Extracting prog: 13m7.291835886s
Minimizing prog: 1h44m48.439639902s
Simplifying prog options: 14m27.289050087s
Extracting C: 5m19.996881546s
Simplifying C: 0s


extracting reproducer from 38 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto-mmap$auto-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mousedev_fops_mousedev-sendmmsg$auto-socket$nl_generic-sendmsg$auto_HWSIM_CMD_NEW_RADIO-sendmsg$auto_NL80211_CMD_GET_REG-socket
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
r1 = socket(0xa, 0x801, 0x84)
r2 = socket(0xa, 0x1, 0x84)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r3, 0x0, 0xe)
getsockopt$auto(r2, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r4 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r5=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r4, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000000c0)=""/33, 0x18)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy6\x00', 0x2, 0x0)
ioctl$auto(r1, 0x5602, 0xffffffffffffffff)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20a675f3", @ANYRESOCT=r3, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000c0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4001)
socket(0x10, 0x2, 0xc)

program did not crash
single: failed to extract reproducer
bisect: bisecting 38 programs with base timeout 30s
testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 7, 3, 30, 18, 29, 29, 3, 12, 6, 28, 30, 14, 14, 30, 17, 30, 20, 15, 30, 30, 16, 10, 30, 3, 13, 28, 30, 9, 23, 7, 15, 30, 30, 23, 20, 29, 10]
detailed listing:
executing program 2:
mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000)
openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x40800, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendto$auto(0x3, 0x0, 0xfef0, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c)
executing program 2:
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c05, 0x0)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/mem\x00', 0x2001, 0x0)
truncate$auto(&(0x7f00000000c0)='./cgroup\x00', 0x100000000000001)
lseek$auto(r1, 0x8001, 0x4)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
lremovexattr$auto(0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = mq_open$auto(&(0x7f0000000000)='\xbe\xf2\x82\xe7\x14g\xb5\xeeMQ\x13\xa2_g\xbf\t\xfa\xf2_N\xb0{\xf9\xb57v\xeeG\xd9l\xbf\x86q w\x96\xd9\xe9\xa8\xe1\xf0\xc7\x1f\x1e\xc4\xc4\x89u\x83\xe8}\xbd\x7fO\x91\xc1UVW.\xb6\xad\x04u\x02w.\xec`O\xc1\x0e\x15\xe7:\xc9\x1bK\xcddY\x03\x95\xd1\xae\xc1\x9b\x96\x9faj\xd2\xfc\xfc\x1f7\xaf\xcan\xf6\xc0wK\xce\xe7Q\xae\xc9Hg\x01\xef\xda[\xe5\xa3\xa3%\'\x8f\xcf\x96X:\x04Dkt\x7f\xde\x80\x01\xddX\x91\x88\xa1\t\xc3\xf1\xfe[\x93$O8 b\xb4\x92\xf4\xbc\xc5\xb9\x989\xfcF\xec\xdc@\xdd\xdaeM\xe0U\xc8;\xf5\xe7$Q8\xd2\x87\xdd\xc5\x9d\xc5\xe8\xb5\xb5\xb8\xdfD\xd0\xe8t\x8aS\xaa\xbe\xaa\xba\x9e^0\x1a\xf8Y\xf5Jp\bu\xba\x98\x00\xf0H5\xa9u\x0e\xc4\x04\x13\xf58p\x9f\x11\xc07\xefS*|\xd87\x12\xd8\xce\xde0\xd82;\xcd\x18\r\xccI\x99\n\xd2\x86', 0xdd1, 0x8, 0x0)
mq_notify$auto(r2, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram5/trace/pid\x00', 0xa001, 0x0)
write$auto(r3, &(0x7f0000000540)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0\xb4\xd9\x82=\xe1P~\x17\xfb&L\xeb=j\a\xf1y\xb3\"', 0x81)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x0, 0x0)
epoll_create$auto(0x4)
epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x0, 0x407, 0x100000)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
mlock$auto(0x7c89, 0x47fff)
eventfd$auto(0x5)
clone$auto(0x6, 0x3, 0x0, 0x0, 0xdd6)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
socket(0xa, 0x5, 0x0)
r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40044)
executing program 2:
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
acct$auto(0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
r0 = socket(0xa, 0x3, 0x3a)
splice$auto(r0, &(0x7f00000001c0)=0x8000000000000001, r0, &(0x7f0000000200)=0x4, 0x3, 0xd2)
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4)
kill$auto(0x0, 0x11)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
socket(0x2, 0x801, 0x100)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1\x00'})
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
io_uring_setup$auto(0x3ff, 0x0)
executing program 2:
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000e40), 0x80d02, 0x0)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x20000000000eb1, 0x401, 0x8000)
move_pages$auto(0x0, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0xc1f, 0x9, 0x0)
mmap$auto(0x0, 0x4000000000020009, 0x4000000000e1, 0x400ebf, r0, 0x7)
unshare$auto(0x40800080)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0xd0800, 0x0)
write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000440)="19000003d30000", 0x7)
socket(0x2, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x1700000000000000, 0x53, 0x9)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r3, 0x5393, r2)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='\x00'/12, 0xa3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x80000000000000d, 0x1, 0x948d, 0x6, 0x15f4da0a, 0x1, 0x8, 0x1000000, 0xfffffffffffffffd, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7a100ac}, 0x6)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
executing program 32:
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000e40), 0x80d02, 0x0)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x20000000000eb1, 0x401, 0x8000)
move_pages$auto(0x0, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0xc1f, 0x9, 0x0)
mmap$auto(0x0, 0x4000000000020009, 0x4000000000e1, 0x400ebf, r0, 0x7)
unshare$auto(0x40800080)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0xd0800, 0x0)
write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000440)="19000003d30000", 0x7)
socket(0x2, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x1700000000000000, 0x53, 0x9)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r3, 0x5393, r2)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='\x00'/12, 0xa3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x80000000000000d, 0x1, 0x948d, 0x6, 0x15f4da0a, 0x1, 0x8, 0x1000000, 0xfffffffffffffffd, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7a100ac}, 0x6)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
executing program 4:
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0)
write$auto_sg_fops_sg(r0, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff657", 0x19)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
executing program 4:
r0 = socket(0x2, 0x2, 0x88)
r1 = socket(0x2, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r1, 0x0, 0xd0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
setsockopt$auto(r0, 0x1, 0x3e, 0x0, 0x6)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1c)
executing program 4:
r0 = socket(0x2, 0x1, 0x0)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
mmap$auto(0x1, 0x8000000000000001, 0xdf, 0x9b72, r0, 0x8000)
r1 = socket(0xa, 0x5, 0x0)
statmount$auto(&(0x7f00000000c0)={0x7e, @raw, 0x80000027, 0x8, 0x2}, 0x0, 0x223, 0x0)
getsockopt$auto(r1, 0x84, 0x8, 0x0, 0x0)
executing program 4:
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x8083, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))
ppoll$auto(&(0x7f0000000000)={<r1=>r0, 0x40}, 0x2, 0x0, 0x0, 0x8)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/queues/tx-0/tx_maxrate\x00', 0x8402, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)='8', 0x1)
read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000200)=""/238, 0xee)
ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
socket(0x1d, 0x2, 0x6)
openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x3, 0x6)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028"], 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x0)
mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40d40, 0x1a0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101680, 0x0)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
write$auto(0x3, 0x0, 0xffd8)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
semtimedop$auto(0x3, 0x0, 0x8, &(0x7f00000000c0)={0xf3c7, 0x5})
executing program 4:
mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000)
mlockall$auto(0x8000000000000001)
ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f00000005c0)=<r0=>0xffffffffffffffff)
madvise$auto(0x1000000000005, 0x8000000000000000, 0xfffffffd)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mbind$auto(0x20000000000005, 0x2, 0x3, 0x0, 0x80000000, 0x7f)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
writev$auto(0x1, 0x0, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
readahead$auto(r2, 0x6, 0x2)
r3 = socket(0x23, 0x5, 0x0)
listen$auto(r3, 0x5ed)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x80)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub1/xrun_injection\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000001c0)=""/65, 0x41)
socket(0xa, 0x2, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
shutdown$auto(0x200000003, 0x2)
openat$dir(0xffffffffffffff9c, 0x0, 0x280000, 0x100)
ioprio_set$auto(0xffffff81, 0x0, 0x5)
r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_FLUSH(r0, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x178, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x5e, 0x3, 0x0, 0x1, [@generic="73ee782565d7c13b14cb77887dc8998484935c0ba9daaaf98047a937267a81787b", @generic="a6763149a10118db16116b27a692c557211e137c48e2fcc3971f57e7b2d25cf9db58f597693aa11cd6a0fd41f6df2e719729fa8ff40643cf4a"]}, @IPVS_CMD_ATTR_DEST={0xea, 0x2, 0x0, 0x1, [@generic="276c81da47d9d9ea93bac9d4965f031f896afd9708fa4595bafed6263258562761cd76788193ae9ebced25036afaf3822c7ec15f32846080efa5a308abbd058bd7f10e39fc072eb7d8a587872a94b8f5109b467242293db6e36b77ff2b621281cf5571e8a019eb78896880ba4af509f61d43ff0e6d56ca3dd0e3289dd8301691d75b83bc4c0828ce30110c62540c1665a39c751ef60b4289169fd155997c124aa7cbc901db4552597428457ce9317a8f8c04e9881eea7f43efde107ee820c7539fe2bec7d979615a7ae5b926aeedaa86b4d2ef6d2b76c3441ef4a0757c2c6acb459fe029bde4"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x178}, 0x1, 0x0, 0x0, 0x8080}, 0x4800)
mprotect$auto(0x0, 0x4, 0x4)
executing program 4:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/max_ratio\x00', 0xa001, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x1, 0x0)
io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86)
io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x86)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x200201, 0x0)
msgrcv$auto(0x2, &(0x7f0000000080)={0x5, 0x6}, 0xffff, 0x26da, 0x5)
executing program 33:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/max_ratio\x00', 0xa001, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x1, 0x0)
io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86)
io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x86)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x200201, 0x0)
msgrcv$auto(0x2, &(0x7f0000000080)={0x5, 0x6}, 0xffff, 0x26da, 0x5)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/slab/kmalloc-64/total_objects\x00', 0x2400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/250, 0xfa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xf, 0x2, 0x1)
r1 = socket(0x2, 0x2, 0x88)
setsockopt$auto(r1, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x80000e)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3ff, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc4)
r2 = bpf$auto(0x0, 0x0, 0x10)
io_uring_setup$auto(0x1, 0x0)
eventfd$auto(0xb)
socket(0x2, 0x2, 0x88)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
connect$auto(0x3, 0x0, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
mmap$auto(0x18e2, 0x6, 0x3a55, 0x16, 0xffffffffffffffff, 0x200)
ioctl$auto_RTC_IRQP_SET(r2, 0x4008700c, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0)
poll$auto(0x0, 0x5, 0x49)
write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-wq/nice\x00', 0x103080, 0x0)
read$auto(r3, 0x0, 0x1)
socket(0x10, 0x2, 0xc)
executing program 1:
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x2aa82, 0x0)
r1 = getpid()
r2 = gettid()
rt_tgsigqueueinfo$auto(r1, r2, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_sigsys={0x0, 0x2, 0xffffffff}}})
prctl$auto(0xd61, 0x3, r1, 0xc, 0x6)
ioctl$auto_KVM_CREATE_VM(r0, 0x4018aee2, 0x88)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
write$auto_uhid_fops_uhid(0xffffffffffffffff, &(0x7f0000000040)="cb9f1c4173d0", 0x6)
shmget$auto(0x8, 0x10565, 0x7ff)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC2\x00', 0x890000, 0x0)
shmat$auto(0x0, &(0x7f0000000080)='\xf0\xa3\x10v\xae(\fr\xc9\x8f*\x1b\x00\x00\xfe(}\xeal\xd6\xcf\xcf\xaaB\xd0\xfe\x16\n\r\xb9\x9d\xb0\x1f\xee\xe7n\xb0\x0fo\xe2\xafH\xfa*\x1ac7\xc2b\xc3\x9b\x05!>\xc5\xb9\x05\xd2\x00\x997\x8c\x1a3qj|\x18\xe8\x03\b\xce\x91\x03\xec\xa3\x16;\x04\xa9\x80L\xf8r\vot\x04\xda\xf3\xc8\x90F\t\x00\x00\x00\xb8\xe8\x1cZ\xe2\x87\x87\xed\xdfl\xdd\x9d\xcc\xaf\xc8O\x99\xb3i\xe8\x05K\xfa\xa9\x05\xa6\xbej\xe4\xf5+\xf2\xc8rg\n>.\x00\xe9b~\x83\a^\x14\t\x00>n\xd7\xe9\x00\x9b\x90\xaa\xba\xe5.\xf6ek\xb2\x80\xb2o\xfb\xd1\x92\x91\x1f,6\xc6\xe8\"\xb4X\x04b\x80\xc3V \xf8l\xff+\r=*`h#\xeeu\t\x8aXh\x0f\x1b\xcf\xd6w|\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\xce\x99\x85\a\t\xcb\xca\x8c\x15\xd9w\xd7\xc4\xf7\x8e\xd7\xd6;\x13\x1c\xbc\xa6n\xa91\xf4\x04\v\xf1s\x90\xfb\x87j\x1c\xc5\xf9 _\x8e\xec\x9c~\b\xbe\xde:\x98\xf6\x03\xe0-w\xcf\xef_\xb1\xfal\x193\xf79\xc6\xc9\xc6\xc6-\xa9\xb7i<\xb0ZB\x9f\xb2&\x1b\xe9\x93\xad\x910\xde\x1c=I\x03U\x1c\xddU~\xff\xe3&\xad\xe4\x90\xcf|>\x1cJLIe\xcf\xa6#\x98\xcfT\v6\x16\x9d\xac\n\x86\x04\xe6\xa6\xc8\xdf\xb6W\xf3=s\xdeWTQ\xddf$\x95\x81\xc6', 0xfffffffa)
kcmp$auto(0x1, 0x100000001, 0x1, 0x4, 0x24000)
shmctl$auto(0x13000000, 0x0, 0xfffffffffffffffd)
shmdt$auto(&(0x7f0000000000)='(\x00')
prctl$auto_PR_GET_FPEMU(0x9, 0x8000000000000001, r2, 0x5, 0x2)
executing program 5:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7)
write$auto(r0, &(0x7f0000000000)='\'\x00', 0x4)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x10000000000e2, 0xeb1, 0x405, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
getrandom$auto(0x0, 0x6000000, 0x3)
r2 = semctl$auto_SEM_INFO(0x3, 0xfffffff9, 0x13, 0x8)
r3 = prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, r2, 0xcd8, 0x100)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
madvise$auto(0x0, 0x20499d, 0x9)
ioctl$auto(0xffffffffffffffff, 0x40046205, 0x9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
settimeofday$auto(&(0x7f0000000140)={0x4000000000000000, 0xa6}, &(0x7f00000001c0)={0xffffb776, 0x8})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000003fb33a0275ab7dacc9c57f343fd91e6a500966cab4a9a53cc812f15e264175412483d2461404190ca5f452fa2418a95072c1aa9448609585d8aa2c56cf79c3b5ce5d51475af54337f2db965510fb9b4828b8283eaf9160b80558c2f002b32b770926ce39ba3dc6e1ee159ef4269bec889c0945cfb1e5cde0b786b7260c12c738eaf629ff41f065", @ANYRES16, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_UPD_RXSA(r6, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d00)=ANY=[@ANYBLOB='X$\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3701728004002d80f159787d2df35906dfd05b75b7b3bf2292e15ee653fb43337237dc5e192d4c29d930e614181a0631993db6171e63a24b924660031f6f27ccde96f60014ca9ef75f4035a769dc7a53ae3237ce88d29152f9188753e9b6ee67ce3592e0f390326b128438fd0f4ca29be4fa29e56eb308001400", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0400a28004003580040036808b0013802cc2b178744899995d88eb742eb47049064b44b1bbf7e2ade9f7748f9c30c61bf3c1d63c60be89d4c3d27bf22827cdbf89c50ae21f329b0d1236f4e586d2f1df0ec25041de9748851400a82196ed6bf3a7800b91121ba3280d718c52fc6b0c5065d653f74f37d60971b0e2d367a019d159390afc4379e657e99bab8107ad5c07a80ef67362aeab008ebe9759059e27be454ce9aada981ef99dfff4522255a7d9babd5059b2b2c9be4017610000002c00bb8008003a00", @ANYRES32, @ANYBLOB="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"/4428, @ANYRES32=0x0, @ANYBLOB], 0x2458}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r8 = getsockopt$auto_SO_DOMAIN(r3, 0x0, 0x27, &(0x7f0000000240)='/dev/ram7\x00', &(0x7f0000000300)=0x21)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1\x00', <r9=>0x0})
