203ef379b179b0460ff84454a76bef46c5e639f96eb09daed9940beb13ede0043a32a421dd753bccf27fa0a653cfd15ccce0fbb0b0f0d85ad49dfa608f5f80b3815e1dec72d5d3c4ba105844651d8b93f45b90244bda31c320cbace81abaa3a8a57a5078c337c4db97d69ab632b75d445640b2c394a3cf2b7d145d292f87b7651dc80502b80d583bf204485080193f772d0e91abb6fe548fdd702b724c36a7185092b920a0f0869abe99be3f9c9c6fac68490e28340e57484d3f4ad7b85fbd519ee4f2650424a6b1122f0942fdd469975e4c0690b99b0dadb04441c069ddb8b85d307f3e10fe6cf31225c2"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
socket(0x10, 0x2, 0x0)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 40]
detailed listing:
executing program 0:
inotify_init1$auto(0x800)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 40]
detailed listing:
executing program 0:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 4:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

program crashed: WARNING: ODEBUG bug in hci_release_dev
minimized 16 calls -> 1 calls
minimizing program #1 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 39]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 38]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 37]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 37]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 37]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 36]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 35]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 34]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 33]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 32]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
io_uring_setup$auto(0x3ff, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 31]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 30]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 29]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 28]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 27]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 26]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 25]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 24]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 23]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 22]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
write$auto(0x3, 0x0, 0xfdef) (async)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 21]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 20]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10) (async)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 19]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10) (async)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 18]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000280)=""/68, 0x44)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 17]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 16]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) (async)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 15]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 14]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 13]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
get_robust_list$auto(0x0, 0x0, 0x0) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 12]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
adjtimex$auto(&(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0x7, 0x9, {0x3, 0x4}, 0x18, 0x1, 0x101, 0x800, 0x0, 0x4, 0x4, 0x2, 0x4, 0x2c, 0xc76})
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 11]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 10]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 9]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 8]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 7]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 5]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 4]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 3]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 3]
detailed listing:
executing program 1:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 0:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
minimized 40 calls -> 3 calls
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: concatenation succeeded
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=1m5.615076966s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci
detailed listing:
executing program 0:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=1m5.615076966s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-write$auto
detailed listing:
executing program 0:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=1m5.615076966s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=1m5.615076966s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=1m5.615076966s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
rt_sigqueueinfo$auto(0x1, 0x7, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=1m5.615076966s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m5.615076966s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
simplifying guilty program options
testing program (duration=1m5.615076966s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
extracting C reproducer
testing compiled C program (duration=1m5.615076966s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
testing program (duration=1m5.615076966s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
extracting C reproducer
testing compiled C program (duration=1m5.615076966s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
reproducing took 2h21m3.254000496s
repro crashed as (corrupted=false):
------------[ cut here ]------------
ODEBUG: free active (active state 0) object: ffff888028f15248 object type: timer_list hint: hci_devcd_timeout+0x0/0x2f0 include/linux/skbuff.h:2741
WARNING: CPU: 0 PID: 5994 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612
Modules linked in:
CPU: 0 UID: 0 PID: 5994 Comm: syz.0.16 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612
Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd e0 80 b1 8b 41 56 4c 89 e6 48 c7 c7 60 75 b1 8b e8 ef 52 bc fc 90 <0f> 0b 90 90 58 83 05 36 54 7f 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
RSP: 0018:ffffc90003d1f988 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff815a1729
RDX: ffff88807bf8da00 RSI: ffffffff815a1736 RDI: 0000000000000001
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bb17c00
R13: ffffffff8b4f8120 R14: ffffffff8a2addb0 R15: ffffc90003d1fa98
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f861bb8f3b0 CR3: 0000000031b64000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __debug_check_no_obj_freed lib/debugobjects.c:1099 [inline]
 debug_check_no_obj_freed+0x4b7/0x600 lib/debugobjects.c:1129
 slab_free_hook mm/slub.c:2284 [inline]
 slab_free mm/slub.c:4613 [inline]
 kfree+0x2b3/0x4b0 mm/slub.c:4761
 hci_release_dev+0x4d9/0x600 net/bluetooth/hci_core.c:2758
 bt_host_release+0x6a/0xb0 net/bluetooth/hci_sysfs.c:87
 device_release+0xa1/0x240 drivers/base/core.c:2567
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x1e4/0x5a0 lib/kobject.c:737
 put_device+0x1f/0x30 drivers/base/core.c:3773
 vhci_release+0x81/0xf0 drivers/bluetooth/hci_vhci.c:665
 __fput+0x3f8/0xb60 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 __do_sys_exit_group kernel/exit.c:1098 [inline]
 __se_sys_exit_group kernel/exit.c:1096 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1096
 x64_sys_call+0x151f/0x1720 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fdb3d385d29
Code: Unable to access opcode bytes at 0x7fdb3d385cff.
RSP: 002b:00007ffc06469498 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdb3d385d29
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000003 R08: 00007ffc0646957f R09: 00007fdb3d545260
R10: 0000000000000001 R11: 0000000000000246 R12: 00007fdb3d545f68
R13: 00007fdb3d545260 R14: 00007ffc06469540 R15: 00007ffc06469540
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
ODEBUG: free active (active state 0) object: ffff888028f15248 object type: timer_list hint: hci_devcd_timeout+0x0/0x2f0 include/linux/skbuff.h:2741
WARNING: CPU: 0 PID: 5994 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612
Modules linked in:
CPU: 0 UID: 0 PID: 5994 Comm: syz.0.16 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612
Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd e0 80 b1 8b 41 56 4c 89 e6 48 c7 c7 60 75 b1 8b e8 ef 52 bc fc 90 <0f> 0b 90 90 58 83 05 36 54 7f 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
RSP: 0018:ffffc90003d1f988 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff815a1729
RDX: ffff88807bf8da00 RSI: ffffffff815a1736 RDI: 0000000000000001
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bb17c00
R13: ffffffff8b4f8120 R14: ffffffff8a2addb0 R15: ffffc90003d1fa98
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f861bb8f3b0 CR3: 0000000031b64000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __debug_check_no_obj_freed lib/debugobjects.c:1099 [inline]
 debug_check_no_obj_freed+0x4b7/0x600 lib/debugobjects.c:1129
 slab_free_hook mm/slub.c:2284 [inline]
 slab_free mm/slub.c:4613 [inline]
 kfree+0x2b3/0x4b0 mm/slub.c:4761
 hci_release_dev+0x4d9/0x600 net/bluetooth/hci_core.c:2758
 bt_host_release+0x6a/0xb0 net/bluetooth/hci_sysfs.c:87
 device_release+0xa1/0x240 drivers/base/core.c:2567
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x1e4/0x5a0 lib/kobject.c:737
 put_device+0x1f/0x30 drivers/base/core.c:3773
 vhci_release+0x81/0xf0 drivers/bluetooth/hci_vhci.c:665
 __fput+0x3f8/0xb60 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 __do_sys_exit_group kernel/exit.c:1098 [inline]
 __se_sys_exit_group kernel/exit.c:1096 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1096
 x64_sys_call+0x151f/0x1720 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fdb3d385d29
Code: Unable to access opcode bytes at 0x7fdb3d385cff.
RSP: 002b:00007ffc06469498 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdb3d385d29
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000003 R08: 00007ffc0646957f R09: 00007fdb3d545260
R10: 0000000000000001 R11: 0000000000000246 R12: 00007fdb3d545f68
R13: 00007fdb3d545260 R14: 00007ffc06469540 R15: 00007ffc06469540
 </TASK>