Extracting prog: 14m58.619939243s
Minimizing prog: 1h11m10.437164171s
Simplifying prog options: 17m10.237006634s
Extracting C: 5m23.173415366s
Simplifying C: 0s


extracting reproducer from 52 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-ioctl$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000080)=""/27, 0x1b)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0)
ioctl$auto(r4, 0x560a, 0x7)

program did not crash
single: failed to extract reproducer
bisect: bisecting 52 programs with base timeout 30s
testing program (duration=43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 25, 21, 7, 4, 30, 23, 23, 7, 13, 36, 6, 30, 6, 26, 15, 30, 17, 30, 30, 30, 30, 17, 32, 14, 10, 11, 11, 14, 27, 30, 29, 5, 27, 16, 25, 27, 2, 30, 30, 30, 27, 18, 30, 16, 30, 24, 36, 2, 14, 29, 14]
detailed listing:
executing program 0:
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
r0 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
write$auto(r0, &(0x7f0000002740)='-1,\'$*@[}\x00', 0x2)
socket(0xa, 0x2, 0x88)
sendto$auto(0x3, 0x0, 0x8, 0xf950, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x3}}, 0x1e)
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.2MB.limit_in_bytes\x00', 0xd2200, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mincore$auto(0x1000, 0x8, 0x0)
mprotect$auto(0x2, 0xe2ff, 0x0)
mmap$auto(0x0, 0x2, 0x5, 0xeb2, 0x8, 0x1008000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0xc)
socket(0x2, 0x1, 0x0)
socket(0xa, 0x3, 0x6)
setuid$auto(0x800000000008)
getsockopt$auto(0x7, 0x29, 0x41, 0x0, 0x0)
r0 = socket(0x10, 0x2, 0x0)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x2, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_GET_TXSC(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="7b6f26bd7000fcdbdf100f000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8)
mprotect$auto(0x8, 0xffffffffffffffff, 0x400)
acct$auto(&(0x7f0000000080)='X\xb5[h\xcd\xaf\x06\x01\x00')
acct$auto(0x0)
executing program 0:
socket(0x2, 0x2, 0x88)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0xff)
socket(0x1d, 0x2, 0x2)
connect$auto(0x3, 0x0, 0x55)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
read$auto(0x3, 0x0, 0x10)
write$auto(0x3, 0x0, 0xffd8)
semget$auto(0x0, 0x13c, 0x1ff)
ioperm$auto(0x3, 0xe, 0x2000000000000149)
semtimedop$auto(0x0, &(0x7f0000000000)={0xa, 0x81, 0x36ec}, 0x1f4, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyaf\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSWINSZ2(r0, 0x5414, &(0x7f0000001180)="1204640a")
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2a, 0x2, 0x1)
connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x800, 0x0)
write$auto(0x3, 0x0, 0x3f00)
write$auto(0x3, 0x0, 0xfdef)
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6tnl0/addr_assign_type\x00', 0x75bc83, 0x0)
mprotect$auto(0x1ffff000, 0x80000000, 0x9)
acct$auto(&(0x7f0000000080)='X\xb5[h\xcd\xaf\x06\x01\x00')
acct$auto(0x0)
executing program 0:
r0 = socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
timer_create$auto(0x7, 0x0, 0x0)
timer_settime$auto(0x0, 0x1, &(0x7f00000000c0)={{0x400f, 0x10007}, {0x89, 0x1}}, 0x0)
timer_gettime$auto(0x0, 0x0)
setsockopt$auto(r0, 0x6a, 0x5, 0x0, 0x3)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x1, 0x8000000a00006, 0x5, 0x100040ebe, 0xffffffffffffffff, 0x300000000000)
quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0)
socket(0x2, 0x3, 0xfffffff1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
socket(0x2b, 0x1, 0x1)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x10000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0)
io_uring_setup$auto(0x1, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto(r1, 0x89f2, 0xffffffffffffffff)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x15, 0x5, 0x0)
bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
ustat$auto(0x801, 0x0)
sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da08, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
socket(0x1d, 0x5, 0x0)
read$auto(0x3, 0x0, 0x80)
executing program 2:
poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x3569, 0x8}, 0x34, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:13/sun\x00', 0x400, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x8000)
mmap$auto(0xfffffffffffffffd, 0x5, 0x0, 0x40eb6, 0x401, 0x7fff)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
ioctl$auto(0x3, 0x5386, 0x3b)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0)
ioctl$auto(0x3, 0x8004550f, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0xb4)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
clock_getres$auto(0xfffffffe, 0x0)
r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0)
adjtimex$auto(0x0)
read$auto(r0, 0x0, 0x0)
socket(0x2, 0x1, 0x0)
ioctl$auto(0x8000000000000001, 0x89ef, 0x9)
write$auto(0x3, 0x0, 0xfdef)
executing program 2:
statmount$auto(0x0, &(0x7f0000000380)={0x8, 0xfffffffe, 0x5, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x6, 0x8, 0x10003, 0x80, 0x6, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x1, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x4000000070624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0x6, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0xffff, 0x6, 0x7, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0xfffffffffffffffa], "6ae81ee1f06ad4f61afbb1cebd6f1b9b9bc350c3232569ec7a0601313497526f73e8012fcacc50f837482178c5a385536a024af07d77b399166b6dda8cd3b43434bacbad308327c00d72a2d3799a12de17617cf0e126d4721e7c5debdb3327972291dd79a4b21e02c4832422efa01537355eaeb7a0b02f90fac3fbebd662fbc4044c5193c994b89cb6ae7dadf8bc1e4526452acea671e9b03550db1342e0b4d6e78cbd526a92e6b6c20b18b00efc3fb50477959ced396527cec1879d9748579d093874d737ed6b52f418e23069c1931d048025c0bd9e23efcd63b58e0a76bba4558781403ec88cecb82cf32571b38b97cf02573fd60df305f374939c72c55f3d9b87d8b040fd29c22906f556a60165ec54b13b9d2ea549a92c2f4acdcb79e15599f1640c4c7cf7ec360367c2016ae314eaaed5837a864d21a3498145ea53ec602274231f079eca1b948ce1a4b161c5e50a7d42054ec0baa0fab92c5356df9ed4a3e46856ea9f086d5c23a316227a2f8861823a145898"}, 0x1fe, 0xd) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) (async)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x2, 0x0)
readv$auto(r0, &(0x7f0000002840)={&(0x7f0000002740), 0x7fffffff}, 0x6) (async)
mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0}) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x26, 0x80805, 0x0) (async)
fcntl$auto(0x8000000000000001, 0x5, 0x8)
socket(0xa, 0x3, 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) (async)
r3 = open(0x0, 0x261c2, 0x84)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) (async)
socket(0x2, 0x3, 0x100) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0)
executing program 2:
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2a, 0x2, 0x1)
connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x800, 0x0)
write$auto(0x3, 0x0, 0x3f00)
write$auto(0x3, 0x0, 0xfdef)
executing program 2:
setregid$auto(0x81, 0x5)
clone$auto(0x7fff, 0xff, &(0x7f0000000600)=0x8000, 0x0, 0x7)
socket(0x23, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd14/queue/iosched/writes_starved\x00', 0x500, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x15e)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
read$auto(0x3, 0x0, 0x80)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto(0x8000000000000001, 0x8946, 0x9)
poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1)
executing program 2:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x3, 0x6)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
bind$auto(r2, &(0x7f0000000000)=@isdn={0x22, 0x3, 0x1, 0x49, 0x1}, 0xfffffffe)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mmap$auto(0x0, 0x7, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x3, 0x6) (async)
r3 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x401c5820, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) (async)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0) (async)
r5 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8, 0x0) (async)
socketpair$auto(0x1e, 0x5, 0x8, 0x0)
ioctl$auto(r4, 0x2282, r5)
getcwd$auto(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0)
executing program 2:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_log/7\x00', 0x40802, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
acct$auto(&(0x7f0000000000)='/:\'%}-*%&\x00')
mprotect$auto(0xe, 0x2, 0x10001)
acct$auto(0x0)
executing program 32:
r0 = socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
timer_create$auto(0x7, 0x0, 0x0)
timer_settime$auto(0x0, 0x1, &(0x7f00000000c0)={{0x400f, 0x10007}, {0x89, 0x1}}, 0x0)
timer_gettime$auto(0x0, 0x0)
setsockopt$auto(r0, 0x6a, 0x5, 0x0, 0x3)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x1, 0x8000000a00006, 0x5, 0x100040ebe, 0xffffffffffffffff, 0x300000000000)
quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0)
socket(0x2, 0x3, 0xfffffff1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
socket(0x2b, 0x1, 0x1)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x10000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0)
io_uring_setup$auto(0x1, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto(r1, 0x89f2, 0xffffffffffffffff)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x15, 0x5, 0x0)
bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
ustat$auto(0x801, 0x0)
sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da08, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
socket(0x1d, 0x5, 0x0)
read$auto(0x3, 0x0, 0x80)
executing program 33:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_log/7\x00', 0x40802, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
acct$auto(&(0x7f0000000000)='/:\'%}-*%&\x00')
mprotect$auto(0xe, 0x2, 0x10001)
acct$auto(0x0)
executing program 4:
mmap$auto(0x0, 0x9, 0x800000000df, 0x9b76, 0xea8a, 0x7ffe)
open(0x0, 0x842, 0x91)
open(0x0, 0x10000, 0x124)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
unshare$auto(0x40000080)
openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Virtual-1/output_bpc\x00', 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0x3, 0x200000000001, 0x26, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0xffffffff, 0x10000000000002d, 0x0)
mbind$auto(0x8, 0x100000004, 0xb, 0x0, 0x6, 0x80002)
set_mempolicy$auto(0x1, 0x0, 0x5)
clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x8000002)
madvise$auto(0x1000, 0x5, 0x15)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfd, 0x8000)
move_mount$auto(0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x77)
r0 = socket(0x2, 0x2, 0x1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), r0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9)
io_uring_setup$auto(0x6, 0x0)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000)
clock_adjtime$auto(0x1, &(0x7f0000000000)={0x7, 0x8, 0x4, 0x8, 0x7fffffbf, 0xffffffc0, 0x6, 0x5, 0x3, 0x0, 0xb9, {}, 0x1000, 0x2, 0xb, 0x5, 0x2000006, 0x101, 0x7fff, 0x3})
close_range$auto(0x2, 0x8000, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid$auto(0x0, 0x594d0417, 0x0, 0x1000004, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
setsockopt$auto(0x3, 0x0, 0x24, 0x0, 0x28)
executing program 4:
sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async)
sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r0 = socket(0xa, 0x5, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32)
sysinfo$auto(0x0) (async, rerun: 32)
r1 = socket(0xa, 0x801, 0x100) (rerun: 32)
setsockopt$auto(r1, 0x6, 0x2, 0x0, 0xfb3)
connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffc}, 0x55)
r2 = socket(0x26, 0x80805, 0x0) (async)
bind$auto(r0, &(0x7f0000000000)=@generic={0x1d, "300d591f2aa59b764486be5aa222"}, 0xc5)
r3 = seccomp$auto(0xfffffff5, 0x7fff, &(0x7f0000000040)="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")
ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000001040)=0x7fffffffffffffff) (async)
msgget$auto(0x0, 0x5) (async)
sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) (async, rerun: 64)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (rerun: 64)
readv$auto(0x3, 0x0, 0x3)
unshare$auto(0x40000080)
openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000040)={0x2, 0x1, 0x5, 0x3d9, 0x7, <r4=>0x0})
pidfd_open$auto(r4, 0xfd8a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop9/queue/rotational\x00', 0x103400, 0x0) (async)
socket(0x10, 0x2, 0x14) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ioctl$auto_TUNGETIFF(r5, 0x800454d2, &(0x7f0000000080)=0x8)
executing program 4:
r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/error_log\x00', 0x191001, 0x0)
mmap$auto(0x0, 0x86c, 0x4000000000df, 0x60db, r0, 0x9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r1, 0x0, 0x9)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
socket(0x2, 0x3, 0x6)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mincore$auto(0x0, 0x10000, 0x0)
setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/rdma_readwrite_threshold\x00', 0x48041, 0x0)
write$auto(r2, 0x0, 0x6)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid})
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0x8000, 0x1}, 0x8}, 0x1, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
settimeofday$auto(0x0, &(0x7f0000002540)={0xb3a, 0x3})
executing program 4:
r0 = socket(0x2, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES8, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48084)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1b004d"], 0x1ac}, 0x1, 0x0, 0x0, 0x4048811}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x40, 0xf, 0xc, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x5, 0x200000100103})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r4, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/statistics/multicast\x00', 0x58140, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
r5 = socket(0x10, 0x3, 0x6)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x50)
close_range$auto(0x2, 0x8, 0x0)
executing program 4:
r0 = openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x6, 0x411, 0x9}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r2, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB], 0x4d0}}, 0x4000000)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r6 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"})
ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2, 0x0)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5)
sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="200028bd7000fedbdf255c0000000c002e010300000000000000080026000d000000040046008c000e80870002003a140fc839aa55bb30bd3eb544b904965d29514555d776b63cee5d02c3c265c2f5f56fd30a0178b9e1b43e29b612c9076ebf047d37782b6762ceba0c835f2f2f5a5103b79f1697d3526b93194600b21fadbec6063b32486e3e30c900da1d21c00a3962327fcb6c8a26838dec4d91a7ab2ff69af39f2ad461ddc9e363b39e48b93740b00005002a0103000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0)
r9 = open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_BTRFS_IOC_SEND_32(0xffffffffffffffff, 0x40449426, &(0x7f0000000240)={@inferred=r9, 0xf, 0x10000000, 0x55e, 0x2, 0x8, "1cc01fa02ccf70219850f17d8d0d6a11e6c8a945772f387b3e59760a"})
write$auto(0x3, 0x0, 0x800)
read$auto_hwsim_fops_group_(r0, &(0x7f0000000400)=""/138, 0x8a)
executing program 34:
r0 = openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x6, 0x411, 0x9}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r2, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB], 0x4d0}}, 0x4000000)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r6 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"})
ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2, 0x0)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5)
sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="200028bd7000fedbdf255c0000000c002e010300000000000000080026000d000000040046008c000e80870002003a140fc839aa55bb30bd3eb544b904965d29514555d776b63cee5d02c3c265c2f5f56fd30a0178b9e1b43e29b612c9076ebf047d37782b6762ceba0c835f2f2f5a5103b79f1697d3526b93194600b21fadbec6063b32486e3e30c900da1d21c00a3962327fcb6c8a26838dec4d91a7ab2ff69af39f2ad461ddc9e363b39e48b93740b00005002a0103000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0)
r9 = open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_BTRFS_IOC_SEND_32(0xffffffffffffffff, 0x40449426, &(0x7f0000000240)={@inferred=r9, 0xf, 0x10000000, 0x55e, 0x2, 0x8, "1cc01fa02ccf70219850f17d8d0d6a11e6c8a945772f387b3e59760a"})
write$auto(0x3, 0x0, 0x800)
read$auto_hwsim_fops_group_(r0, &(0x7f0000000400)=""/138, 0x8a)
executing program 5:
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
mmap$auto(0x8, 0x1020009, 0x20004000000000df, 0x400000000ffff, 0x401, 0x8003)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/hugetlb.1GB.failcnt\x00', 0x1a3b02, 0x0)
write$auto(r3, &(0x7f00000000c0)=',.\\\x00', 0xd)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
socket(0x2, 0x1, 0x106)
connect$auto(0x3, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, 0x2}, 0x46)
syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = socket(0x1a, 0x2, 0x3a)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r5 = socket(0x2, 0x80002, 0x73)
r6 = socket(0xa, 0x1, 0x84)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000100), r4)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(r6, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0)
sendmmsg$auto(r5, &(0x7f00000003c0)={{&(0x7f0000000200)="cf9ed62753b0b69a71f9", 0x5, &(0x7f0000000280)={&(0x7f0000000240)="6c182a90c5513c9416", 0x530}, 0xf2, &(0x7f00000002c0)="4bd2b39daa242d02a28c1406037f68674630edbf6e3fd6c40be6bca7a3b2948efcf251e333344f4e688ff5a75464e1b9b49c5a3119d207669d37e7b216e69e04daacbd93bd980094528c112f4708af8af5dd9367f4311da4288b9de5d043c2bacfd21c1ec1c7aafa419aba793fd5d18cfa8dc6a9d0ec506f46d1f119a489e040a3aa9ac2ba7ddeeae5297870a25f908f931c48caea848520a84c5c13ee13d307a378d3ed763658724a1f73d66c70180292c07eb523df526e705a33415928d07c133504136b72", 0x9, 0x9}, 0x400}, 0x2, 0x8)
executing program 5:
mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r0 = socket(0x2, 0x80002, 0x73) (async)
socket(0xa, 0x1, 0x84)
shutdown$auto(0x200000003, 0x2) (async)
uname$auto(0x0) (async)
setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) (async)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r1, 0x84, 0x2, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x149000, 0x0)
lseek$auto(r3, 0x6, 0x4) (async)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002ac0), r2)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002b00)={0x1c, r4, 0x1f97227bd58c1f83, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40004)
sendmsg$auto_NL802154_CMD_SEND_BEACONS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2e8, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}, @NL802154_ATTR_SEC_LEVEL={0x2b1, 0x2d, 0x0, 0x1, [@nested={0x1ab, 0x139, 0x0, 0x1, [@generic, @generic="a586d01e666f98e2a5e641839ed76247c26468cbdbb0b4ace27347472d03ffcd1fa4f7c148d62fd67b2f30853ce9f94ab1cb4fffacb97eece6da38d5f4765827f64a2fe37109f861f5f78692badf8120de796d53425709ab02c777e9547bbdbebf0bf473946c868fbd73f6d5ef374e75676dbce4669dcf5c6870ac857a7d21aced96b536058c53fae37bef49830713ab166479df8a", @nested={0x4, 0xd}, @nested={0x4, 0xe8}, @generic="36bfa484fae8325c16cec74359db4b4709518b8aac164c1a4d90fb5d38eb1a5a3694d71c637ba787c83d929e9b944830718ba4703eb8a60c733667ce7f14cdd652b5556c986cce71efb3eb29e384c87ed00ccabb8b38c718afb0774e11dd0d8d750d8982a7a0b44c9bead29c3003c37958355ecad3dd825848a946191ec746c9d5efefd902d1495c7958eb3283", @generic="50ef50500aea4730c329721df30aecc8f518ecf1983461f78863e0a370bc33a4bc6d71d7aff461a992d0feaae2995a96db07f27b8770dc83bc711a035d9f24434666b652caf2a9b2ed7b74c0a9751b0148e00adba7637ee8121e3cb61efde308e0afd3597f82b00b43c41ef26ff6b9c396a67a3e91a6178635e66a7d87"]}, @nested={0x18, 0xe9, 0x0, 0x1, [@typed={0x14, 0x49, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0x48, 0x101, 0x0, 0x1, [@nested={0x4, 0x98}, @nested={0x4, 0x5b}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x64}, @typed={0xf, 0x125, 0x0, 0x0, @str='&\r-@@/$}-:\x00'}, @nested={0x4, 0x137}, @nested={0x4, 0xbe}, @generic="4bc037dba9a0924fc6365361301607ddcae67e7bd203f508"]}, @generic="431cd9182baee166793bd2c83a52b64757b3ecf657ec57ead50e9565620b48df908d26506936019d114b77c37ce49fc473e098b0f7959f1dc2824e0315b1882eb2d2baad726e2db478cf8a190faa1836d5f92bbc59b4d69f0c9c56a8cafcef939c21529455e6d1694f012ed3da1e4afbe1d3ca2ade13deb2b89e8078ff2cbbdbc831e3339593fa7018d5f1e85f0b6a9729f9191acd0bdce51a9159555634e8c02b"]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe0}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x1a}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0xd4}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async)
connect$auto(0x3, 0x0, 0x55)
executing program 5:
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=<r0=>0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
socket(0x15, 0x3, 0x440a) (async)
socket(0x15, 0x3, 0x440a)
socket(0x25, 0x5, 0x0)
sendfile$auto(0x6, 0x3, 0x0, 0xfdef)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
mmap$auto(0x2000000000000, 0x2, 0x9, 0x9b71, r0, 0x2) (async)
mmap$auto(0x2000000000000, 0x2, 0x9, 0x9b71, r0, 0x2)
io_setup$auto(0x80002, 0x0) (async)
io_setup$auto(0x80002, 0x0)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000001040)='/dev/snd/pcmC1D1c\x00', 0x20400, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r1, 0x40084149, &(0x7f0000001080)=0x7)
io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) (async)
io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0) (async)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0)
r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82) (async)
read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82)
socketpair$auto(0x1, 0x11, 0x8000000000000000, 0x0)
socket(0x15, 0x5, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x150b) (async)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x150b)
executing program 5:
socket(0x29, 0x801, 0x80084)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = socket(0x11, 0x1, 0x2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00')
open(&(0x7f0000000080)='./file0\x00', 0xc0000, 0x0)
getsockopt$auto(r0, 0x107, 0xb, 0x0, 0x0)
socket(0x29, 0x801, 0x80084) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
socket(0x11, 0x1, 0x2) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') (async)
open(&(0x7f0000000080)='./file0\x00', 0xc0000, 0x0) (async)
getsockopt$auto(r0, 0x107, 0xb, 0x0, 0x0) (async)
executing program 5:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
clone$auto(0x5, 0xc00000000000, &(0x7f0000000000)=0x4, &(0x7f00000000c0)=0x6, 0xdaa) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/reboot/cpu\x00', 0x1a1842, 0x0)
pwrite64$auto(r0, &(0x7f0000000000)='\\\x00', 0xf4a, 0x100000001) (async, rerun: 64)
r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x103100, 0x0) (rerun: 64)
ioctl$auto_IMDELTIMER(r1, 0x80044941, 0x0) (async)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 5:
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040000)
getdents64$auto(0x8, 0xffffffffffffffff, 0x100000001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x9, &(0x7f0000000180)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x4004}, 0x7}, 0x5, 0x0)
executing program 35:
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040000)
getdents64$auto(0x8, 0xffffffffffffffff, 0x100000001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x9, &(0x7f0000000180)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x4004}, 0x7}, 0x5, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0xbb)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x0, 0x0) (async)
read$auto(r0, 0x0, 0xbb) (async)
write$auto(0x3, 0x0, 0xfdef) (async)
executing program 7:
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
sendfile$auto(0x6, 0x3, 0x0, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
unshare$auto(0x20000080)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
munmap$auto(0x20001000, 0x7)
mmap$auto(0x51, 0x8, 0x1, 0xeb1, r0, 0xb882)
socket(0x21, 0x2, 0x2)
socket(0x23, 0x2, 0x53f0800)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x3, 0x0, 0x0)
socket(0x2, 0x3, 0xa)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
ioctl$auto(0x1, 0x89a3, 0x8)
socket(0xa, 0x5, 0x0)
setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x0)
executing program 3:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = socket(0x18, 0x3, 0x200)
setsockopt$auto(r1, 0x5, 0x20, 0x0, 0x4)
r2 = semctl$auto(0x7ff, 0x3, 0x80, 0xfffffffffffffff7)
r3 = epoll_create$auto(0x3e)
epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0)
fcntl$auto_F_DUPFD(r3, 0x0, 0x0)
kill$auto(r2, 0xfffffffd)
r4 = socket(0x10, 0x2, 0x0)
mount$auto(0x0, 0x0, &(0x7f0000000380)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2jfg\xb3G\xbe\xc8\x12\xae\xcc\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4\xd36\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd]\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa04RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95x\xae\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\x02\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14>\xdf\x93\xa4A\xbe\xa5\x9b\xa3\xaa\xe0\xd6\xa7\xfd\x06|s\x00EB?9O\xa4\x82\x8b\x86\xbd\xf2\xbc\xe5\xf2ci\xcc%\x1bR\x9f\x94\x91\xd14?\xfc\xe6\x89MZ\x1f\x86Gs^\x01\xbc\x15\t\xe8%p4/\x00\x00\xff\xbb1\xca\x89te\xbd\x8dT\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00GS\xbb\x0eO\xb4a\x00\xc0\xc8\xfc\x8e\x8a\xaaq\xc6B\xde\xc1\xa5\x97x\xb9\xb9P\x8e\xb9q[_\bAe\\', 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="13000300", @ANYRES16=0x0, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008804}, 0x80)
r6 = socket(0x10, 0x2, 0xc)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x800000000000000, 0x1}, 0x4000000)
recvmmsg$auto(r4, 0x0, 0x10000, 0x4, 0x0)
mmap$auto(0x0, 0x400005, 0x1, 0x11, r6, 0x62)
adjtimex$auto(&(0x7f0000000280)={0xf, 0x0, 0x8, 0x100000001, 0x40000000007f, 0x0, 0xffffffff, 0x0, 0x659, 0x0, 0x10001, {0xffffffffffffffff}, 0x7fffffffffffffff, 0x5, 0x5, 0xf, 0x0, 0x6, 0x1, 0x7, 0x8, 0x5, 0x1015c8})
shutdown$auto(0x200000003, 0x2)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf255500000008005200", @ANYRES32=r2, @ANYBLOB="29001501f8b5e443a71bbbeabb58aab966acdba8e06a37b830ab482ea07e00f7b20f70c2a37ab3f2e3000000e8755d5eba59288d22afe388d42370e7f88d950200080000000000001e49ad7329ed68692fbd62e4b150692029363cce9d7b2ec145493e8536d2a7a3d6c964937a97680da18fe017e74ef4"], 0x48}, 0x1, 0x0, 0x0, 0x24004845}, 0x20000000)
clone$auto(0x75, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0xa)
socket(0x2, 0x801, 0x100)
socket(0xa, 0x801, 0x100)
executing program 3:
close_range$auto(0x2, 0x8, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040))
fcntl$auto(r0, 0x402, 0x400000fffffffd)
fcntl$getown(r0, 0x9)
r1 = fcntl$auto(0x300000000000000, 0x402, 0x80000004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_seg6(&(0x7f00000002c0), 0xffffffffffffffff)
close_range$auto(r2, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
r3 = socket(0x26, 0x80805, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x40000, 0x108)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
copy_file_range$auto(r5, &(0x7f0000000140)=0x5, r5, 0x0, 0x6, 0x1)
sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r1, @ANYRESHEX=r0], 0x2c}}, 0x4040084)
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/mm/ksm/advisor_max_pages_to_scan\x00', 0x20b42, 0x0)
socket(0x26, 0x1, 0x7)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x5c1083, 0x0)
read$auto(r4, 0x0, 0x100000009)
write$auto(0x3, 0x0, 0x1)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x800, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0xfffffded)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/content\x00', 0x181b80, 0x0)
read$auto(r6, &(0x7f0000000440)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xecC\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb08\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk\x02_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1e\xe9T1\xbf\xc8_^\a\x03\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xddC\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3\xb0\x84\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda+U\b\x88\xa7\x88\x1fC\xbb\xa8\xce\x0f\xd5\xdew\x99\x18G.s\x16\xfa\xf2\x96|\x1e]\xe5\xf8\xb1\x8b.}\x841\xd8\x98\xd8f86h\xab\x94\x7f\xc4<\x03\xdd\x86=\xb6\x1e@\xab6\x81\xce\xaa\xcf\xfd\x947\xc3\x86\xfe\xb7O\xd9\xa9\xb6[\xcc\xd8\xe1\xa9\x84[\xe0\xd4\x03\x90@\x03\xbe\xba\xee\xed\xe9\xb1\xd2\xf1\x8cgn\xb7m/\xf1\"\xc2\xeb\x1d\x04\xf3\xf1\x96\xf2\x00C\xf0wg\xd6\x11\x18\xb5o\x9d\xd7`\xce\x81\x9b1b\x8ce\x99*\xa3\xd2\x8dAw\xd9\xa6l\\\x17\xbb\xf6\xe2\xa2<\n\xc0\f:\x97\xff\xc6y\x05<\xa6\x81\xd92\xc9\x9e\f[\xf9\xfc\xf1ih\"J\x92\xd2\xd4\xc2\xe8\x89 \x81\xbf8C\xa9\x1at\xa1\xdc\x94\xc5\xc8K\xbb\x14h\xa9)\xaa\xf2\xda\xaf\xb1\rs\xe6\x97\x1e\xcc6\x94\xff\x1b\x8e\x98\xf7\xa0', 0x67b)