sendmsg$auto_MACSEC_CMD_DEL_RXSA(r5, &(0x7f0000000cc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1a0222}, 0xc, &(0x7f0000000380)={&(0x7f00000039c0)={0x8dc, r7, 0x300, 0x70bd26, 0x25dfdbff, {}, [@MACSEC_ATTR_SA_CONFIG={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x124, 0x0, 0x0, @ipv6=@empty}]}, @MACSEC_ATTR_OFFLOAD={0x1c2, 0x9, 0x0, 0x1, [@generic="1b4e7e6458a2ea2c3b790df80b6ae919429669a113e1a6072133943f6f454b04f96889073225c831e7995d1acb6060ecc90a3cae69088303f4ebdf845fe7793f79e8fab83a2c1b3bdd805112d227888649b736045fb4b10713752d9c17ae97c34ac440a2e68db3cacb8644cec159644ea3dbb59b7486e302dcfa461dc8f634b1404edaa2042afb4c859125183e3b16175dc6c952ee598d56a26153f9f304a00db5d914326a56f4f15cfedddcf54011a708377478c0988dcfacec97a7c71862145c76347e7b46feea7f8447fb1c2ffe1f96c7f5e6f68e0f0d0ffaf247facab698bf78487e438bf19193cdb063d69eaee45005", @generic="65c33aadbc43974261f653b1d95687aed3fddb1279cda13f89fafc19918702d718118c7c69a3aafebe4cfcbb8eb299657077411c477b", @nested={0x6b, 0x8f, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @fd=r8}, @generic="e7988d52faed500eb5f5ba9a3f14ba8a48fbd4dd6c4ccf092267abb71e50f10b9509db0c886e512c5301b1f43c71aff9395409803414d4c76d99b8270a3123c6065b1c43295e831e91a8788e8991bebb96ff54e900c4bfd34f1562", @nested={0x4, 0x95}]}, @generic="a9e893001f11690e998264c895d7ac3ef7af", @nested={0xc, 0xd4, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @nested={0x4, 0x70}, @generic, @typed={0x8, 0x64, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r9}, @MACSEC_ATTR_RXSC_CONFIG={0x1a2, 0x2, 0x0, 0x1, [@typed={0x8, 0xa0, 0x0, 0x0, @ipv4=@empty}, @generic="77baee586ff4696c6b07eaa1aebc0e64fd8453587f3b80d378", @nested={0x27, 0x57, 0x0, 0x1, [@nested={0x4, 0x2b}, @nested={0x4, 0x6d}, @generic, @typed={0x8, 0x51, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x49}, @generic="a4eeeacaf932b9a910be9120a2dd10"]}, @nested={0x7b, 0xd1, 0x0, 0x1, [@generic="899ed5593007ce6ae5250b76e174006dfa46bf61dbd609de9ad44efab46d3995cfea59bbf0eb790dc6988b5b19cce98342bbcb07092265881127b202bd00dfb7c8d0c32245196c9901b775b354d2663dcf63595be3b62cc8b8f2792330168a1df34e398aa98c46f038e8eb61042edfed587ec6272530c8"]}, @generic="74841d09bab2aa4a05ee1f3b20243721d349bea459935c0efd504ec3a643c3f2b6bd9e89ce88329fc3dd537b55125b7a8138d4de8e4864f2cbda58700d2b309b94d553d57578641ca67674cc15645c2590c93b30b4f6dee23c9f4e31ae1fe7371bdc560832bd37a5c79c896fe9b8e96f28a003774b78ff8b55318da1429d108c0df2ecc580eca1152a61c2717dda38ac439f979af14a8d7881f8da00ee0117ff4fc52dc1fbf7b49e4c860217eedecf2ec841000268a280c5210e401422b4ce85784f0714eb335a919be1211e117b9c0381c0b307de330a974b"]}, @MACSEC_ATTR_SA_CONFIG={0x108, 0x3, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @fd=r3}, @typed={0x8, 0xe9, 0x0, 0x0, @u32}, @generic="f1fa1af8570c8ef5880d343af0af0fe6ea9c4cf8e24e23d6d6d15f9d5d7afc3705d1d3002c6894837174a2e652b159de0611bf8d53cc7cf84a91dc2f77e8734aab58cba7a0126c7f6353f49f3087685c28c70bfc39cf5ba7b48dfd4693a252014021fa7512492bb1cd3bac94b89d1a27d1d9ca99656d30418bfe46d70943616209327ab3e33993451b97c9832b1e45cc7568a24b1cae0ae6aa9a8a1f462201b5473e589f8857b60f11f831d6afa0348b8d8f411a4d00db2d08c2367575393ea0898ff951a5f1526d", @typed={0x8, 0x8, 0x0, 0x0, @fd=r4}, @nested={0x24, 0x67, 0x0, 0x1, [@nested={0x20, 0x141, 0x0, 0x1, [@typed={0xc, 0xcf, 0x0, 0x0, @str=')$-+-!\\\x00'}, @typed={0xc, 0x2f, 0x0, 0x0, @str='}^%\xcd$.&\x00'}, @typed={0x4, 0xc7}]}]}]}, @MACSEC_ATTR_OFFLOAD={0x19c, 0x9, 0x0, 0x1, [@typed={0xe, 0x5c, 0x0, 0x0, @str='/dev/ram7\x00'}, @typed={0x8, 0x12, 0x0, 0x0, @u32}, @typed={0x8, 0xd1, 0x0, 0x0, @pid=r2}, @generic="fbeee240e3634f4e5a26bdd772618c36e001b3fdb60c28933a9c6bb1e50a40b68415eb382eaf5b0ebf0e78ec49c479812873e60080926c62d17cbf0937e082c225ce0faa41e4e29248e67ca433f90fb458dd3fb44ea67d5cf3fcb009b3a131332452475c31d43c128e84ed3004da5e0632ddaf07548f7f143c02721f", @nested={0xfc, 0x9b, 0x0, 0x1, [@nested={0x4, 0x50}, @typed={0xc, 0x4, 0x0, 0x0, @u64=0x5}, @generic="d7aac435c94baed9fd64e1acaf3880c90bcee58fc8b60eb9a3628a96ec79e30699fe6782b9386ee0422e9ccdc6f03f883ca831474e32ec58ee8ecffb8937f280a872805d1fd8ecdd491c92fdbb09cc9edf3e0a81f55cab55203d03bcb801e39c3a3596dba982f0ce2e1d1dd935df2dfab44f8843b84cd1dbf20c2fd3937eb2dd55530502f361199f46ffd363a72a8e1558302e6bb84da07e3f6decba651cf28fed828ffd7ffc2b3cf098b6d5ee6cb6cd26a89019898adbc9ff2de4e0aca25a0272aa87", @generic="cb20e4e5ea61e298c9aaa0664a34b0e9a76bafaa01d9059520c1fab378", @typed={0x8, 0x6e, 0x0, 0x0, @pid=r2}]}]}, @MACSEC_ATTR_OFFLOAD={0x29c, 0x9, 0x0, 0x1, [@nested={0x1b0, 0x13c, 0x0, 0x1, [@generic="034bb87e4cc4803b7d55e9c0902ce043dd75aa30640c758c2fb09b40ba58a985ae6bfd650c6772fc81d258e2b7fa3b0facb1eaf1ab7ca917e1f056b8a079c870c9a90f9b3c81af7f39eeba6613708f7ae3115423e939011298d395d9a37f0dcabf1caf0a2e7d6ef85c372fa950ac4648f0", @typed={0x8, 0xb2, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x9a}, @generic="b4f858528018436174c22c77352bc8fe16ff4d9c34326e6ed442b393e26e95dbe2b4f84b534ced92c9db64b5eaacdda9f61ed0f84d51f95777096a7be3f7af2bf518ded57ad40f0ea5415a2d44bbb8a1aa3c85248d80fee1c1c2e86960c3cd59d2fa824928de55", @generic="e0205f6780f961acd4e9bdc56b39584e512dd2feaa71889c746ee89b1fa148b7750266c6c008ea211aa265fd6f00108c99888153b67dd809fd0bb5980031208af82cf07a66c0dd2447e3afba17b4471c3126fb26981cdd15dd9a22eb80304501ace5878e94c1781a87e35c1919426ce1a1dffa2e3d39e2a607b96fdc2b6ba5dd46cdb01fba59f29760e0e78c58614ec8caef21f03c6604051692df16c9d5128a5023e437e7fa86afd2a5f983381c3ce9806dc0ea83a63ecb", @nested={0x4, 0x123}, @typed={0x8, 0x127, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xe8}]}, @nested={0x24, 0x25, 0x0, 0x1, [@typed={0x20, 0x106, 0x0, 0x0, @binary="a2ca55e3d8a41139f5a969763048b23e2bd334e5b85d906631243b88"}]}, @nested={0x4, 0x122}, @generic, @nested={0xc0, 0x2d, 0x0, 0x1, [@nested={0xbb, 0x22, 0x0, 0x1, [@typed={0xc, 0x39, 0x0, 0x0, @str=')$-+-!\\\x00'}, @typed={0xe, 0x66, 0x0, 0x0, @binary="5b580ada8438f6994fd4"}, @generic="bebf84fbd274f4832e62d0f2fe7267193c14ea086612d599328c564bae0341804e0f6b98b6de96a349b8412ce0668730f8714cb5c503873fb7201df4653f631e7e66f454481a23bd5aad4c206f01c5c9140d72e56334395735d0943164062abcb0ae034392fc55ee2d0915ba43f74decc161922fc592a390ca832c57717e03c056ce6a2489991a05702d36f7d4de4a00afdfc03ebca064e3b7dc97"]}]}]}]}, 0x8dc}, 0x1, 0x0, 0x0, 0x40}, 0x40088c1)
sendmmsg$auto(r5, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x3, 0xa505}, 0x7ff}, 0x7, 0x4008)
r10 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x18, r10, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4044820)
executing program 1:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000)
r0 = io_uring_setup$auto(0x1, 0x0)
r1 = bpf$auto(0x5, 0x0, 0x102)
mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000)
ptrace$auto(0x10, 0x0, 0x400, 0x2)
r2 = fanotify_init$auto(0x7a, 0x80000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYBLOB="06acae4b11b09ba5170e697d45a9a1f1dc31e045e858a3665aae3abdc209d64fca4cb4ac021f5782732da47d5e00a6b5702083fd6ffcbb0c21bbc178dd61ee013fc5e5d6090b66cb22e23cb2f1259d5e34ced7c1ea2c3fb54e8be8c12f46d3c9785a540b3534aea149127ae78da3ad1f1491ca24044ed1537df854ec919fa6a080936f1a4909cda3ec1555a60d2616ef3b2662bb81b516796c17c732117c211d1d", @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES16=r0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES8=r1], 0x1ac}}, 0x40000)
r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/oom_adj\x00', 0x14a502, 0x0)
writev$auto(r3, &(0x7f00000001c0)={0x0}, 0x5)
read$auto_uinput_fops_uinput(r1, &(0x7f0000000000)=""/34, 0x22)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
unshare$auto(0x2b8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
splice$auto(0x4, 0x0, r4, 0x0, 0x1000, 0xf)
fcntl$auto(r4, 0x408, 0xffffffff80000000)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
executing program 3:
syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x24040050)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x2, 0x0)
r0 = socket(0x2, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
socket(0x2, 0x1, 0x106)
listen$auto(0x3, 0x81)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20008dff)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r0, 0x1ff, 0xfc9c, &(0x7f0000000040)='/dev/audio1\x00', 0x4589dc41)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x15)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x40840, 0x0)