executing program 6:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000028, 0x6, 0x2}, 0x0, 0x227, 0x0)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0)
mmap$auto(0x0, 0x9, 0x3, 0x8012, r0, 0x81000000)
getsockopt$auto_SO_TIMESTAMPING_OLD(r0, 0xd7, 0x25, &(0x7f0000000040)='^\x00', &(0x7f0000000080)=0x4)
executing program 7:
r0 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x81141, 0x0)
r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0)
write$auto(r1, 0x0, 0x100082)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
fsconfig$auto_SHMEM_HUGE_ADVISE(r1, 0x7c6, &(0x7f0000001180)='/dev/virtual_nci\x00', &(0x7f00000011c0)="bd7f9df9556726a65b0b7f5c883a099b8e0a5f81f2018319ac1f1a0ce84bd23bd1f5646be521d2fa4351b4ebecfede4cb58fa5d6e1c7870898a01040945c9f22d8bdc332aecb11faa927403176e96d", 0x3)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
getsockopt$auto(r0, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x8009a)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
readv$auto(r2, &(0x7f00000000c0)={0x0, 0x5}, 0x3)
ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0)
mmap$auto(0x0, 0x7, 0x10000df, 0x200000009b72, r0, 0x7fff)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x18, 0x5, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="41004bbd7000fbdbdf250a000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
capset$auto(0x0, &(0x7f0000000140)={0xfffe, 0x7, 0x1ff})
r3 = semctl$auto_SEM_STAT(0x7ff, 0x0, 0x12, 0x7fff)
prctl$auto_PR_GET_THP_DISABLE(0x2a, 0xf1, r3, 0x80000001, 0x8)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto_PR_RISCV_V_GET_CONTROL(0x46, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8, 0x919c)
ioctl$auto_USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000100)={0x8000, 0xdf, 0xffffff80, &(0x7f0000000180)="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"})
prctl$auto_PR_GET_AUXV(0x41555856, 0x1, r3, 0x0, 0x2)
prctl$auto_PR_GET_AUXV(0x41555856, 0x1ff, r3, 0x9, 0x338c)
executing program 6:
mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x4004510f, 0xffffffffffffffff)
socket(0x2, 0x6, 0x0)
io_uring_setup$auto(0x3, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004)
r1 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(r0, r1, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
io_uring_setup$auto(0xcb2, 0x0)
r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
read$auto(r2, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x200, 0x0)
madvise$auto_MADV_GUARD_REMOVE(0x104, 0xffffffffffffd31a, 0x67)
executing program 3:
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
tkill$auto(0x0, 0x7)
syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x80080, 0x0)
mmap$auto(0x0, 0x3, 0xdc, 0xeb1, 0x40000000000a5, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
clock_adjtime$auto(0x0, 0x0)
readv$auto(0x3, 0x0, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x24ca1976, 0x4)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x20000, 0x20000400008, 0x6, 0x9b72, 0x2, 0x8000)
executing program 6:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x10000000016, 0x5, 0x4, 0x2, 0x0)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
setreuid$auto(0x3, 0x7)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6})
r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(r0, r0, 0x5)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0)
lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x1ff, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
shmctl$auto_SHM_STAT(0x8, 0xd, &(0x7f0000001180)={{0x3, 0xee00, 0xee01, 0x0, 0xfffffff3, 0x8, 0x8001}, 0x5, 0xa, 0x8, 0x7, @inferred=0xffffffffffffffff, @raw=0xa7ea, 0x8, 0x0, &(0x7f0000000180), 0x0})
capset$auto(&(0x7f0000001200)={0x5, 0xffffffffffffffff}, 0x0)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="679d3cba8c5a", @ANYRES16=r1, @ANYBLOB="040029bd7000fddbdf25360000000c00458008007900ac141411060066004e23000037000d019d076174031fda516c93107e11aeff823bb865657142dffc403a5bda08dde95fc70e652b9b8a5fdb24ed32dedee260e754a8f800"], 0x60}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000004)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2440, 0x0)
read$auto(r0, 0x0, 0x400000)
executing program 7:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, 0x0)
write$auto(0x3, 0x0, 0xfdef)
gettid()
openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
mmap$auto(0x4, 0x40002020007, 0x400000003, 0xd0, r0, 0x6b18)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x800, 0x0)
read$auto(r1, 0x0, 0x8000)
mmap$auto(0x7fffffffffffffff, 0x9, 0x0, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
socket(0x9, 0x0, 0x9)
getpeername$auto(0x3, 0x0, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv6/conf/default/mtu\x00', 0x0, 0x0)
r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$auto_TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000340)=0xfffffa93)
read$auto(0xffffffffffffffff, 0x0, 0x71e)
openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x400040, 0x0)
r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(r3, 0x0, 0x40)
ioctl$auto_MTDFILEMODE(r3, 0x4d13, 0x0)
writev$auto(r1, &(0x7f00000035c0)={0x0, 0x4}, 0xc)
io_uring_setup$auto(0x406, 0x0)
r4 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
read$auto_dev_fops_plock(r4, &(0x7f0000000000)=""/17, 0x11)
executing program 6:
r0 = memfd_secret$auto(0x1)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv6/conf/default/mtu\x00', 0x0, 0x0)
read$auto(0x3, 0x0, 0x80)
r1 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0)
writev$auto(r1, &(0x7f00000035c0)={0x0, 0x4}, 0x9)
read$auto_fops_u32_ro_(r0, &(0x7f0000000000)=""/109, 0x6d)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, 0x0)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
fsopen$auto(0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, 0x0, 0xdaea6d7da654cc89, 0x0)
fsetxattr$auto(r3, 0x0, &(0x7f0000000380), 0x7, 0x10001)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
r4 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x401, 0x1ff, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, [0x2000, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x400000040000000, 0xffffffffffffffff, 0x4, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x11af, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffe, 0x8, 0x4000000000, 0x7, 0x2]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0)
executing program 1:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0)
r1 = socket(0xa, 0x801, 0x84)
mmap$auto(0x1, 0x4000000000000000, 0x3, 0x400000012, r0, 0x80000000008000)
sendfile$auto(r1, 0x3, 0x0, 0x0)
mmap$auto(0xdffffffffffffff8, 0x402000a, 0x80000001, 0x13, r0, 0x8003)
socket(0xa, 0x3, 0x87)
mmap$auto(0x10000000000000, 0x400008, 0x20e3, 0x9b72, 0x2, 0x8000)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
write$auto(0x3, 0x0, 0x5dc)
unshare$auto(0x40000080)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
munmap$auto(0x20001000, 0x7)
madvise$auto(0xeffffffff7ffdb2a, 0xffffffffffffffff, 0x1ff)
mmap$auto(0xfffffffffffffffe, 0x40009, 0xb57, 0x9b76, 0x7, 0x27ffd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x40000008000)
ioctl$auto(0x3, 0x800005411, 0x38)
open(&(0x7f0000000040)='./file0\x00', 0x161342, 0x100)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, r1, 0x4)
socket(0x11, 0x2, 0x80008000)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/026/001\x00', 0x107000, 0x0)
io_uring_setup$auto(0x2, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
executing program 6:
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
sendfile$auto(0x6, 0x3, 0x0, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
unshare$auto(0x20000080)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
munmap$auto(0x20001000, 0x7)
mmap$auto(0x51, 0x8, 0x1, 0xeb1, r0, 0xb882)
socket(0x21, 0x2, 0x2)
socket(0x23, 0x2, 0x53f0800)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x3, 0x0, 0x0)
socket(0x2, 0x3, 0xa)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
ioctl$auto(0x1, 0x89a3, 0x8)
socket(0xa, 0x5, 0x0)
setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x0)
executing program 7:
mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = prctl$auto_PR_MCE_KILL_GET(0x22, 0x4c, 0x0, 0x7, 0x4)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000018c0)={0x1c, r5, 0x159198c6007aa95d, 0x70bd26, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000ec0)=""/4096, 0x1000)
r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r4)
r8 = clone3$auto(&(0x7f0000000100)={0x3, 0x2, 0x9, 0xdf1, 0x9, 0x81, 0x3, 0x2, 0xffffffff, 0x9, 0xbba}, 0x5)
r9 = semctl$auto_SEM_STAT(0x101, 0x6, 0x12, 0x40)
sendmsg$auto_NFC_CMD_START_POLL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x4f0, r7, 0x900, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_SDP={0x492, 0x13, 0x0, 0x1, [@generic="e32d5c2a37bdbf44", @typed={0x14, 0x11d, 0x0, 0x0, @ipv6=@local}, @typed={0x4, 0xda}, @nested={0xe4, 0xf3, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x67}, @generic='\\', @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, @typed={0x8, 0x134, 0x0, 0x0, @u32=0x5}, @generic="0f2669d0d3a825fb9064f9b270465de0", @generic="85bfb7fecf66fa345ff356fefb159a5771e5937480e680d784b93d098e48e07a524abb7e641cb6182aa332c47d0ff812551f36d42f433b6ed7c02190a56cda36ddad0d4bf9c5acd68bc265f8b5275e532bc9d9527beddf4e9a6b8938afa36215369b34802a23b229828ea5bac25337db6593916de7c5173487c18d23f9d6ac122a8fdb74bd867945672a57166839fb590b557068ae4d32af7fa0de"]}, @typed={0xda, 0x131, 0x0, 0x0, @binary="d8c1979236d36b5289b5a04f2c0e850f9198f1c9b25600c95b3005f2caef7f966621b52f575fb5940ab804a583e8ad444a6abb50a991981bd4db479c670b6b7e19159ca281a7d1d60e93dcde51f36fae3df83548379d0785cfe57c939a295fe9fbaea54638bb19c3b89836343522ed32adc0791c28e51236965098d6aba848ed5b0109113bc869dd5978be6480f91271d28582d47caab6f414e92da1ada71c711a38331a6d7341884fd0b4f92506e09f3f4b9b14ebc60bc253f46accfca1c60cd006594ee46ba28bbf53a8ebd450948799933732d31b"}, @generic="d345f8089dad93ecea785c562a4b06e088821989310676db791e11ebcef9254a5f4e1de8d4e11c97b8910271dff759282e3524f793f783f23f491f48925ad5e603d2e531ad15c8ccfbed80b0a0ec39e81f271ab6532566cfe27716a0d5d7cc1122dba3688ab1ffd918ee1b987f4b6b3b6d", @nested={0x1cd, 0xde, 0x0, 0x1, [@typed={0x8, 0xa4, 0x0, 0x0, @pid=r8}, @typed={0x14, 0x129, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}, @nested={0x4, 0x140}, @generic="5b04155f4f39c937b65d0a24705f04fff3c64b17a32f45293bb9bf78e881e0aa06199842196e23c8266aa12411b3b613457e81e72ed52fa4e7eb3d4ae70498fabaa72184847eacee2c36f10a1a0b52b1c4c9b1564abacea5ddb0b57a20ed1a8a947354a7eb75df257d5b245d72b22e865171ccbc5e6129edcc86088325fec0a2", @typed={0x8, 0x21, 0x0, 0x0, @pid=r9}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @typed={0x8, 0x145, 0x0, 0x0, @u32}, @typed={0x8, 0xed, 0x0, 0x0, @u32}, @nested={0x4, 0x64}, @generic="491311744016f3d0b6ea92bd526bd11bb7a7f61657891b7e9343efcfaa8593ec6eb6061e708a0132140fd6c988f1581771c64cceec1fd9fb1e4fa3ed199628fd1b2152cc5d87e16550753a561e36ba96b385ca1dfc199c3a673bdfa717e3a55e068aae7ad368ea4f79ec8a99f6ef5ce7395d5ce8891ed650902656fbecf33312933120e894d5ed3b7ba7a72b3dfb35481083784398d77f3bd89b7f2dcd854dde8b50639a20768ea1f6fe44cd9ceab7c6f1ae889969bb4ef44256a75547f66a4ea17b674db3c2d4b655ffd9406f42d10d18565834a914801df83400fcf9a0ab95b375a3a402e162c7ef92ea14dbce774691d77b9fd22581ca6a"]}, @generic="3dac1d5506d3d062d91c527e239a858289a76d15c21be3e112469ac3dfc7f01379552420c1301580e54cec07bb517cff0aa8a3aa937d3f57d3c59c493352d96a73ef2faae1772a6b575a385f1d7fb4f64060ea1b3004147b145ed79370054cbab5cd50c02a53697749d99f0fba"]}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x447bc617}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xe3}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'ovs_meter\x00'}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xfffff5c3}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x58}, @NFC_ATTR_LLC_PARAM_LTO={0x5}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)
executing program 7:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mprotect$auto(0x1ffff000, 0x8020, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x800000000007)
lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1ff, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r2, 0x4010744d, &(0x7f00000001c0)={0x0, 0x2, 0x80})
timerfd_settime$auto(r0, 0x8001, &(0x7f0000000040)={{0x31, 0x43dde85e}, {0xca7, 0x4}}, &(0x7f0000000080)={{0x10001}, {0x100000000, 0xfffffffffffffff9}})
sysfs$auto(0x2, 0x100000000000031, 0x0)
fsopen$auto(0x0, 0x1)
ioctl$auto(0x3, 0x5403, 0x38)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x3, 0x3a)
sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100), 0x19)
ioctl$auto(0x3, 0x80000541b, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x0, 0x0)
ioctl$auto(r3, 0x540a, r1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
fdatasync$auto(r4)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x4004510f, 0xffffffffffffffff)
socket(0x2, 0x6, 0x0)
io_uring_setup$auto(0x3, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004)
r1 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(r0, r1, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
io_uring_setup$auto(0xcb2, 0x0)
r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
read$auto(r2, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x200, 0x0)
madvise$auto_MADV_GUARD_REMOVE(0x104, 0xffffffffffffd31a, 0x67)
executing program 7:
ioctl$auto_XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f00000000c0)={0x9, 0x7}) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) (async, rerun: 64)
r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4a140, 0x0) (async)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x11, 0x7f, 0x8000)
writev$auto(0xca, 0x0, 0x7e) (async)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
madvise$auto(0x0, 0x2000040080000005, 0xe) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0)
socket(0x28, 0x0, 0x1) (async)
mmap$auto(0x0, 0x4400006, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x6e)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000435326fcdbdf2501000000040027000074683c5f746f5f0000616d00000008000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000800040004000000140002007465616d5f736c6176655f3000000000080004001e580000"], 0x6c}, 0x1, 0x0, 0x0, 0x4004891}, 0x0) (async)
madvise$auto(0x6, 0xa627, 0x15)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
brk$auto(0xf065)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) (rerun: 64)
ioctl$auto(r2, 0xc004510f, 0x3) (async, rerun: 64)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64)
move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2) (async)
write$auto(r0, &(0x7f0000000040)='/sys/kernel/security/integrity/ima/policy\x00', 0xc6) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 3:
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0)
ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)="9b58b4fccb6c3b383dfc9362cd7b115312eddbc6e2")
read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f0000000980)=""/4098, 0x1002)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x6804c1, 0x0)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0)
ioctl$auto(r1, 0x800064bd, r1)
r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x81}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xe}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @HSR_A_IF1_AGE={0x8, 0x3, 0x2e}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
io_uring_setup$auto(0x6, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
ioctl$auto_PPPIOCSCOMPRESS(r3, 0x4010744d, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/hsr_slave_0\x00', 0x40, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
bind$auto(0x3, 0x0, 0x68)
lseek$auto(r2, 0x6, 0x1)
executing program 6:
r0 = openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x841, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x9, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x40, 0x8, 0x100000000}})
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) (async)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c0a, 0x0)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, 0x0, 0x800)
open(0x0, 0x4040, 0x75)
socket(0xa, 0x800, 0x8000003a) (async)
socket(0xa, 0x800, 0x8000003a)
connect$auto(0x3, 0x0, 0x55) (async)
connect$auto(0x3, 0x0, 0x55)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) (async)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(0x0, 0x0, 0x0, 0x10dfd057, 0x0)
mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, 0x0)
write$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(r0, 0x0, 0x2b)
poll$auto(&(0x7f00000010c0)={0xc8, 0x20, 0x7}, 0xc, 0x4) (async)
poll$auto(&(0x7f00000010c0)={0xc8, 0x20, 0x7}, 0xc, 0x4)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip6_tables_matches\x00', 0x783b43, 0x0) (async)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip6_tables_matches\x00', 0x783b43, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/44, 0x2c)
r3 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000000c0)=0x6)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async)
r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000007c0))
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) (async)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0)
mmap$auto(0x8, 0xc, 0x1fee, 0x1d, r3, 0x7)
io_uring_register$auto(r3, 0x1, &(0x7f0000000280)="17fc46c3a3d8b13500cef1d51102982e591e7c92b61e7d817e78a24986edd6e80c012647bab3e2fdcf1b00861f1fb2f1925c1dd7db4abe1d87c0ab8222400f58bae42f7ca672461c438387f4bda59cb37ce530e823507c74f663f9597352b829762bc6c349f5c183435d5fd12f71b3e2b9cf92d951a99d9bdedc45a1322979951b51933345af6b567b7edfa35efda49770210313bfe94edf2fdb28e9f84e53b4860329f87fd7071723dd64a3f7f5ab5be729d7395dba99fc6713e09a3c5a85", 0x7)
read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/249, 0xf9)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2440, 0x0)
read$auto(r0, 0x0, 0x400000)
executing program 1:
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
r0 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6erspan0\x00', <r2=>0x0})
r3 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000200)={@siginfo_0_0={0x5, 0x6, 0x7d, @_rt={0xffffffffffffffff, 0xee00, @sival_int=0xfffff84b}}}, 0x1, &(0x7f0000000280)={{0x9, 0x4813}, {0x7997, 0x4}, 0x9, 0x8, 0x1, 0x437a, 0x1, 0xff, 0x6f, 0x3, 0x1f, 0xbe50, 0x3, 0x6, 0x1, 0xfffffffffffff9c9})
msgctl$auto_IPC_RMID(0x8, 0x0, &(0x7f00000003c0)={{0x3, <r4=>0xffffffffffffffff, 0x0, 0xa, 0x7, 0x4}, &(0x7f0000000340)=0x2, &(0x7f0000000380)=0x1, 0xb06d, 0x7, 0x0, 0x0, 0x4, 0xcb, 0xe5b, 0x6000, @inferred=0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'veth1_to_bridge\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'dvmrp1\x00', <r6=>0x0})
sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f00000004c0)={0x740, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r1}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r2}, @MACSEC_ATTR_SA_CONFIG={0x10e, 0x3, 0x0, 0x1, [@typed={0xe1, 0xb9, 0x0, 0x0, @binary="615e9bbf250553600dd6701b70580f756edce430fb79accb1dbee5d056e800deef078870409573360f7713f30debfe3f3edab2ca06a14384a6609fc9add8af6cb511ac8e00a6a04fa418c38d2263552f373426ee7b8d2e1ba92b71870d06d6ffe9da6bc052b2e9b5c2ce4c4d64848741bbc6a893abd55a2d46a667d945d73dc26c949175ef657d39a0d8165dc162ea4ba9d6ed0950fbebe1c8644bb650ceb3c8f8bc4b5606074d3f502dcab869ae5f69d8f957d2394ceafe1bde60ea99601757c821e1d14e512f77de89a2d871b0c8bf9c6b51096eb5cc876f8bd8e478"}, @generic="1b20b324b2f41f9acb988b2a6a5ddd6fe907be5ce7f5469d586a84da5075caae5df35be9f7c0"]}, @MACSEC_ATTR_SA_CONFIG={0x9c, 0x3, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @pid=r3}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x79, 0x7e, 0x0, 0x1, [@typed={0x8, 0xfe, 0x0, 0x0, @uid=r4}, @generic="cc5349fa409d8be3340ecb6b1b18a660d686ef5ea7d5a0e0f5067e5f754e53c2e80a12b37c9d44fdfcfdc98fcd3b8ebc322274a14f9abdc67a698d9ad0aadca6f195fec3c542f4b61d71bd2c20942aefceb9e57a2e1bc9e73cc0fdb3fcd37b06f6f5fb664d2ac9c8f168660469"]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}, @MACSEC_ATTR_OFFLOAD={0x560, 0x9, 0x0, 0x1, [@generic="de6fff53a57eaed6fce38a64dc0db7052affad5b8c701709a3d7ccafa6e93890c5037cecc83bdf42fcb42a9b3b0c09c45b028c8be81531c2da9d3757ad056f02fa0c70e6f68a31543bf509ff80ec7b873687bee94b71cfe472e265af182eeb3ef24f5a3cc25ee783ebaed25b2f6a9baee1b6469466504f1fc073e4c6d829b64e92ec3b5523d60347cbcd8cb6125a7b316bd12dbc69a93cbaa9e0d94e5a5d2404b735ce81074dea0e5f03608a9c142c6b2bff7007", @generic="5916e63351da0964d7d5c574b77f1c65d2e3e827279353088a0d5e64e81ebc2f9283891e8bd3496633e5767c8dd2bf07d1db58026157a39d01897ad3449ee2d85b2504c14b32b79700feed0457b4ffe9298644f5b48c7baf55b5113cd91618cd499d815f7c7c62bf0c5d05ebf9efe7f1d641b6530baa4a8d284b7b444ed9f4a18710f11e3a109660df1bd315195d515c494c30b6e00220291959ba06193b9f406e77c68c3f79c3aae5a41c24c9831a74ce9bc4c6ecfd5d4a17cdd5c89a2f23923662d09910b12ccde1ee16975478e8d9be8d5fb73bd6724bc867a6a8799c78f619f0e0b3181943", @nested={0x220, 0x40, 0x0, 0x1, [@generic="70d9b4080ee989779c03ca0d08d6ba3b1fc7b9178aa4440d31c3da3aa31127d1dcbe3e73a240e08c5edff3ecc14190fdc874490e096cd3b23be1a539a53605bbcfd14564fc7443b81b8ef12a467da79c1f1e1e078f234a", @nested={0x4, 0x123}, @nested={0x4, 0x9e}, @generic="6f53690d0f541d0fc24503cf8a4645542773626fd9ec229116af3e56f3adfa1d684c2d1f00aef53cb15c516d964f5cf09e8fdd0c7c581870662f23d4350e35d40888590eac97e9753d52022a694d31c9d5e45178b03a9a2317a567746dd635ed0f1a49c190d60f668fea8d6bd41cbaf028e37ba27f69a9abb35cc4b66441467546d5d78d9f04cecd320ffadf340595caff67cc6d19bf2bbaaf77e22f9e855c17a75868254bd68387b6bbda31eaa6bb759acdd138aa5d80", @typed={0x4, 0xe7}, @typed={0xc, 0xf9, 0x0, 0x0, @u64=0xfe70}, @nested={0x4, 0x124}, @typed={0x8, 0x118, 0x0, 0x0, @uid}, @generic="548d39a30da4c0a9cd32e28db5e777b18b3628076485fec4cdb7512ccb83af924b638ea2d3ad78399df0ef4198f4f46d6eb19fad974bfba6e22071bde2875061b61d9c9f4de65cef8c9334c17b4241f6ab24d760b0bd8a8a19c43225c4643313bfb27fa6cb0d3e26dbd04b67982c7165cdf9731eb7645d398b5e979a857797778008c77c6b7d990bfcf994ffd1c6f2f8e413a5b9846b5fcf00dcf0c83e453d44f89b3959f8b07a6f1b8c96f03334f955733dcf2cfbcf74e47c2003556f68b9e98654eae216739d64b16525b193373f70fb65c3ae72475b73770957327c597b179f6d6711e62024b338ae"]}, @generic="cea0d6f538ccfce3e62242924ed013a627e8e2270b6a6314ed", @nested={0xc, 0x60, 0x0, 0x1, [@nested={0x4, 0xc3}, @nested={0x4, 0x3a}]}, @nested={0x17c, 0x49, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@empty}, @generic, @nested={0x4, 0x125}, @generic="6649e551f71e3555d4672dddf326d38742d32678168e3cc6eb1f35b1884aa9388a2a4220a323ec2118d4ccaa67aa5f468fc129f3c8ed9f16d85b1b28e90976ec18412c221cb848b4ee5973e7280e8887b2b48390472205878ac1855fc1933dd18a574c9fbde7aba662e9df8f2e3eb1d965d5f7a376f229079c079c80df53e58f5a3eeb9b35b1ca04f4e78d304b04a85c01498b8a117ea16ca6b11f8c7fa5c744b0cc4884fcfd3e5b524f74554c0c6e1815d586cf8159", @nested={0x4, 0x6b}, @nested={0x4, 0x21}, @generic="95688c87eabf8b332162743f59ddc605aabfd7d34db037524916aa3fa52caf116ddb4ce3f359ff0b55fe5a8cf5ce2c9aa2a04a3884232e8149cbbc4dfc28e29dddfa71871f2599dad32cfb9544539f0bf26572dca53010736459d2a2788c422d7e97b0d143d1846c147bafcbd86841cde022df11658dedfd354aa7bc1dcbf12f5a38d746f319f87179e38cac5b344cece6c74242c7c9d094c9e761300dfad5fdfcbc", @typed={0xc, 0x2b, 0x0, 0x0, @u64=0x8}]}]}]}, 0x740}, 0x1, 0x0, 0x0, 0x4}, 0x10)
capget$auto(&(0x7f0000000000)={0x4, r3}, &(0x7f0000000080)={0x8, 0x6, 0x3})
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r7 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r7, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x3)
executing program 1:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a082, 0x0)
write$auto(r0, &(0x7f0000000100)='/dev/cec31\x00', 0x200)
openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim3/fail_reload\x00', 0x100, 0x0)
r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x1, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x101, 0x0, 0x5, 0x9ad}, 0x5}, 0x5, 0x20000000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
semctl$auto(0x9, 0xc1b8, 0x4, 0x1)
mmap$auto(0x2, 0x400008, 0xdf, 0x110, r1, 0x800008000)
r3 = socket(0x29, 0x5, 0x0)
syz_clone(0x40100100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
dup2$auto(r3, r3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_STATION(r3, 0x0, 0x40)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0)
pwrite64$auto(r4, 0x0, 0x1, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff)
fcntl$auto(0x3, 0x4, 0xa553)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xc2a2)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000080)=""/27, 0x1b)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0)
ioctl$auto(r4, 0x560a, 0x7)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-ioctl$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000080)=""/27, 0x1b)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0)
ioctl$auto(r4, 0x560a, 0x7)

program did not crash
single: failed to extract reproducer
bisect: bisecting 52 programs with base timeout 1m40s
testing program (duration=1m53s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 25, 21, 7, 4, 30, 23, 23, 7, 13, 36, 6, 30, 6, 26, 15, 30, 17, 30, 30, 30, 30, 17, 32, 14, 10, 11, 11, 14, 27, 30, 29, 5, 27, 16, 25, 27, 2, 30, 30, 30, 27, 18, 30, 16, 30, 24, 36, 2, 14, 29, 14]
detailed listing:
executing program 0:
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
r0 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
write$auto(r0, &(0x7f0000002740)='-1,\'$*@[}\x00', 0x2)
socket(0xa, 0x2, 0x88)
sendto$auto(0x3, 0x0, 0x8, 0xf950, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x3}}, 0x1e)
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.2MB.limit_in_bytes\x00', 0xd2200, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mincore$auto(0x1000, 0x8, 0x0)
mprotect$auto(0x2, 0xe2ff, 0x0)
mmap$auto(0x0, 0x2, 0x5, 0xeb2, 0x8, 0x1008000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0xc)
socket(0x2, 0x1, 0x0)
socket(0xa, 0x3, 0x6)
setuid$auto(0x800000000008)
getsockopt$auto(0x7, 0x29, 0x41, 0x0, 0x0)
r0 = socket(0x10, 0x2, 0x0)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x2, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_GET_TXSC(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="7b6f26bd7000fcdbdf100f000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8)
mprotect$auto(0x8, 0xffffffffffffffff, 0x400)
acct$auto(&(0x7f0000000080)='X\xb5[h\xcd\xaf\x06\x01\x00')
acct$auto(0x0)
executing program 0:
socket(0x2, 0x2, 0x88)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0xff)
socket(0x1d, 0x2, 0x2)
connect$auto(0x3, 0x0, 0x55)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
read$auto(0x3, 0x0, 0x10)
write$auto(0x3, 0x0, 0xffd8)
semget$auto(0x0, 0x13c, 0x1ff)
ioperm$auto(0x3, 0xe, 0x2000000000000149)
semtimedop$auto(0x0, &(0x7f0000000000)={0xa, 0x81, 0x36ec}, 0x1f4, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyaf\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSWINSZ2(r0, 0x5414, &(0x7f0000001180)="1204640a")
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2a, 0x2, 0x1)
connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x800, 0x0)
write$auto(0x3, 0x0, 0x3f00)
write$auto(0x3, 0x0, 0xfdef)
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6tnl0/addr_assign_type\x00', 0x75bc83, 0x0)
mprotect$auto(0x1ffff000, 0x80000000, 0x9)
acct$auto(&(0x7f0000000080)='X\xb5[h\xcd\xaf\x06\x01\x00')
acct$auto(0x0)
executing program 0:
r0 = socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
timer_create$auto(0x7, 0x0, 0x0)
timer_settime$auto(0x0, 0x1, &(0x7f00000000c0)={{0x400f, 0x10007}, {0x89, 0x1}}, 0x0)
timer_gettime$auto(0x0, 0x0)
setsockopt$auto(r0, 0x6a, 0x5, 0x0, 0x3)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x1, 0x8000000a00006, 0x5, 0x100040ebe, 0xffffffffffffffff, 0x300000000000)
quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0)
socket(0x2, 0x3, 0xfffffff1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
socket(0x2b, 0x1, 0x1)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x10000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0)
io_uring_setup$auto(0x1, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto(r1, 0x89f2, 0xffffffffffffffff)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x15, 0x5, 0x0)
bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
ustat$auto(0x801, 0x0)
sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da08, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
socket(0x1d, 0x5, 0x0)
read$auto(0x3, 0x0, 0x80)
executing program 2:
poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x3569, 0x8}, 0x34, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:13/sun\x00', 0x400, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x8000)
mmap$auto(0xfffffffffffffffd, 0x5, 0x0, 0x40eb6, 0x401, 0x7fff)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
ioctl$auto(0x3, 0x5386, 0x3b)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0)