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x6a2803, 0x0)
statx$auto(0xffffffffffffffff, 0x0, 0x7, 0xe747042, 0x0)
mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
futex$auto(0xfffffffffffffffd, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x18ad42a8)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
umount2$auto(&(0x7f0000000040)='.\x00', 0x4)
mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
readv$auto(0x3, 0x0, 0x6)
umount2$auto(&(0x7f0000000000)='.\x00', 0x4)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0)
timer_settime$auto(0x3, 0x0, 0xfffffffffffffffd, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x400, 0x0)
pread64$auto(r2, 0x0, 0x1fe, 0x9)
executing program 1:
mmap$auto(0x800000000000000, 0x4020009, 0x6, 0xeb1, 0x401, 0x8005)
sysfs$auto(0x2, 0x8, 0x0)
fsopen$auto(0x0, 0x1)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0)
read$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000080)=""/4096, 0x1000)
read$auto(r0, &(0x7f0000001200)='\xefI5\x1d\xc4~\xd0>\xd2;\xbcj\xce\x18+\x9blE\x18\xa1>V\n\xa4\x90cgy\x98O\xf4\x7f\xe0\xbf\xbb\x9f\xfc\xfb\x870l0\xcf\xb4\rx\xcb\bpg<ez\x87\xe6\xd9\x8dq5 \xf4J\xe8\xd6I\xaf\x04\xb8\xf1\x8a\xa8(\x1e\xc8\x8a\x05\x9b0\xa4\x06\xf9\x8f\xde\x16!\x9b\xd2\xb1\x81\x97\\\x8a,@\x02.p\xf6\xbe\xeaG1C\xd1~\xee\v\x19\x1c\xdd\n\xdc\x83\xb5\xb1\x8b\xc5U\xee\x92\x9e8.\x05R\x90\xab\x8c\x18.*YnZ\xb1\xe2\xec\xe6\xf2\x8d\x03A~\xa8_uk$\xce\xbe?\xd5\x11\r\xadQ\xdb\xc3w\x04r\x84\x92\x1b\xb4\x81*}\xc6\x1ev+\xb7\xb3X\x034\xcf\xce\x06Y\xef\x1a,\xc9\x88\x1d\xcd\x9b\xba\xf7\xca\x99\xe8\t\xbf_\xf2{\x9f\xb8\xe9\xf9\x05\xc8\xd1\x8e\"\xaa\xc0\x9d$\xfaE/\xf75\xfb\xe6\xbb\xe7\xdc', 0x20000074d)
clone3$auto(0xfffffffffffffffe, 0x101)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/local_cpus\x00', 0x800, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x65, 0x2, 0xffffffffffffffff, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
write$auto(0x3, 0x0, 0xfffffdef)
mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0)
shutdown$auto(0x200000003, 0x2)
sysfs$auto(0x2, 0x1b, 0x0)
r2 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/1:0:0:0\x00', 0x0, 0x0)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0)
openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9b)
ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0)
mmap$auto(0x0, 0x400008, 0xe1, 0x9b7f, r2, 0x7ffc)
executing program 3:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
ioctl$auto(0x1, 0x541b, 0x8)
r0 = getpid()
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000080)={0x9, 0x800, 0x3, 0xf8, 0x81, <r1=>r0})
r2 = prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0xfff, r1, 0xfffffffffffffff8, 0xc)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_seqnum\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001dc0)=""/195, 0xc3)
syz_clone3(&(0x7f0000001180)={0x8a200080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
r4 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_lprops\x00', 0x40aa2, 0x0)
write$auto_dfs_global_fops_debug(r4, &(0x7f0000000d80)='0', 0x1)
read$auto_trace_time_stamp_mode_fops_trace(r2, &(0x7f0000000000)=""/36, 0x24)
r5 = socket(0x8, 0x1, 0xffffffff)
r6 = getsockopt$auto(r5, 0x84, 0x9, 0x0, 0x0)
setsockopt$auto_SO_PROTOCOL(r6, 0x3, 0x26, &(0x7f0000000040)='/sys/kernel/uevent_seqnum\x00', 0x4)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x200008000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/nfc/nfc0/rfkill0/soft\x00', 0x8081, 0x0)
r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91)
read$auto(r1, 0x0, 0x1)
write$auto(r0, 0x0, 0xe)
socket(0x29, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000)
executing program 5:
mmap$auto(0x0, 0x400008, 0xdf, 0x4009b72, 0x2, 0x8000)
socket(0xa, 0x801, 0x100)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x8)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
r2 = prctl$auto_PR_SET_MM_ARG_END(0xc, 0x9, 0x0, 0x1, 0x4)
sendto$auto(r2, &(0x7f00000000c0), 0xff, 0x7fff, &(0x7f0000000100)=@ax25={0x3, @bcast, 0x1}, 0x7fff)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
socket(0x18, 0x2, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
socket(0x2b, 0x1, 0x1)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socket(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0)
write$auto(r7, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4)
write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000002c0), 0x0)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
executing program 1:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x4021000)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4)
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2b, 0x1, 0x0)
sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2404c040)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
connect$auto(0x3, 0x0, 0x55)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0x4)
select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x1, 0xd, 0x250, 0x100000001, 0x3, 0x2017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000001]}, 0x0, 0x0)
lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6)
executing program 0:
openat$auto_fops_blob_file(0xffffffffffffff9c, 0x0, 0xca981, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
adjtimex$auto(&(0x7f00000004c0)={0x7fffffff, 0x0, 0x7d, 0xfffffffffffffffd, 0xd4, 0x4, 0x4, 0x0, 0x1, 0x368e, 0x5, {0xc, 0x10000}, 0x5, 0xa, 0xfffffffffffffffd, 0xd, 0x0, 0x80000004, 0x10081, 0xffffffffffff628e, 0x4, 0x0, 0x800})
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
socket(0x28, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto(r0, &(0x7f00000001c0)='/dev/audio1\x00JR\xe7\xae\xd27M<f\xa7\x02\x8f\xcb],\xd3\x1d\x8c\x8bB\xc7\xfc\x90\xd1\x03h$\x98\xc4\xc2#\xc0{\xf2\xdf\x83\xa40\xa5?\x8e\x92\xf5\"\xa9q\x8d\xf9uR\x82\xbe.\x82OD.5\xc2\xcd\xa4\xd9@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\x1f\xc4\x03)\xbb\xa3\xb5\x10\'{\x97\x0e\xb3\xa1\xe10H\xd4\xefe\xac.f\x82Lk\xe5\xb3\x11AT6R@\xbb\x8c\xa4\xf2\xe8\xafo\x17\xb9\b<|tB!\xa3\xa5\n\b\x8cA;\xbc\xc7\x91\xeb\xc0\xc7\xeb$\xc0\xa6', 0xa3d9)
clock_adjtime$auto(0x4, &(0x7f00000000c0)={0xa91, 0x0, 0x10000, 0x2, 0x2, 0x9, 0x10000, 0x0, 0xb, 0x6, 0xcd4, {0x401, 0x9}, 0x9, 0x5, 0x8, 0x54f3, 0x0, 0x2, 0x8, 0x2, 0xfffffffffffffffe, 0xfffffffffffff9b4, 0x2})
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1f, 0x948b, 0x2, 0x15f4da0a, 0x3000000, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x6, 0x0)
connect$auto(0x3, 0x0, 0x55)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x28}, 0x1, 0x0, 0x0, 0x20040c04}, 0xc0804)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8044)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fedbdf250300000004000800100003800c00148008000100", @ANYRES32=r1, @ANYBLOB="12000100898771f1c19f1779048590822ad90000040002"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800)
executing program 3:
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x269c2, 0x90)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x29, 0x2, 0x88)
setsockopt$auto(r0, 0x11, 0xa, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x5e61)
openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/extended_iref\x00', 0x18b440, 0x0)
read$auto(r1, 0x0, 0x9)
ioctl$auto_USB_RAW_IOCTL_RUN(0xffffffffffffffff, 0x5501, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setresuid$auto(0x0, 0xffffffff, 0x9)
r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, r2)
sendmsg$auto_ETHTOOL_MSG_FEC_GET(r2, 0x0, 0x800)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="fa080000", @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d000000080004000000010030001a80080001008703000004000480040002001c000480180001800800060000000000040004000800060001000000", @ANYRESHEX=r0, @ANYRESHEX=r3], 0x7c}}, 0x4000800)
fchown$auto(0xffffffffffffffff, 0x0, 0x0)
socket(0xa, 0x5, 0x0)
executing program 0:
keyctl$auto_KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1)
syz_clone3(&(0x7f00000001c0)={0x281000, &(0x7f0000000000)=<r0=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x1a}, &(0x7f00000000c0)=""/124, 0x7c, &(0x7f0000000140)=""/55, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58)