ioctl$auto(0x3, 0x8004550f, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0xb4)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
clock_getres$auto(0xfffffffe, 0x0)
r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0)
adjtimex$auto(0x0)
read$auto(r0, 0x0, 0x0)
socket(0x2, 0x1, 0x0)
ioctl$auto(0x8000000000000001, 0x89ef, 0x9)
write$auto(0x3, 0x0, 0xfdef)
executing program 2:
statmount$auto(0x0, &(0x7f0000000380)={0x8, 0xfffffffe, 0x5, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x6, 0x8, 0x10003, 0x80, 0x6, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x1, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x4000000070624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0x6, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0xffff, 0x6, 0x7, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0xfffffffffffffffa], "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"}, 0x1fe, 0xd) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) (async)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x2, 0x0)
readv$auto(r0, &(0x7f0000002840)={&(0x7f0000002740), 0x7fffffff}, 0x6) (async)
mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0}) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x26, 0x80805, 0x0) (async)
fcntl$auto(0x8000000000000001, 0x5, 0x8)
socket(0xa, 0x3, 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) (async)
r3 = open(0x0, 0x261c2, 0x84)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) (async)
socket(0x2, 0x3, 0x100) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0)
executing program 2:
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2a, 0x2, 0x1)
connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x800, 0x0)
write$auto(0x3, 0x0, 0x3f00)
write$auto(0x3, 0x0, 0xfdef)
executing program 2:
setregid$auto(0x81, 0x5)
clone$auto(0x7fff, 0xff, &(0x7f0000000600)=0x8000, 0x0, 0x7)
socket(0x23, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd14/queue/iosched/writes_starved\x00', 0x500, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x15e)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
read$auto(0x3, 0x0, 0x80)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto(0x8000000000000001, 0x8946, 0x9)
poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1)
executing program 2:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x3, 0x6)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
bind$auto(r2, &(0x7f0000000000)=@isdn={0x22, 0x3, 0x1, 0x49, 0x1}, 0xfffffffe)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mmap$auto(0x0, 0x7, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x3, 0x6) (async)
r3 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x401c5820, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) (async)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0) (async)
r5 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8, 0x0) (async)
socketpair$auto(0x1e, 0x5, 0x8, 0x0)
ioctl$auto(r4, 0x2282, r5)
getcwd$auto(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0)
executing program 2:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_log/7\x00', 0x40802, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
acct$auto(&(0x7f0000000000)='/:\'%}-*%&\x00')
mprotect$auto(0xe, 0x2, 0x10001)
acct$auto(0x0)
executing program 32:
r0 = socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
timer_create$auto(0x7, 0x0, 0x0)
timer_settime$auto(0x0, 0x1, &(0x7f00000000c0)={{0x400f, 0x10007}, {0x89, 0x1}}, 0x0)
timer_gettime$auto(0x0, 0x0)
setsockopt$auto(r0, 0x6a, 0x5, 0x0, 0x3)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x1, 0x8000000a00006, 0x5, 0x100040ebe, 0xffffffffffffffff, 0x300000000000)
quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0)
socket(0x2, 0x3, 0xfffffff1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
socket(0x2b, 0x1, 0x1)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x10000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0)
io_uring_setup$auto(0x1, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto(r1, 0x89f2, 0xffffffffffffffff)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x15, 0x5, 0x0)
bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
ustat$auto(0x801, 0x0)
sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da08, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
socket(0x1d, 0x5, 0x0)
read$auto(0x3, 0x0, 0x80)
executing program 33:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_log/7\x00', 0x40802, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
acct$auto(&(0x7f0000000000)='/:\'%}-*%&\x00')
mprotect$auto(0xe, 0x2, 0x10001)
acct$auto(0x0)
executing program 4:
mmap$auto(0x0, 0x9, 0x800000000df, 0x9b76, 0xea8a, 0x7ffe)
open(0x0, 0x842, 0x91)
open(0x0, 0x10000, 0x124)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
unshare$auto(0x40000080)
openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Virtual-1/output_bpc\x00', 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0x3, 0x200000000001, 0x26, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0xffffffff, 0x10000000000002d, 0x0)
mbind$auto(0x8, 0x100000004, 0xb, 0x0, 0x6, 0x80002)
set_mempolicy$auto(0x1, 0x0, 0x5)
clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x8000002)
madvise$auto(0x1000, 0x5, 0x15)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfd, 0x8000)
move_mount$auto(0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x77)
r0 = socket(0x2, 0x2, 0x1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), r0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9)
io_uring_setup$auto(0x6, 0x0)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000)
clock_adjtime$auto(0x1, &(0x7f0000000000)={0x7, 0x8, 0x4, 0x8, 0x7fffffbf, 0xffffffc0, 0x6, 0x5, 0x3, 0x0, 0xb9, {}, 0x1000, 0x2, 0xb, 0x5, 0x2000006, 0x101, 0x7fff, 0x3})
close_range$auto(0x2, 0x8000, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid$auto(0x0, 0x594d0417, 0x0, 0x1000004, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
setsockopt$auto(0x3, 0x0, 0x24, 0x0, 0x28)
executing program 4:
sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async)
sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r0 = socket(0xa, 0x5, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32)
sysinfo$auto(0x0) (async, rerun: 32)
r1 = socket(0xa, 0x801, 0x100) (rerun: 32)
setsockopt$auto(r1, 0x6, 0x2, 0x0, 0xfb3)
connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffc}, 0x55)
r2 = socket(0x26, 0x80805, 0x0) (async)
bind$auto(r0, &(0x7f0000000000)=@generic={0x1d, "300d591f2aa59b764486be5aa222"}, 0xc5)
r3 = seccomp$auto(0xfffffff5, 0x7fff, &(0x7f0000000040)="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")
ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000001040)=0x7fffffffffffffff) (async)
msgget$auto(0x0, 0x5) (async)
sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) (async, rerun: 64)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (rerun: 64)
readv$auto(0x3, 0x0, 0x3)
unshare$auto(0x40000080)
openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000040)={0x2, 0x1, 0x5, 0x3d9, 0x7, <r4=>0x0})
pidfd_open$auto(r4, 0xfd8a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop9/queue/rotational\x00', 0x103400, 0x0) (async)
socket(0x10, 0x2, 0x14) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ioctl$auto_TUNGETIFF(r5, 0x800454d2, &(0x7f0000000080)=0x8)
executing program 4:
r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/error_log\x00', 0x191001, 0x0)
mmap$auto(0x0, 0x86c, 0x4000000000df, 0x60db, r0, 0x9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r1, 0x0, 0x9)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
socket(0x2, 0x3, 0x6)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mincore$auto(0x0, 0x10000, 0x0)
setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/rdma_readwrite_threshold\x00', 0x48041, 0x0)
write$auto(r2, 0x0, 0x6)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid})
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0x8000, 0x1}, 0x8}, 0x1, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
settimeofday$auto(0x0, &(0x7f0000002540)={0xb3a, 0x3})
executing program 4:
r0 = socket(0x2, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES8, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48084)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1b004d"], 0x1ac}, 0x1, 0x0, 0x0, 0x4048811}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x40, 0xf, 0xc, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x5, 0x200000100103})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r4, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/statistics/multicast\x00', 0x58140, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
r5 = socket(0x10, 0x3, 0x6)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x50)
close_range$auto(0x2, 0x8, 0x0)
executing program 4:
r0 = openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x6, 0x411, 0x9}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r2, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB], 0x4d0}}, 0x4000000)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r6 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"})
ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2, 0x0)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5)
sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="200028bd7000fedbdf255c0000000c002e010300000000000000080026000d000000040046008c000e80870002003a140fc839aa55bb30bd3eb544b904965d29514555d776b63cee5d02c3c265c2f5f56fd30a0178b9e1b43e29b612c9076ebf047d37782b6762ceba0c835f2f2f5a5103b79f1697d3526b93194600b21fadbec6063b32486e3e30c900da1d21c00a3962327fcb6c8a26838dec4d91a7ab2ff69af39f2ad461ddc9e363b39e48b93740b00005002a0103000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0)
r9 = open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_BTRFS_IOC_SEND_32(0xffffffffffffffff, 0x40449426, &(0x7f0000000240)={@inferred=r9, 0xf, 0x10000000, 0x55e, 0x2, 0x8, "1cc01fa02ccf70219850f17d8d0d6a11e6c8a945772f387b3e59760a"})
write$auto(0x3, 0x0, 0x800)
read$auto_hwsim_fops_group_(r0, &(0x7f0000000400)=""/138, 0x8a)
executing program 34:
r0 = openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x6, 0x411, 0x9}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r2, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB], 0x4d0}}, 0x4000000)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r6 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"})
ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2, 0x0)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5)
sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="200028bd7000fedbdf255c0000000c002e010300000000000000080026000d000000040046008c000e80870002003a140fc839aa55bb30bd3eb544b904965d29514555d776b63cee5d02c3c265c2f5f56fd30a0178b9e1b43e29b612c9076ebf047d37782b6762ceba0c835f2f2f5a5103b79f1697d3526b93194600b21fadbec6063b32486e3e30c900da1d21c00a3962327fcb6c8a26838dec4d91a7ab2ff69af39f2ad461ddc9e363b39e48b93740b00005002a0103000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0)
r9 = open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_BTRFS_IOC_SEND_32(0xffffffffffffffff, 0x40449426, &(0x7f0000000240)={@inferred=r9, 0xf, 0x10000000, 0x55e, 0x2, 0x8, "1cc01fa02ccf70219850f17d8d0d6a11e6c8a945772f387b3e59760a"})
write$auto(0x3, 0x0, 0x800)
read$auto_hwsim_fops_group_(r0, &(0x7f0000000400)=""/138, 0x8a)
executing program 5:
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
mmap$auto(0x8, 0x1020009, 0x20004000000000df, 0x400000000ffff, 0x401, 0x8003)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/hugetlb.1GB.failcnt\x00', 0x1a3b02, 0x0)
write$auto(r3, &(0x7f00000000c0)=',.\\\x00', 0xd)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
socket(0x2, 0x1, 0x106)
connect$auto(0x3, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, 0x2}, 0x46)
syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = socket(0x1a, 0x2, 0x3a)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r5 = socket(0x2, 0x80002, 0x73)
r6 = socket(0xa, 0x1, 0x84)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000100), r4)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(r6, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0)
sendmmsg$auto(r5, &(0x7f00000003c0)={{&(0x7f0000000200)="cf9ed62753b0b69a71f9", 0x5, &(0x7f0000000280)={&(0x7f0000000240)="6c182a90c5513c9416", 0x530}, 0xf2, &(0x7f00000002c0)="4bd2b39daa242d02a28c1406037f68674630edbf6e3fd6c40be6bca7a3b2948efcf251e333344f4e688ff5a75464e1b9b49c5a3119d207669d37e7b216e69e04daacbd93bd980094528c112f4708af8af5dd9367f4311da4288b9de5d043c2bacfd21c1ec1c7aafa419aba793fd5d18cfa8dc6a9d0ec506f46d1f119a489e040a3aa9ac2ba7ddeeae5297870a25f908f931c48caea848520a84c5c13ee13d307a378d3ed763658724a1f73d66c70180292c07eb523df526e705a33415928d07c133504136b72", 0x9, 0x9}, 0x400}, 0x2, 0x8)
executing program 5:
mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r0 = socket(0x2, 0x80002, 0x73) (async)
socket(0xa, 0x1, 0x84)
shutdown$auto(0x200000003, 0x2) (async)
uname$auto(0x0) (async)
setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) (async)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r1, 0x84, 0x2, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x149000, 0x0)
lseek$auto(r3, 0x6, 0x4) (async)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002ac0), r2)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002b00)={0x1c, r4, 0x1f97227bd58c1f83, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40004)
sendmsg$auto_NL802154_CMD_SEND_BEACONS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2e8, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}, @NL802154_ATTR_SEC_LEVEL={0x2b1, 0x2d, 0x0, 0x1, [@nested={0x1ab, 0x139, 0x0, 0x1, [@generic, @generic="a586d01e666f98e2a5e641839ed76247c26468cbdbb0b4ace27347472d03ffcd1fa4f7c148d62fd67b2f30853ce9f94ab1cb4fffacb97eece6da38d5f4765827f64a2fe37109f861f5f78692badf8120de796d53425709ab02c777e9547bbdbebf0bf473946c868fbd73f6d5ef374e75676dbce4669dcf5c6870ac857a7d21aced96b536058c53fae37bef49830713ab166479df8a", @nested={0x4, 0xd}, @nested={0x4, 0xe8}, @generic="36bfa484fae8325c16cec74359db4b4709518b8aac164c1a4d90fb5d38eb1a5a3694d71c637ba787c83d929e9b944830718ba4703eb8a60c733667ce7f14cdd652b5556c986cce71efb3eb29e384c87ed00ccabb8b38c718afb0774e11dd0d8d750d8982a7a0b44c9bead29c3003c37958355ecad3dd825848a946191ec746c9d5efefd902d1495c7958eb3283", @generic="50ef50500aea4730c329721df30aecc8f518ecf1983461f78863e0a370bc33a4bc6d71d7aff461a992d0feaae2995a96db07f27b8770dc83bc711a035d9f24434666b652caf2a9b2ed7b74c0a9751b0148e00adba7637ee8121e3cb61efde308e0afd3597f82b00b43c41ef26ff6b9c396a67a3e91a6178635e66a7d87"]}, @nested={0x18, 0xe9, 0x0, 0x1, [@typed={0x14, 0x49, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0x48, 0x101, 0x0, 0x1, [@nested={0x4, 0x98}, @nested={0x4, 0x5b}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x64}, @typed={0xf, 0x125, 0x0, 0x0, @str='&\r-@@/$}-:\x00'}, @nested={0x4, 0x137}, @nested={0x4, 0xbe}, @generic="4bc037dba9a0924fc6365361301607ddcae67e7bd203f508"]}, @generic="431cd9182baee166793bd2c83a52b64757b3ecf657ec57ead50e9565620b48df908d26506936019d114b77c37ce49fc473e098b0f7959f1dc2824e0315b1882eb2d2baad726e2db478cf8a190faa1836d5f92bbc59b4d69f0c9c56a8cafcef939c21529455e6d1694f012ed3da1e4afbe1d3ca2ade13deb2b89e8078ff2cbbdbc831e3339593fa7018d5f1e85f0b6a9729f9191acd0bdce51a9159555634e8c02b"]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe0}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x1a}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0xd4}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async)
connect$auto(0x3, 0x0, 0x55)
executing program 5:
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=<r0=>0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
socket(0x15, 0x3, 0x440a) (async)
socket(0x15, 0x3, 0x440a)
socket(0x25, 0x5, 0x0)
sendfile$auto(0x6, 0x3, 0x0, 0xfdef)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
mmap$auto(0x2000000000000, 0x2, 0x9, 0x9b71, r0, 0x2) (async)
mmap$auto(0x2000000000000, 0x2, 0x9, 0x9b71, r0, 0x2)
io_setup$auto(0x80002, 0x0) (async)
io_setup$auto(0x80002, 0x0)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000001040)='/dev/snd/pcmC1D1c\x00', 0x20400, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r1, 0x40084149, &(0x7f0000001080)=0x7)
io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) (async)
io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0) (async)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0)
r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82) (async)
read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82)
socketpair$auto(0x1, 0x11, 0x8000000000000000, 0x0)
socket(0x15, 0x5, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x150b) (async)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x150b)
executing program 5:
socket(0x29, 0x801, 0x80084)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = socket(0x11, 0x1, 0x2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00')
open(&(0x7f0000000080)='./file0\x00', 0xc0000, 0x0)
getsockopt$auto(r0, 0x107, 0xb, 0x0, 0x0)
socket(0x29, 0x801, 0x80084) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
socket(0x11, 0x1, 0x2) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') (async)
open(&(0x7f0000000080)='./file0\x00', 0xc0000, 0x0) (async)
getsockopt$auto(r0, 0x107, 0xb, 0x0, 0x0) (async)
executing program 5:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
clone$auto(0x5, 0xc00000000000, &(0x7f0000000000)=0x4, &(0x7f00000000c0)=0x6, 0xdaa) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/reboot/cpu\x00', 0x1a1842, 0x0)
pwrite64$auto(r0, &(0x7f0000000000)='\\\x00', 0xf4a, 0x100000001) (async, rerun: 64)
r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x103100, 0x0) (rerun: 64)
ioctl$auto_IMDELTIMER(r1, 0x80044941, 0x0) (async)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
executing program 5:
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040000)
getdents64$auto(0x8, 0xffffffffffffffff, 0x100000001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x9, &(0x7f0000000180)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x4004}, 0x7}, 0x5, 0x0)
executing program 35:
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040000)
getdents64$auto(0x8, 0xffffffffffffffff, 0x100000001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x9, &(0x7f0000000180)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x4004}, 0x7}, 0x5, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0xbb)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x0, 0x0) (async)
read$auto(r0, 0x0, 0xbb) (async)
write$auto(0x3, 0x0, 0xfdef) (async)
executing program 7:
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
sendfile$auto(0x6, 0x3, 0x0, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
unshare$auto(0x20000080)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
munmap$auto(0x20001000, 0x7)
mmap$auto(0x51, 0x8, 0x1, 0xeb1, r0, 0xb882)
socket(0x21, 0x2, 0x2)
socket(0x23, 0x2, 0x53f0800)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x3, 0x0, 0x0)
socket(0x2, 0x3, 0xa)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
ioctl$auto(0x1, 0x89a3, 0x8)
socket(0xa, 0x5, 0x0)
setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x0)
executing program 3:
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = socket(0x18, 0x3, 0x200)
setsockopt$auto(r1, 0x5, 0x20, 0x0, 0x4)
r2 = semctl$auto(0x7ff, 0x3, 0x80, 0xfffffffffffffff7)
r3 = epoll_create$auto(0x3e)
epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0)
fcntl$auto_F_DUPFD(r3, 0x0, 0x0)
kill$auto(r2, 0xfffffffd)
r4 = socket(0x10, 0x2, 0x0)
mount$auto(0x0, 0x0, &(0x7f0000000380)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2jfg\xb3G\xbe\xc8\x12\xae\xcc\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4\xd36\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd]\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa04RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95x\xae\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\x02\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14>\xdf\x93\xa4A\xbe\xa5\x9b\xa3\xaa\xe0\xd6\xa7\xfd\x06|s\x00EB?9O\xa4\x82\x8b\x86\xbd\xf2\xbc\xe5\xf2ci\xcc%\x1bR\x9f\x94\x91\xd14?\xfc\xe6\x89MZ\x1f\x86Gs^\x01\xbc\x15\t\xe8%p4/\x00\x00\xff\xbb1\xca\x89te\xbd\x8dT\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00GS\xbb\x0eO\xb4a\x00\xc0\xc8\xfc\x8e\x8a\xaaq\xc6B\xde\xc1\xa5\x97x\xb9\xb9P\x8e\xb9q[_\bAe\\', 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="13000300", @ANYRES16=0x0, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008804}, 0x80)
r6 = socket(0x10, 0x2, 0xc)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x800000000000000, 0x1}, 0x4000000)
recvmmsg$auto(r4, 0x0, 0x10000, 0x4, 0x0)
mmap$auto(0x0, 0x400005, 0x1, 0x11, r6, 0x62)
adjtimex$auto(&(0x7f0000000280)={0xf, 0x0, 0x8, 0x100000001, 0x40000000007f, 0x0, 0xffffffff, 0x0, 0x659, 0x0, 0x10001, {0xffffffffffffffff}, 0x7fffffffffffffff, 0x5, 0x5, 0xf, 0x0, 0x6, 0x1, 0x7, 0x8, 0x5, 0x1015c8})
shutdown$auto(0x200000003, 0x2)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf255500000008005200", @ANYRES32=r2, @ANYBLOB="29001501f8b5e443a71bbbeabb58aab966acdba8e06a37b830ab482ea07e00f7b20f70c2a37ab3f2e3000000e8755d5eba59288d22afe388d42370e7f88d950200080000000000001e49ad7329ed68692fbd62e4b150692029363cce9d7b2ec145493e8536d2a7a3d6c964937a97680da18fe017e74ef4"], 0x48}, 0x1, 0x0, 0x0, 0x24004845}, 0x20000000)
clone$auto(0x75, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0xa)
socket(0x2, 0x801, 0x100)
socket(0xa, 0x801, 0x100)
executing program 3:
close_range$auto(0x2, 0x8, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040))
fcntl$auto(r0, 0x402, 0x400000fffffffd)
fcntl$getown(r0, 0x9)
r1 = fcntl$auto(0x300000000000000, 0x402, 0x80000004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_seg6(&(0x7f00000002c0), 0xffffffffffffffff)
close_range$auto(r2, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
r3 = socket(0x26, 0x80805, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x40000, 0x108)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
copy_file_range$auto(r5, &(0x7f0000000140)=0x5, r5, 0x0, 0x6, 0x1)
sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r1, @ANYRESHEX=r0], 0x2c}}, 0x4040084)
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/mm/ksm/advisor_max_pages_to_scan\x00', 0x20b42, 0x0)
socket(0x26, 0x1, 0x7)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x5c1083, 0x0)
read$auto(r4, 0x0, 0x100000009)
write$auto(0x3, 0x0, 0x1)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x800, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0xfffffded)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/content\x00', 0x181b80, 0x0)
read$auto(r6, &(0x7f0000000440)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xecC\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb08\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk\x02_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1e\xe9T1\xbf\xc8_^\a\x03\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xddC\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3\xb0\x84\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda+U\b\x88\xa7\x88\x1fC\xbb\xa8\xce\x0f\xd5\xdew\x99\x18G.s\x16\xfa\xf2\x96|\x1e]\xe5\xf8\xb1\x8b.}\x841\xd8\x98\xd8f86h\xab\x94\x7f\xc4<\x03\xdd\x86=\xb6\x1e@\xab6\x81\xce\xaa\xcf\xfd\x947\xc3\x86\xfe\xb7O\xd9\xa9\xb6[\xcc\xd8\xe1\xa9\x84[\xe0\xd4\x03\x90@\x03\xbe\xba\xee\xed\xe9\xb1\xd2\xf1\x8cgn\xb7m/\xf1\"\xc2\xeb\x1d\x04\xf3\xf1\x96\xf2\x00C\xf0wg\xd6\x11\x18\xb5o\x9d\xd7`\xce\x81\x9b1b\x8ce\x99*\xa3\xd2\x8dAw\xd9\xa6l\\\x17\xbb\xf6\xe2\xa2<\n\xc0\f:\x97\xff\xc6y\x05<\xa6\x81\xd92\xc9\x9e\f[\xf9\xfc\xf1ih\"J\x92\xd2\xd4\xc2\xe8\x89 \x81\xbf8C\xa9\x1at\xa1\xdc\x94\xc5\xc8K\xbb\x14h\xa9)\xaa\xf2\xda\xaf\xb1\rs\xe6\x97\x1e\xcc6\x94\xff\x1b\x8e\x98\xf7\xa0', 0x67b)
executing program 6:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000028, 0x6, 0x2}, 0x0, 0x227, 0x0)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0)
mmap$auto(0x0, 0x9, 0x3, 0x8012, r0, 0x81000000)
getsockopt$auto_SO_TIMESTAMPING_OLD(r0, 0xd7, 0x25, &(0x7f0000000040)='^\x00', &(0x7f0000000080)=0x4)
executing program 7:
r0 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x81141, 0x0)
r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0)
write$auto(r1, 0x0, 0x100082)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
fsconfig$auto_SHMEM_HUGE_ADVISE(r1, 0x7c6, &(0x7f0000001180)='/dev/virtual_nci\x00', &(0x7f00000011c0)="bd7f9df9556726a65b0b7f5c883a099b8e0a5f81f2018319ac1f1a0ce84bd23bd1f5646be521d2fa4351b4ebecfede4cb58fa5d6e1c7870898a01040945c9f22d8bdc332aecb11faa927403176e96d", 0x3)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
getsockopt$auto(r0, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x8009a)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
readv$auto(r2, &(0x7f00000000c0)={0x0, 0x5}, 0x3)
ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0)
mmap$auto(0x0, 0x7, 0x10000df, 0x200000009b72, r0, 0x7fff)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x18, 0x5, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="41004bbd7000fbdbdf250a000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
capset$auto(0x0, &(0x7f0000000140)={0xfffe, 0x7, 0x1ff})
r3 = semctl$auto_SEM_STAT(0x7ff, 0x0, 0x12, 0x7fff)
prctl$auto_PR_GET_THP_DISABLE(0x2a, 0xf1, r3, 0x80000001, 0x8)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto_PR_RISCV_V_GET_CONTROL(0x46, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8, 0x919c)
ioctl$auto_USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000100)={0x8000, 0xdf, 0xffffff80, &(0x7f0000000180)="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"})
prctl$auto_PR_GET_AUXV(0x41555856, 0x1, r3, 0x0, 0x2)
prctl$auto_PR_GET_AUXV(0x41555856, 0x1ff, r3, 0x9, 0x338c)
executing program 6:
mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x4004510f, 0xffffffffffffffff)
socket(0x2, 0x6, 0x0)
io_uring_setup$auto(0x3, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004)
r1 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(r0, r1, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
io_uring_setup$auto(0xcb2, 0x0)
r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
read$auto(r2, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x200, 0x0)
madvise$auto_MADV_GUARD_REMOVE(0x104, 0xffffffffffffd31a, 0x67)
executing program 3:
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
tkill$auto(0x0, 0x7)
syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x80080, 0x0)
mmap$auto(0x0, 0x3, 0xdc, 0xeb1, 0x40000000000a5, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
clock_adjtime$auto(0x0, 0x0)
readv$auto(0x3, 0x0, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x24ca1976, 0x4)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x20000, 0x20000400008, 0x6, 0x9b72, 0x2, 0x8000)
executing program 6:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x10000000016, 0x5, 0x4, 0x2, 0x0)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
setreuid$auto(0x3, 0x7)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6})
r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(r0, r0, 0x5)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0)
lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x1ff, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
shmctl$auto_SHM_STAT(0x8, 0xd, &(0x7f0000001180)={{0x3, 0xee00, 0xee01, 0x0, 0xfffffff3, 0x8, 0x8001}, 0x5, 0xa, 0x8, 0x7, @inferred=0xffffffffffffffff, @raw=0xa7ea, 0x8, 0x0, &(0x7f0000000180), 0x0})
capset$auto(&(0x7f0000001200)={0x5, 0xffffffffffffffff}, 0x0)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="679d3cba8c5a", @ANYRES16=r1, @ANYBLOB="040029bd7000fddbdf25360000000c00458008007900ac141411060066004e23000037000d019d076174031fda516c93107e11aeff823bb865657142dffc403a5bda08dde95fc70e652b9b8a5fdb24ed32dedee260e754a8f800"], 0x60}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000004)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2440, 0x0)
read$auto(r0, 0x0, 0x400000)
executing program 7:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, 0x0)
write$auto(0x3, 0x0, 0xfdef)
gettid()
openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
mmap$auto(0x4, 0x40002020007, 0x400000003, 0xd0, r0, 0x6b18)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x800, 0x0)
read$auto(r1, 0x0, 0x8000)
mmap$auto(0x7fffffffffffffff, 0x9, 0x0, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
socket(0x9, 0x0, 0x9)
getpeername$auto(0x3, 0x0, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv6/conf/default/mtu\x00', 0x0, 0x0)
r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$auto_TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000340)=0xfffffa93)
read$auto(0xffffffffffffffff, 0x0, 0x71e)
openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x400040, 0x0)
r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(r3, 0x0, 0x40)
ioctl$auto_MTDFILEMODE(r3, 0x4d13, 0x0)