getsockopt$auto(r0, 0x4, 0x5, &(0x7f0000000380)='\x00', &(0x7f00000003c0)=0x9f11)
mmap$auto(0x0, 0xf9, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x4, 0x0)
socket(0x2b, 0x1, 0x1)
setsockopt$auto(0x3, 0x8000000000000006, 0x25, 0x0, 0x7ffffc)
waitid$auto_P_ALL(0x0, r0, &(0x7f0000000240)={@_si_pad}, 0x6, &(0x7f00000002c0)={{0xff, 0xb}, {0x6, 0x5}, 0x7, 0x2, 0x7, 0x3, 0x8, 0x5, 0x8, 0x6, 0xd, 0x625369de, 0x8000, 0x1, 0xfff, 0xffffffffffffffff})
executing program 5:
mmap$auto(0x5, 0x2020009, 0x8, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000005600)='/proc/sys/dev/parport/default/timeslice\x00', 0x88281, 0x0) (async, rerun: 32)
write$auto(0x3, 0x0, 0xfdef) (async, rerun: 32)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) (async)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
read$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000240)=""/129, 0x81) (rerun: 32)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/device_info\x00', 0x8002, 0x0) (async, rerun: 32)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
fstat$auto(0x2, 0x0) (async)
sysfs$auto(0x2, 0x10000000000048, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae03, 0xffffffffffffffff) (async)
open(&(0x7f0000000800)='./file0\x00', 0x6a9183, 0x165) (async)
execve$auto(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async)
mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async)
mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
executing program 3:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x8200, 0x0)
pread64$auto(r0, 0x0, 0xa5, 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fsconfig$auto(r1, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = fcntl$getown(r0, 0x9)
sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84804022}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x290, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [@nested={0x38, 0xa7, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @pid=r3}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x46}, @typed={0x8, 0x3a, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x146, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xf0}, @nested={0x4, 0x11d}, @nested={0x4, 0x100}]}]}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xb1, 0xbb, "c19b944e692217bfdaf2f3e8fd37776f5c91c0d82dd65626ce31f2e737fa41d921c515c2a91a1e69cdc8ce2d7c4f35279e2d0fc96ca9284edc425169ea19c6145d2be85036610a4bf165ff9b0e953cb2e6f483e80bd4dafc720c3082a72881acbc58c48c4e64e185024edaaec3eba65cb5b90c3cbfb43f827d3c2a73881f8c3d88c171652bd49a0ac18f6ee513407f2e593fadcb0b5c8617f9e3184e1707cf83fb938e38edc3af7adbcecdf0c4"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff8}, @NL80211_ATTR_FILS_ERP_REALM={0x8b, 0xfa, "a09d18611e0b9cb4cb21dbf240da474ec3810e07e848fb5bf227839d6a54af8035df36934a658a4c7c69afa138e4f94e75a77f6282accd4fac18b148a5626bcadb49746bdafcf57ef725b948bbe5d7be4d879abc23fde41de1673522679eb7d3d41bb23362ce877d6fc81b8e86030e0e032583bdcf36391ff08887597f9ba55c8a3852c651a045"}, @NL80211_ATTR_NAN_FUNC={0xf8, 0xf0, 0x0, 0x1, [@nested={0xe8, 0x88, 0x0, 0x1, [@nested={0x4, 0x14c}, @nested={0x4, 0x2c}, @nested={0x4, 0x29}, @generic="b91fe5cfeb340394973d575fe5b110e8164a74a2f5333b139cf3df217186edfc7b54504ef3e367bea1aa96c8307002cb3b622d7cb30a4152ecf425788394f6f46755deaa9a96ea296fd90b88623a06c86849e2273f91eebafb7fd366d0d7733034fc6a7b3907fd0a7949dbc5526fa6ca917292cc5407a2c75d91e30b42e2dc2f58d60b78c9fc0fda73185ab6f471700293d55f8b129307ba803d213dc14e799e8873a9536d773d93e0374101b055080efb0d240007edb3655e5f4f103df51216274b96fb8515176d9f742c88f19b9a408d6ea378", @nested={0x4, 0x29}]}, @typed={0x4, 0xed}, @nested={0x8, 0x63, 0x0, 0x1, [@nested={0x4, 0x48}]}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040044)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
socket(0x2, 0x3, 0x100)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x20008000)
setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r1, 0x7f, 0x44, &(0x7f0000000100)='$%{^\xf4)\'){(@\'\x00', 0x18a6)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r2, 0x5607, r2)
executing program 3:
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0c/sub2/xrun_injection\x00', 0x282440, 0x0) (async, rerun: 32)
mlockall$auto(0x7) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
madvise$auto(0x0, 0x2000040080000004, 0xe) (async, rerun: 64)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
mmap$auto(0xfffffffffffffffe, 0x400, 0x4000000000de, 0xeb1, 0xffffffffffffffff, 0x3ff) (rerun: 32)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4)
r1 = socket(0xa, 0x1, 0x56) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) (async, rerun: 64)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r6 = getpgid(0x0)
kcmp$auto(r6, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) (async)
sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c0b0000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800f800", @ANYRES32=r5, @ANYBLOB="b500f7800c00a00005000000000000000e004200403a255b23272e2c2a00000008005600", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a4013f800400048008003300e0000001040027800400018060cf10e1b31fc575ccc19707a0e6005834bf40411df8b2be826f24fbbf793f74306ba139ad0f2481cfafe53dbf0b52c712f0547527732698e0c0f0ec71fee5f0947807e3abf313682f353859dfc4a068488a0c854aae9a73ea9567828cd5f378ed77bca46a35c478da542ec8fa918a44c7ea345af0f4fabbbc7f096021d4bae2d1f26ce071b57004009a8004000c80358433a1395102e2139ede60ecbe8f609f6607605783d8bb360dc4bf1157a8b73e28cd38a73a9b586ac42fc7201815e8ead9293c764cad90f87c0b2018228dc69b6bb9803baca68cb0380b9bbc497456b6fca24b1337090f3f4f5acb082fe3ba5823523628e11ab4cb5fb22ff46b10af12e5341cb5d467a85633682d0304d3eba469a25c7ed7a11516394f34f66cb929d9210917875ff6de48db93c63d1ca05e742e0dd1a9ae75b6b256121d80436fe81425ac84743ea4454c57c66ca08b2bc1610ab151583b98474f866ae063f677411a73f749bc200cf9c79734aab493db8d173213eca03f25249721756c41b22be05f442597c0e06ba3068c4cd505080089000200000008002480040032800800aa00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\b\x00K\x00', @ANYRES32=0x0, @ANYBLOB="00000f0028800800a200", @ANYRES32=r0, @ANYBLOB="a78cb90008008800", @ANYRES32=r3, @ANYBLOB="00000004002b80c25faa73bf97721b2e7fe95143b1df4243d7a1b6348b90f3b218e0a0770aa4e1b489e623f5ff856b54ee388a6b8dadd4eb04a864cdf396473de29b75a83c23a8ce87bf44d70bf9971e4409565bc21af82f56b6d475070ce56758b3532cdf5ec33066243ecb9f67a02f473e4c11b433fa9117a2982c99e2e1e725d3000800b7006e626400f9fdc0c5945932bd7447f0aa76f34cd714f2627427203721a1a08598074811ffdead229c3054f96414552cf17d7bef033dc742dc994c0594fe8718a2adc408d8229e37c110a9d9766a3608007600", @ANYRES32=r5, @ANYBLOB="e7fed39ede5a371933e7fd1b87624b55242ce4d8eab04a041132fca87ae98fd6f3816f22b7375da30264a7fac13ac1b2f59c9532f047221377b5a8dd820d71d88349fcb2f489f09ba9b5b50d2ab37fe61d64ed2877e38d6d0000060096000400000008004200070000001400f9001ebf9b13f793f1fdfd9ad73771ccb3a6"], 0xb9c}, 0x1, 0x0, 0x0, 0x48080}, 0x20000010)
syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r2)
sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000009400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x20040000) (async)
semctl$auto(0x8, 0x806, 0x13, 0x46) (async)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB32(r8, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"])
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x1a3540, 0x0) (async)
ioctl$auto_USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000000080)=0x53)
ioctl$auto(r8, 0x4008550d, r8) (async)
socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
executing program 5:
mmap$auto(0x800000000000000, 0x4020009, 0x6, 0xeb1, 0x401, 0x8005)
sysfs$auto(0x2, 0x8, 0x0)
fsopen$auto(0x0, 0x1)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0)
read$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000080)=""/4096, 0x1000)
read$auto(r0, &(0x7f0000001200)='\xefI5\x1d\xc4~\xd0>\xd2;\xbcj\xce\x18+\x9blE\x18\xa1>V\n\xa4\x90cgy\x98O\xf4\x7f\xe0\xbf\xbb\x9f\xfc\xfb\x870l0\xcf\xb4\rx\xcb\bpg<ez\x87\xe6\xd9\x8dq5 \xf4J\xe8\xd6I\xaf\x04\xb8\xf1\x8a\xa8(\x1e\xc8\x8a\x05\x9b0\xa4\x06\xf9\x8f\xde\x16!\x9b\xd2\xb1\x81\x97\\\x8a,@\x02.p\xf6\xbe\xeaG1C\xd1~\xee\v\x19\x1c\xdd\n\xdc\x83\xb5\xb1\x8b\xc5U\xee\x92\x9e8.\x05R\x90\xab\x8c\x18.*YnZ\xb1\xe2\xec\xe6\xf2\x8d\x03A~\xa8_uk$\xce\xbe?\xd5\x11\r\xadQ\xdb\xc3w\x04r\x84\x92\x1b\xb4\x81*}\xc6\x1ev+\xb7\xb3X\x034\xcf\xce\x06Y\xef\x1a,\xc9\x88\x1d\xcd\x9b\xba\xf7\xca\x99\xe8\t\xbf_\xf2{\x9f\xb8\xe9\xf9\x05\xc8\xd1\x8e\"\xaa\xc0\x9d$\xfaE/\xf75\xfb\xe6\xbb\xe7\xdc', 0x20000074d)
clone3$auto(0xfffffffffffffffe, 0x101)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/local_cpus\x00', 0x800, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x65, 0x2, 0xffffffffffffffff, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
write$auto(0x3, 0x0, 0xfffffdef)
mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0)
shutdown$auto(0x200000003, 0x2)
sysfs$auto(0x2, 0x1b, 0x0)
r2 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/1:0:0:0\x00', 0x0, 0x0)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0)
openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9b)
ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0)
mmap$auto(0x0, 0x400008, 0xe1, 0x9b7f, r2, 0x7ffc)
executing program 0:
openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x88041, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0x450100, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30100000", @ANYBLOB="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"], 0x1030}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4008, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r2 = mq_open$auto(0x0, 0xde8, 0xb, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/virt_wifi0/interval_probe_time_ms\x00', 0x382, 0x0)
sendfile$auto(r3, r3, 0x0, 0x2)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r5 = socket(0x2, 0x1, 0x106)
getsockopt$auto(r5, 0x3, 0x21, 0x0, 0x0)
ioctl$auto(r4, 0x4b66, 0x1)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x800, 0x0)
r6 = fanotify_init$auto(0x1f53, 0x2000000000002)
fanotify_mark$auto(r6, 0x1, 0x6d, r6, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x5, "feb2d1be631a0b383cd600975a2e541e4593fa295db4ec6662a1b7fa608cc76d", @raw=0xc})
executing program 5:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000)
r0 = io_uring_setup$auto(0x1, 0x0)
r1 = bpf$auto(0x5, 0x0, 0x102)
mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000)
ptrace$auto(0x10, 0x0, 0x400, 0x2)
r2 = fanotify_init$auto(0x7a, 0x80000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYBLOB="06acae4b11b09ba5170e697d45a9a1f1dc31e045e858a3665aae3abdc209d64fca4cb4ac021f5782732da47d5e00a6b5702083fd6ffcbb0c21bbc178dd61ee013fc5e5d6090b66cb22e23cb2f1259d5e34ced7c1ea2c3fb54e8be8c12f46d3c9785a540b3534aea149127ae78da3ad1f1491ca24044ed1537df854ec919fa6a080936f1a4909cda3ec1555a60d2616ef3b2662bb81b516796c17c732117c211d1daf", @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES16=r0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES8=r1], 0x1ac}}, 0x40000)
r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/oom_adj\x00', 0x14a502, 0x0)
writev$auto(r3, 0x0, 0x5)
read$auto_uinput_fops_uinput(r1, &(0x7f0000000000)=""/34, 0x22)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
unshare$auto(0x2b8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
splice$auto(0x4, 0x0, r4, 0x0, 0x1000, 0xf)
fcntl$auto(r4, 0x408, 0xffffffff80000000)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
r1 = socket(0xa, 0x801, 0x84)
r2 = socket(0xa, 0x1, 0x84)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r3, 0x0, 0xe)
getsockopt$auto(r2, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r4 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r5=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r4, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000000c0)=""/33, 0x18)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy6\x00', 0x2, 0x0)
ioctl$auto(r1, 0x5602, 0xffffffffffffffff)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20a675f3", @ANYRESOCT=r3, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000c0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4001)
socket(0x10, 0x2, 0xc)
executing program 5:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
mmap$auto(0xfffffffffffffff9, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0x2, 0x8)
openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x841, 0x0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
write$auto(r0, 0x0, 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000000c0), r1)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, "a7f67c10f9f2f68f69b563763527bdf664ecc5f554b680e2d9d06175dd2f6d06a85e438f9f8f8cb41db663f236f483ab3c944ad5cd5ed9fcd29ee7d1100c8e1360eeb508cbe1422f4e85fa74e1830b94a763fa26bd5fe09df5c611ce642cd9736ea4cb66533d8ebf4fd6cc73f64d68918c1eb8c3ed6661b6f621c66634dc0a09bb87eecc20b7729899c34ced93051d0dfc9870323fa01f3563653ce5"}, 0xb0}, 0x1, 0x0, 0x0, 0x840}, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto-mmap$auto-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mousedev_fops_mousedev-sendmmsg$auto-socket$nl_generic-sendmsg$auto_HWSIM_CMD_NEW_RADIO-sendmsg$auto_NL80211_CMD_GET_REG-socket
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
r1 = socket(0xa, 0x801, 0x84)
r2 = socket(0xa, 0x1, 0x84)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r3, 0x0, 0xe)
getsockopt$auto(r2, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r4 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r5=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r4, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000000c0)=""/33, 0x18)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy6\x00', 0x2, 0x0)
ioctl$auto(r1, 0x5602, 0xffffffffffffffff)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20a675f3", @ANYRESOCT=r3, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000c0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4001)
socket(0x10, 0x2, 0xc)

program did not crash
single: failed to extract reproducer
bisect: bisecting 38 programs with base timeout 1m40s
testing program (duration=1m49s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 7, 3, 30, 18, 29, 29, 3, 12, 6, 28, 30, 14, 14, 30, 17, 30, 20, 15, 30, 30, 16, 10, 30, 3, 13, 28, 30, 9, 23, 7, 15, 30, 30, 23, 20, 29, 10]
detailed listing:
executing program 2:
mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000)
openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x40800, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendto$auto(0x3, 0x0, 0xfef0, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c)
executing program 2:
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c05, 0x0)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/mem\x00', 0x2001, 0x0)
truncate$auto(&(0x7f00000000c0)='./cgroup\x00', 0x100000000000001)
lseek$auto(r1, 0x8001, 0x4)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
lremovexattr$auto(0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = mq_open$auto(&(0x7f0000000000)='\xbe\xf2\x82\xe7\x14g\xb5\xeeMQ\x13\xa2_g\xbf\t\xfa\xf2_N\xb0{\xf9\xb57v\xeeG\xd9l\xbf\x86q w\x96\xd9\xe9\xa8\xe1\xf0\xc7\x1f\x1e\xc4\xc4\x89u\x83\xe8}\xbd\x7fO\x91\xc1UVW.\xb6\xad\x04u\x02w.\xec`O\xc1\x0e\x15\xe7:\xc9\x1bK\xcddY\x03\x95\xd1\xae\xc1\x9b\x96\x9faj\xd2\xfc\xfc\x1f7\xaf\xcan\xf6\xc0wK\xce\xe7Q\xae\xc9Hg\x01\xef\xda[\xe5\xa3\xa3%\'\x8f\xcf\x96X:\x04Dkt\x7f\xde\x80\x01\xddX\x91\x88\xa1\t\xc3\xf1\xfe[\x93$O8 b\xb4\x92\xf4\xbc\xc5\xb9\x989\xfcF\xec\xdc@\xdd\xdaeM\xe0U\xc8;\xf5\xe7$Q8\xd2\x87\xdd\xc5\x9d\xc5\xe8\xb5\xb5\xb8\xdfD\xd0\xe8t\x8aS\xaa\xbe\xaa\xba\x9e^0\x1a\xf8Y\xf5Jp\bu\xba\x98\x00\xf0H5\xa9u\x0e\xc4\x04\x13\xf58p\x9f\x11\xc07\xefS*|\xd87\x12\xd8\xce\xde0\xd82;\xcd\x18\r\xccI\x99\n\xd2\x86', 0xdd1, 0x8, 0x0)
mq_notify$auto(r2, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram5/trace/pid\x00', 0xa001, 0x0)
write$auto(r3, &(0x7f0000000540)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0\xb4\xd9\x82=\xe1P~\x17\xfb&L\xeb=j\a\xf1y\xb3\"', 0x81)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x0, 0x0)
epoll_create$auto(0x4)
epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x0, 0x407, 0x100000)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
mlock$auto(0x7c89, 0x47fff)
eventfd$auto(0x5)