writev$auto(r1, &(0x7f00000035c0)={0x0, 0x4}, 0xc)
io_uring_setup$auto(0x406, 0x0)
r4 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
read$auto_dev_fops_plock(r4, &(0x7f0000000000)=""/17, 0x11)
executing program 6:
r0 = memfd_secret$auto(0x1)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv6/conf/default/mtu\x00', 0x0, 0x0)
read$auto(0x3, 0x0, 0x80)
r1 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0)
writev$auto(r1, &(0x7f00000035c0)={0x0, 0x4}, 0x9)
read$auto_fops_u32_ro_(r0, &(0x7f0000000000)=""/109, 0x6d)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, 0x0)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
fsopen$auto(0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, 0x0, 0xdaea6d7da654cc89, 0x0)
fsetxattr$auto(r3, 0x0, &(0x7f0000000380), 0x7, 0x10001)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
r4 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x401, 0x1ff, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, [0x2000, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x400000040000000, 0xffffffffffffffff, 0x4, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x11af, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffe, 0x8, 0x4000000000, 0x7, 0x2]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0)
executing program 1:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0)
r1 = socket(0xa, 0x801, 0x84)
mmap$auto(0x1, 0x4000000000000000, 0x3, 0x400000012, r0, 0x80000000008000)
sendfile$auto(r1, 0x3, 0x0, 0x0)
mmap$auto(0xdffffffffffffff8, 0x402000a, 0x80000001, 0x13, r0, 0x8003)
socket(0xa, 0x3, 0x87)
mmap$auto(0x10000000000000, 0x400008, 0x20e3, 0x9b72, 0x2, 0x8000)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
write$auto(0x3, 0x0, 0x5dc)
unshare$auto(0x40000080)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
munmap$auto(0x20001000, 0x7)
madvise$auto(0xeffffffff7ffdb2a, 0xffffffffffffffff, 0x1ff)
mmap$auto(0xfffffffffffffffe, 0x40009, 0xb57, 0x9b76, 0x7, 0x27ffd)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x40000008000)
ioctl$auto(0x3, 0x800005411, 0x38)
open(&(0x7f0000000040)='./file0\x00', 0x161342, 0x100)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, r1, 0x4)
socket(0x11, 0x2, 0x80008000)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/026/001\x00', 0x107000, 0x0)
io_uring_setup$auto(0x2, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
executing program 6:
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
sendfile$auto(0x6, 0x3, 0x0, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
unshare$auto(0x20000080)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
munmap$auto(0x20001000, 0x7)
mmap$auto(0x51, 0x8, 0x1, 0xeb1, r0, 0xb882)
socket(0x21, 0x2, 0x2)
socket(0x23, 0x2, 0x53f0800)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x3, 0x0, 0x0)
socket(0x2, 0x3, 0xa)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
ioctl$auto(0x1, 0x89a3, 0x8)
socket(0xa, 0x5, 0x0)
setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x0)
executing program 7:
mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = prctl$auto_PR_MCE_KILL_GET(0x22, 0x4c, 0x0, 0x7, 0x4)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000018c0)={0x1c, r5, 0x159198c6007aa95d, 0x70bd26, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000ec0)=""/4096, 0x1000)
r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r4)
r8 = clone3$auto(&(0x7f0000000100)={0x3, 0x2, 0x9, 0xdf1, 0x9, 0x81, 0x3, 0x2, 0xffffffff, 0x9, 0xbba}, 0x5)
r9 = semctl$auto_SEM_STAT(0x101, 0x6, 0x12, 0x40)
sendmsg$auto_NFC_CMD_START_POLL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x4f0, r7, 0x900, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_SDP={0x492, 0x13, 0x0, 0x1, [@generic="e32d5c2a37bdbf44", @typed={0x14, 0x11d, 0x0, 0x0, @ipv6=@local}, @typed={0x4, 0xda}, @nested={0xe4, 0xf3, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x67}, @generic='\\', @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, @typed={0x8, 0x134, 0x0, 0x0, @u32=0x5}, @generic="0f2669d0d3a825fb9064f9b270465de0", @generic="85bfb7fecf66fa345ff356fefb159a5771e5937480e680d784b93d098e48e07a524abb7e641cb6182aa332c47d0ff812551f36d42f433b6ed7c02190a56cda36ddad0d4bf9c5acd68bc265f8b5275e532bc9d9527beddf4e9a6b8938afa36215369b34802a23b229828ea5bac25337db6593916de7c5173487c18d23f9d6ac122a8fdb74bd867945672a57166839fb590b557068ae4d32af7fa0de"]}, @typed={0xda, 0x131, 0x0, 0x0, @binary="d8c1979236d36b5289b5a04f2c0e850f9198f1c9b25600c95b3005f2caef7f966621b52f575fb5940ab804a583e8ad444a6abb50a991981bd4db479c670b6b7e19159ca281a7d1d60e93dcde51f36fae3df83548379d0785cfe57c939a295fe9fbaea54638bb19c3b89836343522ed32adc0791c28e51236965098d6aba848ed5b0109113bc869dd5978be6480f91271d28582d47caab6f414e92da1ada71c711a38331a6d7341884fd0b4f92506e09f3f4b9b14ebc60bc253f46accfca1c60cd006594ee46ba28bbf53a8ebd450948799933732d31b"}, @generic="d345f8089dad93ecea785c562a4b06e088821989310676db791e11ebcef9254a5f4e1de8d4e11c97b8910271dff759282e3524f793f783f23f491f48925ad5e603d2e531ad15c8ccfbed80b0a0ec39e81f271ab6532566cfe27716a0d5d7cc1122dba3688ab1ffd918ee1b987f4b6b3b6d", @nested={0x1cd, 0xde, 0x0, 0x1, [@typed={0x8, 0xa4, 0x0, 0x0, @pid=r8}, @typed={0x14, 0x129, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}, @nested={0x4, 0x140}, @generic="5b04155f4f39c937b65d0a24705f04fff3c64b17a32f45293bb9bf78e881e0aa06199842196e23c8266aa12411b3b613457e81e72ed52fa4e7eb3d4ae70498fabaa72184847eacee2c36f10a1a0b52b1c4c9b1564abacea5ddb0b57a20ed1a8a947354a7eb75df257d5b245d72b22e865171ccbc5e6129edcc86088325fec0a2", @typed={0x8, 0x21, 0x0, 0x0, @pid=r9}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @typed={0x8, 0x145, 0x0, 0x0, @u32}, @typed={0x8, 0xed, 0x0, 0x0, @u32}, @nested={0x4, 0x64}, @generic="491311744016f3d0b6ea92bd526bd11bb7a7f61657891b7e9343efcfaa8593ec6eb6061e708a0132140fd6c988f1581771c64cceec1fd9fb1e4fa3ed199628fd1b2152cc5d87e16550753a561e36ba96b385ca1dfc199c3a673bdfa717e3a55e068aae7ad368ea4f79ec8a99f6ef5ce7395d5ce8891ed650902656fbecf33312933120e894d5ed3b7ba7a72b3dfb35481083784398d77f3bd89b7f2dcd854dde8b50639a20768ea1f6fe44cd9ceab7c6f1ae889969bb4ef44256a75547f66a4ea17b674db3c2d4b655ffd9406f42d10d18565834a914801df83400fcf9a0ab95b375a3a402e162c7ef92ea14dbce774691d77b9fd22581ca6a"]}, @generic="3dac1d5506d3d062d91c527e239a858289a76d15c21be3e112469ac3dfc7f01379552420c1301580e54cec07bb517cff0aa8a3aa937d3f57d3c59c493352d96a73ef2faae1772a6b575a385f1d7fb4f64060ea1b3004147b145ed79370054cbab5cd50c02a53697749d99f0fba"]}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x447bc617}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xe3}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'ovs_meter\x00'}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xfffff5c3}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x58}, @NFC_ATTR_LLC_PARAM_LTO={0x5}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)
executing program 7:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mprotect$auto(0x1ffff000, 0x8020, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x800000000007)
lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1ff, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r2, 0x4010744d, &(0x7f00000001c0)={0x0, 0x2, 0x80})
timerfd_settime$auto(r0, 0x8001, &(0x7f0000000040)={{0x31, 0x43dde85e}, {0xca7, 0x4}}, &(0x7f0000000080)={{0x10001}, {0x100000000, 0xfffffffffffffff9}})
sysfs$auto(0x2, 0x100000000000031, 0x0)
fsopen$auto(0x0, 0x1)
ioctl$auto(0x3, 0x5403, 0x38)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x3, 0x3a)
sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100), 0x19)
ioctl$auto(0x3, 0x80000541b, 0x38)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x0, 0x0)
ioctl$auto(r3, 0x540a, r1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
fdatasync$auto(r4)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x4004510f, 0xffffffffffffffff)
socket(0x2, 0x6, 0x0)
io_uring_setup$auto(0x3, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x40005, 0x10004)
r1 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(r0, r1, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
io_uring_setup$auto(0xcb2, 0x0)
r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
read$auto(r2, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x200, 0x0)
madvise$auto_MADV_GUARD_REMOVE(0x104, 0xffffffffffffd31a, 0x67)
executing program 7:
ioctl$auto_XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f00000000c0)={0x9, 0x7}) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) (async, rerun: 64)
r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4a140, 0x0) (async)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x11, 0x7f, 0x8000)
writev$auto(0xca, 0x0, 0x7e) (async)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
madvise$auto(0x0, 0x2000040080000005, 0xe) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0)
socket(0x28, 0x0, 0x1) (async)
mmap$auto(0x0, 0x4400006, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x6e)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000435326fcdbdf2501000000040027000074683c5f746f5f0000616d00000008000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000800040004000000140002007465616d5f736c6176655f3000000000080004001e580000"], 0x6c}, 0x1, 0x0, 0x0, 0x4004891}, 0x0) (async)
madvise$auto(0x6, 0xa627, 0x15)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
brk$auto(0xf065)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) (rerun: 64)
ioctl$auto(r2, 0xc004510f, 0x3) (async, rerun: 64)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64)
move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2) (async)
write$auto(r0, &(0x7f0000000040)='/sys/kernel/security/integrity/ima/policy\x00', 0xc6) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 3:
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0)
ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)="9b58b4fccb6c3b383dfc9362cd7b115312eddbc6e2")
read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f0000000980)=""/4098, 0x1002)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x6804c1, 0x0)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0)
ioctl$auto(r1, 0x800064bd, r1)
r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x81}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xe}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @HSR_A_IF1_AGE={0x8, 0x3, 0x2e}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
io_uring_setup$auto(0x6, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
ioctl$auto_PPPIOCSCOMPRESS(r3, 0x4010744d, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/hsr_slave_0\x00', 0x40, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
bind$auto(0x3, 0x0, 0x68)
lseek$auto(r2, 0x6, 0x1)
executing program 6:
r0 = openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x841, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x9, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x40, 0x8, 0x100000000}})
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) (async)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c0a, 0x0)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, 0x0, 0x800)
open(0x0, 0x4040, 0x75)
socket(0xa, 0x800, 0x8000003a) (async)
socket(0xa, 0x800, 0x8000003a)
connect$auto(0x3, 0x0, 0x55) (async)
connect$auto(0x3, 0x0, 0x55)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) (async)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(0x0, 0x0, 0x0, 0x10dfd057, 0x0)
mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, 0x0)
write$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(r0, 0x0, 0x2b)
poll$auto(&(0x7f00000010c0)={0xc8, 0x20, 0x7}, 0xc, 0x4) (async)
poll$auto(&(0x7f00000010c0)={0xc8, 0x20, 0x7}, 0xc, 0x4)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip6_tables_matches\x00', 0x783b43, 0x0) (async)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip6_tables_matches\x00', 0x783b43, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/44, 0x2c)
r3 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000000c0)=0x6)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async)
r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000007c0))
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) (async)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0)
mmap$auto(0x8, 0xc, 0x1fee, 0x1d, r3, 0x7)
io_uring_register$auto(r3, 0x1, &(0x7f0000000280)="17fc46c3a3d8b13500cef1d51102982e591e7c92b61e7d817e78a24986edd6e80c012647bab3e2fdcf1b00861f1fb2f1925c1dd7db4abe1d87c0ab8222400f58bae42f7ca672461c438387f4bda59cb37ce530e823507c74f663f9597352b829762bc6c349f5c183435d5fd12f71b3e2b9cf92d951a99d9bdedc45a1322979951b51933345af6b567b7edfa35efda49770210313bfe94edf2fdb28e9f84e53b4860329f87fd7071723dd64a3f7f5ab5be729d7395dba99fc6713e09a3c5a85", 0x7)
read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/249, 0xf9)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2440, 0x0)
read$auto(r0, 0x0, 0x400000)
executing program 1:
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
r0 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6erspan0\x00', <r2=>0x0})
r3 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000200)={@siginfo_0_0={0x5, 0x6, 0x7d, @_rt={0xffffffffffffffff, 0xee00, @sival_int=0xfffff84b}}}, 0x1, &(0x7f0000000280)={{0x9, 0x4813}, {0x7997, 0x4}, 0x9, 0x8, 0x1, 0x437a, 0x1, 0xff, 0x6f, 0x3, 0x1f, 0xbe50, 0x3, 0x6, 0x1, 0xfffffffffffff9c9})
msgctl$auto_IPC_RMID(0x8, 0x0, &(0x7f00000003c0)={{0x3, <r4=>0xffffffffffffffff, 0x0, 0xa, 0x7, 0x4}, &(0x7f0000000340)=0x2, &(0x7f0000000380)=0x1, 0xb06d, 0x7, 0x0, 0x0, 0x4, 0xcb, 0xe5b, 0x6000, @inferred=0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'veth1_to_bridge\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'dvmrp1\x00', <r6=>0x0})
sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f00000004c0)={0x740, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r1}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r2}, @MACSEC_ATTR_SA_CONFIG={0x10e, 0x3, 0x0, 0x1, [@typed={0xe1, 0xb9, 0x0, 0x0, @binary="615e9bbf250553600dd6701b70580f756edce430fb79accb1dbee5d056e800deef078870409573360f7713f30debfe3f3edab2ca06a14384a6609fc9add8af6cb511ac8e00a6a04fa418c38d2263552f373426ee7b8d2e1ba92b71870d06d6ffe9da6bc052b2e9b5c2ce4c4d64848741bbc6a893abd55a2d46a667d945d73dc26c949175ef657d39a0d8165dc162ea4ba9d6ed0950fbebe1c8644bb650ceb3c8f8bc4b5606074d3f502dcab869ae5f69d8f957d2394ceafe1bde60ea99601757c821e1d14e512f77de89a2d871b0c8bf9c6b51096eb5cc876f8bd8e478"}, @generic="1b20b324b2f41f9acb988b2a6a5ddd6fe907be5ce7f5469d586a84da5075caae5df35be9f7c0"]}, @MACSEC_ATTR_SA_CONFIG={0x9c, 0x3, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @pid=r3}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x79, 0x7e, 0x0, 0x1, [@typed={0x8, 0xfe, 0x0, 0x0, @uid=r4}, @generic="cc5349fa409d8be3340ecb6b1b18a660d686ef5ea7d5a0e0f5067e5f754e53c2e80a12b37c9d44fdfcfdc98fcd3b8ebc322274a14f9abdc67a698d9ad0aadca6f195fec3c542f4b61d71bd2c20942aefceb9e57a2e1bc9e73cc0fdb3fcd37b06f6f5fb664d2ac9c8f168660469"]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}, @MACSEC_ATTR_OFFLOAD={0x560, 0x9, 0x0, 0x1, [@generic="de6fff53a57eaed6fce38a64dc0db7052affad5b8c701709a3d7ccafa6e93890c5037cecc83bdf42fcb42a9b3b0c09c45b028c8be81531c2da9d3757ad056f02fa0c70e6f68a31543bf509ff80ec7b873687bee94b71cfe472e265af182eeb3ef24f5a3cc25ee783ebaed25b2f6a9baee1b6469466504f1fc073e4c6d829b64e92ec3b5523d60347cbcd8cb6125a7b316bd12dbc69a93cbaa9e0d94e5a5d2404b735ce81074dea0e5f03608a9c142c6b2bff7007", @generic="5916e63351da0964d7d5c574b77f1c65d2e3e827279353088a0d5e64e81ebc2f9283891e8bd3496633e5767c8dd2bf07d1db58026157a39d01897ad3449ee2d85b2504c14b32b79700feed0457b4ffe9298644f5b48c7baf55b5113cd91618cd499d815f7c7c62bf0c5d05ebf9efe7f1d641b6530baa4a8d284b7b444ed9f4a18710f11e3a109660df1bd315195d515c494c30b6e00220291959ba06193b9f406e77c68c3f79c3aae5a41c24c9831a74ce9bc4c6ecfd5d4a17cdd5c89a2f23923662d09910b12ccde1ee16975478e8d9be8d5fb73bd6724bc867a6a8799c78f619f0e0b3181943", @nested={0x220, 0x40, 0x0, 0x1, [@generic="70d9b4080ee989779c03ca0d08d6ba3b1fc7b9178aa4440d31c3da3aa31127d1dcbe3e73a240e08c5edff3ecc14190fdc874490e096cd3b23be1a539a53605bbcfd14564fc7443b81b8ef12a467da79c1f1e1e078f234a", @nested={0x4, 0x123}, @nested={0x4, 0x9e}, @generic="6f53690d0f541d0fc24503cf8a4645542773626fd9ec229116af3e56f3adfa1d684c2d1f00aef53cb15c516d964f5cf09e8fdd0c7c581870662f23d4350e35d40888590eac97e9753d52022a694d31c9d5e45178b03a9a2317a567746dd635ed0f1a49c190d60f668fea8d6bd41cbaf028e37ba27f69a9abb35cc4b66441467546d5d78d9f04cecd320ffadf340595caff67cc6d19bf2bbaaf77e22f9e855c17a75868254bd68387b6bbda31eaa6bb759acdd138aa5d80", @typed={0x4, 0xe7}, @typed={0xc, 0xf9, 0x0, 0x0, @u64=0xfe70}, @nested={0x4, 0x124}, @typed={0x8, 0x118, 0x0, 0x0, @uid}, @generic="548d39a30da4c0a9cd32e28db5e777b18b3628076485fec4cdb7512ccb83af924b638ea2d3ad78399df0ef4198f4f46d6eb19fad974bfba6e22071bde2875061b61d9c9f4de65cef8c9334c17b4241f6ab24d760b0bd8a8a19c43225c4643313bfb27fa6cb0d3e26dbd04b67982c7165cdf9731eb7645d398b5e979a857797778008c77c6b7d990bfcf994ffd1c6f2f8e413a5b9846b5fcf00dcf0c83e453d44f89b3959f8b07a6f1b8c96f03334f955733dcf2cfbcf74e47c2003556f68b9e98654eae216739d64b16525b193373f70fb65c3ae72475b73770957327c597b179f6d6711e62024b338ae"]}, @generic="cea0d6f538ccfce3e62242924ed013a627e8e2270b6a6314ed", @nested={0xc, 0x60, 0x0, 0x1, [@nested={0x4, 0xc3}, @nested={0x4, 0x3a}]}, @nested={0x17c, 0x49, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@empty}, @generic, @nested={0x4, 0x125}, @generic="6649e551f71e3555d4672dddf326d38742d32678168e3cc6eb1f35b1884aa9388a2a4220a323ec2118d4ccaa67aa5f468fc129f3c8ed9f16d85b1b28e90976ec18412c221cb848b4ee5973e7280e8887b2b48390472205878ac1855fc1933dd18a574c9fbde7aba662e9df8f2e3eb1d965d5f7a376f229079c079c80df53e58f5a3eeb9b35b1ca04f4e78d304b04a85c01498b8a117ea16ca6b11f8c7fa5c744b0cc4884fcfd3e5b524f74554c0c6e1815d586cf8159", @nested={0x4, 0x6b}, @nested={0x4, 0x21}, @generic="95688c87eabf8b332162743f59ddc605aabfd7d34db037524916aa3fa52caf116ddb4ce3f359ff0b55fe5a8cf5ce2c9aa2a04a3884232e8149cbbc4dfc28e29dddfa71871f2599dad32cfb9544539f0bf26572dca53010736459d2a2788c422d7e97b0d143d1846c147bafcbd86841cde022df11658dedfd354aa7bc1dcbf12f5a38d746f319f87179e38cac5b344cece6c74242c7c9d094c9e761300dfad5fdfcbc", @typed={0xc, 0x2b, 0x0, 0x0, @u64=0x8}]}]}]}, 0x740}, 0x1, 0x0, 0x0, 0x4}, 0x10)
capget$auto(&(0x7f0000000000)={0x4, r3}, &(0x7f0000000080)={0x8, 0x6, 0x3})
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r7 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r7, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x3)
executing program 1:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a082, 0x0)
write$auto(r0, &(0x7f0000000100)='/dev/cec31\x00', 0x200)
openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim3/fail_reload\x00', 0x100, 0x0)
r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x1, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x101, 0x0, 0x5, 0x9ad}, 0x5}, 0x5, 0x20000000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
semctl$auto(0x9, 0xc1b8, 0x4, 0x1)
mmap$auto(0x2, 0x400008, 0xdf, 0x110, r1, 0x800008000)
r3 = socket(0x29, 0x5, 0x0)
syz_clone(0x40100100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
dup2$auto(r3, r3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_STATION(r3, 0x0, 0x40)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0)
pwrite64$auto(r4, 0x0, 0x1, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff)
fcntl$auto(0x3, 0x4, 0xa553)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xc2a2)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000080)=""/27, 0x1b)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0)
ioctl$auto(r4, 0x560a, 0x7)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-ioctl$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000080)=""/27, 0x1b)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0)
ioctl$auto(r4, 0x560a, 0x7)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
single: successfully extracted reproducer
found reproducer with 14 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-ioctl$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000080)=""/27, 0x1b)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-ioctl$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-close_range$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000080)=""/27, 0x1b)
close_range$auto(0x2, 0x8, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-ioctl$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000080)=""/27, 0x1b)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-ioctl$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-ioctl$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-ioctl$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
socket(0xa, 0x1, 0x84)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-ioctl$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-getsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = socket(0xa, 0x1, 0x84)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-ioctl$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-getsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-ioctl$auto-socket-write$auto-getsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = socket(0xa, 0x1, 0x84)
write$auto(0xffffffffffffffff, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-ioctl$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-getsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5600, r0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-getsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-getsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-getsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_force_devcoredump_fops_hci_vhci-write$auto-getsockopt$auto
detailed listing:
executing program 0:
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-getsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-getsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-getsockopt$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-getsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-getsockopt$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-getsockopt$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-getsockopt$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
reproducing took 1h48m33.176237341s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff888028d7d000 by task syz.0.616/6694

CPU: 0 UID: 0 PID: 6694 Comm: syz.0.616 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:394
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f377c18cda9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdcb83a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f377c3a5fa0 RCX: 00007f377c18cda9
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f377c20e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f377c3a5fa0 R14: 00007f377c3a5fa0 R15: 0000000000001d62
 </TASK>

Allocated by task 5949:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:179
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x735/0x1c40 fs/open.c:955
 vfs_open+0x82/0x3f0 fs/open.c:1085
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1427
 do_sys_open fs/open.c:1442 [inline]
 __do_sys_openat fs/open.c:1458 [inline]
 __se_sys_openat fs/open.c:1453 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1453
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5949:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x2c4/0x4d0 mm/slub.c:4757
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3ff/0xb70 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x2576/0x2610 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff888028d7d000
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff888028d7d000, ffff888028d7d400)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28d78
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000003 ffffea0000a35e01 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5636, tgid 5636 (dhcpcd-run-hook), ts 59567703659, free_ts 59553210844
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4739
 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xbfa/0x1600 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_noprof+0x2de/0x4f0 mm/slub.c:4306
 kmalloc_noprof include/linux/slab.h:905 [inline]
 load_elf_phdrs+0x103/0x210 fs/binfmt_elf.c:532
 load_elf_binary+0x1f8/0x4ff0 fs/binfmt_elf.c:861
 search_binary_handler fs/exec.c:1775 [inline]
 exec_binprm fs/exec.c:1807 [inline]
 bprm_execve fs/exec.c:1859 [inline]
 bprm_execve+0x8dd/0x16d0 fs/exec.c:1835
 do_execveat_common.isra.0+0x4a2/0x610 fs/exec.c:1966
 do_execve fs/exec.c:2040 [inline]
 __do_sys_execve fs/exec.c:2116 [inline]
 __se_sys_execve fs/exec.c:2111 [inline]
 __x64_sys_execve+0x8c/0xb0 fs/exec.c:2111
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
page last free pid 5635 tgid 5635 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_noprof+0x1d1/0x4f0 mm/slub.c:4306
 kmalloc_noprof include/linux/slab.h:905 [inline]
 tomoyo_realpath_from_path+0xbf/0x710 security/tomoyo/realpath.c:251
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_perm+0x276/0x480 security/tomoyo/file.c:822
 security_inode_getattr+0x116/0x290 security/security.c:2377
 vfs_getattr fs/stat.c:243 [inline]
 vfs_fstat+0x4b/0xd0 fs/stat.c:265
 vfs_fstatat+0xbc/0xf0 fs/stat.c:364
 __do_sys_newfstatat+0xa2/0x130 fs/stat.c:530
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff888028d7cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888028d7cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888028d7d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff888028d7d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888028d7d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff888028d7d000 by task syz.0.616/6694

CPU: 0 UID: 0 PID: 6694 Comm: syz.0.616 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:394
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f377c18cda9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdcb83a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f377c3a5fa0 RCX: 00007f377c18cda9
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f377c20e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f377c3a5fa0 R14: 00007f377c3a5fa0 R15: 0000000000001d62
 </TASK>

Allocated by task 5949:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:179
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x735/0x1c40 fs/open.c:955
 vfs_open+0x82/0x3f0 fs/open.c:1085
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1427
 do_sys_open fs/open.c:1442 [inline]
 __do_sys_openat fs/open.c:1458 [inline]
 __se_sys_openat fs/open.c:1453 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1453
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5949:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x2c4/0x4d0 mm/slub.c:4757
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3ff/0xb70 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x2576/0x2610 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff888028d7d000
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff888028d7d000, ffff888028d7d400)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28d78
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000003 ffffea0000a35e01 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5636, tgid 5636 (dhcpcd-run-hook), ts 59567703659, free_ts 59553210844
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4739
 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xbfa/0x1600 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_noprof+0x2de/0x4f0 mm/slub.c:4306
 kmalloc_noprof include/linux/slab.h:905 [inline]
 load_elf_phdrs+0x103/0x210 fs/binfmt_elf.c:532
 load_elf_binary+0x1f8/0x4ff0 fs/binfmt_elf.c:861
 search_binary_handler fs/exec.c:1775 [inline]
 exec_binprm fs/exec.c:1807 [inline]
 bprm_execve fs/exec.c:1859 [inline]
 bprm_execve+0x8dd/0x16d0 fs/exec.c:1835
 do_execveat_common.isra.0+0x4a2/0x610 fs/exec.c:1966
 do_execve fs/exec.c:2040 [inline]
 __do_sys_execve fs/exec.c:2116 [inline]
 __se_sys_execve fs/exec.c:2111 [inline]
 __x64_sys_execve+0x8c/0xb0 fs/exec.c:2111
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
page last free pid 5635 tgid 5635 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_noprof+0x1d1/0x4f0 mm/slub.c:4306
 kmalloc_noprof include/linux/slab.h:905 [inline]
 tomoyo_realpath_from_path+0xbf/0x710 security/tomoyo/realpath.c:251
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_perm+0x276/0x480 security/tomoyo/file.c:822
 security_inode_getattr+0x116/0x290 security/security.c:2377
 vfs_getattr fs/stat.c:243 [inline]
 vfs_fstat+0x4b/0xd0 fs/stat.c:265
 vfs_fstatat+0xbc/0xf0 fs/stat.c:364
 __do_sys_newfstatat+0xa2/0x130 fs/stat.c:530
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff888028d7cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888028d7cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888028d7d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff888028d7d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888028d7d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================