clone$auto(0x6, 0x3, 0x0, 0x0, 0xdd6)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
socket(0xa, 0x5, 0x0)
r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40044)
executing program 2:
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
acct$auto(0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
r0 = socket(0xa, 0x3, 0x3a)
splice$auto(r0, &(0x7f00000001c0)=0x8000000000000001, r0, &(0x7f0000000200)=0x4, 0x3, 0xd2)
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4)
kill$auto(0x0, 0x11)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
socket(0x2, 0x801, 0x100)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1\x00'})
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
io_uring_setup$auto(0x3ff, 0x0)
executing program 2:
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000e40), 0x80d02, 0x0)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x20000000000eb1, 0x401, 0x8000)
move_pages$auto(0x0, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0xc1f, 0x9, 0x0)
mmap$auto(0x0, 0x4000000000020009, 0x4000000000e1, 0x400ebf, r0, 0x7)
unshare$auto(0x40800080)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0xd0800, 0x0)
write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000440)="19000003d30000", 0x7)
socket(0x2, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x1700000000000000, 0x53, 0x9)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r3, 0x5393, r2)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='\x00'/12, 0xa3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x80000000000000d, 0x1, 0x948d, 0x6, 0x15f4da0a, 0x1, 0x8, 0x1000000, 0xfffffffffffffffd, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7a100ac}, 0x6)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
executing program 32:
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000e40), 0x80d02, 0x0)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x20000000000eb1, 0x401, 0x8000)
move_pages$auto(0x0, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0xc1f, 0x9, 0x0)
mmap$auto(0x0, 0x4000000000020009, 0x4000000000e1, 0x400ebf, r0, 0x7)
unshare$auto(0x40800080)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0xd0800, 0x0)
write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000440)="19000003d30000", 0x7)
socket(0x2, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x1700000000000000, 0x53, 0x9)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r3, 0x5393, r2)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='\x00'/12, 0xa3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x80000000000000d, 0x1, 0x948d, 0x6, 0x15f4da0a, 0x1, 0x8, 0x1000000, 0xfffffffffffffffd, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7a100ac}, 0x6)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
executing program 4:
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0)
write$auto_sg_fops_sg(r0, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff657", 0x19)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
executing program 4:
r0 = socket(0x2, 0x2, 0x88)
r1 = socket(0x2, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r1, 0x0, 0xd0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
setsockopt$auto(r0, 0x1, 0x3e, 0x0, 0x6)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1c)
executing program 4:
r0 = socket(0x2, 0x1, 0x0)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
mmap$auto(0x1, 0x8000000000000001, 0xdf, 0x9b72, r0, 0x8000)
r1 = socket(0xa, 0x5, 0x0)
statmount$auto(&(0x7f00000000c0)={0x7e, @raw, 0x80000027, 0x8, 0x2}, 0x0, 0x223, 0x0)
getsockopt$auto(r1, 0x84, 0x8, 0x0, 0x0)
executing program 4:
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x8083, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))
ppoll$auto(&(0x7f0000000000)={<r1=>r0, 0x40}, 0x2, 0x0, 0x0, 0x8)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/queues/tx-0/tx_maxrate\x00', 0x8402, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)='8', 0x1)
read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000200)=""/238, 0xee)
ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
socket(0x1d, 0x2, 0x6)
openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x3, 0x6)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028"], 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x0)
mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40d40, 0x1a0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101680, 0x0)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
write$auto(0x3, 0x0, 0xffd8)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
semtimedop$auto(0x3, 0x0, 0x8, &(0x7f00000000c0)={0xf3c7, 0x5})
executing program 4:
mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000)
mlockall$auto(0x8000000000000001)
ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f00000005c0)=<r0=>0xffffffffffffffff)
madvise$auto(0x1000000000005, 0x8000000000000000, 0xfffffffd)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mbind$auto(0x20000000000005, 0x2, 0x3, 0x0, 0x80000000, 0x7f)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
writev$auto(0x1, 0x0, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
readahead$auto(r2, 0x6, 0x2)
r3 = socket(0x23, 0x5, 0x0)
listen$auto(r3, 0x5ed)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x80)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub1/xrun_injection\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000001c0)=""/65, 0x41)
socket(0xa, 0x2, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
shutdown$auto(0x200000003, 0x2)
openat$dir(0xffffffffffffff9c, 0x0, 0x280000, 0x100)
ioprio_set$auto(0xffffff81, 0x0, 0x5)
r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_FLUSH(r0, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x178, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x5e, 0x3, 0x0, 0x1, [@generic="73ee782565d7c13b14cb77887dc8998484935c0ba9daaaf98047a937267a81787b", @generic="a6763149a10118db16116b27a692c557211e137c48e2fcc3971f57e7b2d25cf9db58f597693aa11cd6a0fd41f6df2e719729fa8ff40643cf4a"]}, @IPVS_CMD_ATTR_DEST={0xea, 0x2, 0x0, 0x1, [@generic="276c81da47d9d9ea93bac9d4965f031f896afd9708fa4595bafed6263258562761cd76788193ae9ebced25036afaf3822c7ec15f32846080efa5a308abbd058bd7f10e39fc072eb7d8a587872a94b8f5109b467242293db6e36b77ff2b621281cf5571e8a019eb78896880ba4af509f61d43ff0e6d56ca3dd0e3289dd8301691d75b83bc4c0828ce30110c62540c1665a39c751ef60b4289169fd155997c124aa7cbc901db4552597428457ce9317a8f8c04e9881eea7f43efde107ee820c7539fe2bec7d979615a7ae5b926aeedaa86b4d2ef6d2b76c3441ef4a0757c2c6acb459fe029bde4"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x178}, 0x1, 0x0, 0x0, 0x8080}, 0x4800)
mprotect$auto(0x0, 0x4, 0x4)
executing program 4:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/max_ratio\x00', 0xa001, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x1, 0x0)
io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86)
io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x86)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x200201, 0x0)
msgrcv$auto(0x2, &(0x7f0000000080)={0x5, 0x6}, 0xffff, 0x26da, 0x5)
executing program 33:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/max_ratio\x00', 0xa001, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x1, 0x0)
io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86)
io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x86)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x200201, 0x0)
msgrcv$auto(0x2, &(0x7f0000000080)={0x5, 0x6}, 0xffff, 0x26da, 0x5)
executing program 1:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/slab/kmalloc-64/total_objects\x00', 0x2400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/250, 0xfa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xf, 0x2, 0x1)
r1 = socket(0x2, 0x2, 0x88)
setsockopt$auto(r1, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x80000e)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3ff, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc4)
r2 = bpf$auto(0x0, 0x0, 0x10)
io_uring_setup$auto(0x1, 0x0)
eventfd$auto(0xb)
socket(0x2, 0x2, 0x88)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
connect$auto(0x3, 0x0, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
mmap$auto(0x18e2, 0x6, 0x3a55, 0x16, 0xffffffffffffffff, 0x200)
ioctl$auto_RTC_IRQP_SET(r2, 0x4008700c, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0)
poll$auto(0x0, 0x5, 0x49)
write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-wq/nice\x00', 0x103080, 0x0)
read$auto(r3, 0x0, 0x1)
socket(0x10, 0x2, 0xc)
executing program 1:
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x2aa82, 0x0)
r1 = getpid()
r2 = gettid()
rt_tgsigqueueinfo$auto(r1, r2, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_sigsys={0x0, 0x2, 0xffffffff}}})
prctl$auto(0xd61, 0x3, r1, 0xc, 0x6)
ioctl$auto_KVM_CREATE_VM(r0, 0x4018aee2, 0x88)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
write$auto_uhid_fops_uhid(0xffffffffffffffff, &(0x7f0000000040)="cb9f1c4173d0", 0x6)
shmget$auto(0x8, 0x10565, 0x7ff)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC2\x00', 0x890000, 0x0)
shmat$auto(0x0, &(0x7f0000000080)='\xf0\xa3\x10v\xae(\fr\xc9\x8f*\x1b\x00\x00\xfe(}\xeal\xd6\xcf\xcf\xaaB\xd0\xfe\x16\n\r\xb9\x9d\xb0\x1f\xee\xe7n\xb0\x0fo\xe2\xafH\xfa*\x1ac7\xc2b\xc3\x9b\x05!>\xc5\xb9\x05\xd2\x00\x997\x8c\x1a3qj|\x18\xe8\x03\b\xce\x91\x03\xec\xa3\x16;\x04\xa9\x80L\xf8r\vot\x04\xda\xf3\xc8\x90F\t\x00\x00\x00\xb8\xe8\x1cZ\xe2\x87\x87\xed\xdfl\xdd\x9d\xcc\xaf\xc8O\x99\xb3i\xe8\x05K\xfa\xa9\x05\xa6\xbej\xe4\xf5+\xf2\xc8rg\n>.\x00\xe9b~\x83\a^\x14\t\x00>n\xd7\xe9\x00\x9b\x90\xaa\xba\xe5.\xf6ek\xb2\x80\xb2o\xfb\xd1\x92\x91\x1f,6\xc6\xe8\"\xb4X\x04b\x80\xc3V \xf8l\xff+\r=*`h#\xeeu\t\x8aXh\x0f\x1b\xcf\xd6w|\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\xce\x99\x85\a\t\xcb\xca\x8c\x15\xd9w\xd7\xc4\xf7\x8e\xd7\xd6;\x13\x1c\xbc\xa6n\xa91\xf4\x04\v\xf1s\x90\xfb\x87j\x1c\xc5\xf9 _\x8e\xec\x9c~\b\xbe\xde:\x98\xf6\x03\xe0-w\xcf\xef_\xb1\xfal\x193\xf79\xc6\xc9\xc6\xc6-\xa9\xb7i<\xb0ZB\x9f\xb2&\x1b\xe9\x93\xad\x910\xde\x1c=I\x03U\x1c\xddU~\xff\xe3&\xad\xe4\x90\xcf|>\x1cJLIe\xcf\xa6#\x98\xcfT\v6\x16\x9d\xac\n\x86\x04\xe6\xa6\xc8\xdf\xb6W\xf3=s\xdeWTQ\xddf$\x95\x81\xc6', 0xfffffffa)
kcmp$auto(0x1, 0x100000001, 0x1, 0x4, 0x24000)
shmctl$auto(0x13000000, 0x0, 0xfffffffffffffffd)
shmdt$auto(&(0x7f0000000000)='(\x00')
prctl$auto_PR_GET_FPEMU(0x9, 0x8000000000000001, r2, 0x5, 0x2)
executing program 5:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7)
write$auto(r0, &(0x7f0000000000)='\'\x00', 0x4)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x10000000000e2, 0xeb1, 0x405, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
getrandom$auto(0x0, 0x6000000, 0x3)
r2 = semctl$auto_SEM_INFO(0x3, 0xfffffff9, 0x13, 0x8)
r3 = prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, r2, 0xcd8, 0x100)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
madvise$auto(0x0, 0x20499d, 0x9)
ioctl$auto(0xffffffffffffffff, 0x40046205, 0x9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
settimeofday$auto(&(0x7f0000000140)={0x4000000000000000, 0xa6}, &(0x7f00000001c0)={0xffffb776, 0x8})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000003fb33a0275ab7dacc9c57f343fd91e6a500966cab4a9a53cc812f15e264175412483d2461404190ca5f452fa2418a95072c1aa9448609585d8aa2c56cf79c3b5ce5d51475af54337f2db965510fb9b4828b8283eaf9160b80558c2f002b32b770926ce39ba3dc6e1ee159ef4269bec889c0945cfb1e5cde0b786b7260c12c738eaf629ff41f065", @ANYRES16, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_UPD_RXSA(r6, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d00)=ANY=[@ANYBLOB='X$\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3701728004002d80f159787d2df35906dfd05b75b7b3bf2292e15ee653fb43337237dc5e192d4c29d930e614181a0631993db6171e63a24b924660031f6f27ccde96f60014ca9ef75f4035a769dc7a53ae3237ce88d29152f9188753e9b6ee67ce3592e0f390326b128438fd0f4ca29be4fa29e56eb308001400", @ANYRES32=r2, @ANYBLOB="9ab2287531353ebdef0cf84b32ebe3916972bd6dcadb7b60d35c063d01b291f4aa430b0655b746d96b4348b9dbe0c38242284fe47bbe03b57551f2abcb21d9c93df038a849524d122c00328469e918b6cc034219d5db592a3e4b5329e2f68b8183cb84d9d080394f2321bd43bdb2507a550b1f5afa4eaf9251f28dc05e7ef66f12a15b40859ad142b1025762931fa26ce72c553f2795bf5419da3a7ab0125dcad0e48e3a80055471e81556384cac4f05819b19c09850ea7b490085c099c5f685df60bc4f987b4b554dffce20edef2d50522f5f10082cb350a0ea439e7fa831633614926e6f542eec900790bcd2b5f069d010e1ac6e6de3d59f2eb96fd53f2db13f77c83c0978f7ed4d6b9f226b8129b227ed3f6248c2ca19458ed1152e03e3304398f873c9b22c81f2d99c30203073183eeb2f5d8f26b2fb0f9a84a77c2fab99c8300b2284f82f0b17a22f677e9fe9b19154158a284ed26bf9cde40a4c4ae9bc18002d800800a900", @ANYRES32=r2, @ANYBLOB="0400a28004003580040036808b0013802cc2b178744899995d88eb742eb47049064b44b1bbf7e2ade9f7748f9c30c61bf3c1d63c60be89d4c3d27bf22827cdbf89c50ae21f329b0d1236f4e586d2f1df0ec25041de9748851400a82196ed6bf3a7800b91121ba3280d718c52fc6b0c5065d653f74f37d60971b0e2d367a019d159390afc4379e657e99bab8107ad5c07a80ef67362aeab008ebe9759059e27be454ce9aada981ef99dfff4522255a7d9babd5059b2b2c9be4017610000002c00bb8008003a00", @ANYRES32, @ANYBLOB="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"/4428, @ANYRES32=0x0, @ANYBLOB], 0x2458}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r8 = getsockopt$auto_SO_DOMAIN(r3, 0x0, 0x27, &(0x7f0000000240)='/dev/ram7\x00', &(0x7f0000000300)=0x21)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1\x00', <r9=>0x0})
sendmsg$auto_MACSEC_CMD_DEL_RXSA(r5, &(0x7f0000000cc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1a0222}, 0xc, &(0x7f0000000380)={&(0x7f00000039c0)={0x8dc, r7, 0x300, 0x70bd26, 0x25dfdbff, {}, [@MACSEC_ATTR_SA_CONFIG={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x124, 0x0, 0x0, @ipv6=@empty}]}, @MACSEC_ATTR_OFFLOAD={0x1c2, 0x9, 0x0, 0x1, [@generic="1b4e7e6458a2ea2c3b790df80b6ae919429669a113e1a6072133943f6f454b04f96889073225c831e7995d1acb6060ecc90a3cae69088303f4ebdf845fe7793f79e8fab83a2c1b3bdd805112d227888649b736045fb4b10713752d9c17ae97c34ac440a2e68db3cacb8644cec159644ea3dbb59b7486e302dcfa461dc8f634b1404edaa2042afb4c859125183e3b16175dc6c952ee598d56a26153f9f304a00db5d914326a56f4f15cfedddcf54011a708377478c0988dcfacec97a7c71862145c76347e7b46feea7f8447fb1c2ffe1f96c7f5e6f68e0f0d0ffaf247facab698bf78487e438bf19193cdb063d69eaee45005", @generic="65c33aadbc43974261f653b1d95687aed3fddb1279cda13f89fafc19918702d718118c7c69a3aafebe4cfcbb8eb299657077411c477b", @nested={0x6b, 0x8f, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @fd=r8}, @generic="e7988d52faed500eb5f5ba9a3f14ba8a48fbd4dd6c4ccf092267abb71e50f10b9509db0c886e512c5301b1f43c71aff9395409803414d4c76d99b8270a3123c6065b1c43295e831e91a8788e8991bebb96ff54e900c4bfd34f1562", @nested={0x4, 0x95}]}, @generic="a9e893001f11690e998264c895d7ac3ef7af", @nested={0xc, 0xd4, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @nested={0x4, 0x70}, @generic, @typed={0x8, 0x64, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r9}, @MACSEC_ATTR_RXSC_CONFIG={0x1a2, 0x2, 0x0, 0x1, [@typed={0x8, 0xa0, 0x0, 0x0, @ipv4=@empty}, @generic="77baee586ff4696c6b07eaa1aebc0e64fd8453587f3b80d378", @nested={0x27, 0x57, 0x0, 0x1, [@nested={0x4, 0x2b}, @nested={0x4, 0x6d}, @generic, @typed={0x8, 0x51, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x49}, @generic="a4eeeacaf932b9a910be9120a2dd10"]}, @nested={0x7b, 0xd1, 0x0, 0x1, [@generic="899ed5593007ce6ae5250b76e174006dfa46bf61dbd609de9ad44efab46d3995cfea59bbf0eb790dc6988b5b19cce98342bbcb07092265881127b202bd00dfb7c8d0c32245196c9901b775b354d2663dcf63595be3b62cc8b8f2792330168a1df34e398aa98c46f038e8eb61042edfed587ec6272530c8"]}, @generic="74841d09bab2aa4a05ee1f3b20243721d349bea459935c0efd504ec3a643c3f2b6bd9e89ce88329fc3dd537b55125b7a8138d4de8e4864f2cbda58700d2b309b94d553d57578641ca67674cc15645c2590c93b30b4f6dee23c9f4e31ae1fe7371bdc560832bd37a5c79c896fe9b8e96f28a003774b78ff8b55318da1429d108c0df2ecc580eca1152a61c2717dda38ac439f979af14a8d7881f8da00ee0117ff4fc52dc1fbf7b49e4c860217eedecf2ec841000268a280c5210e401422b4ce85784f0714eb335a919be1211e117b9c0381c0b307de330a974b"]}, @MACSEC_ATTR_SA_CONFIG={0x108, 0x3, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @fd=r3}, @typed={0x8, 0xe9, 0x0, 0x0, @u32}, @generic="f1fa1af8570c8ef5880d343af0af0fe6ea9c4cf8e24e23d6d6d15f9d5d7afc3705d1d3002c6894837174a2e652b159de0611bf8d53cc7cf84a91dc2f77e8734aab58cba7a0126c7f6353f49f3087685c28c70bfc39cf5ba7b48dfd4693a252014021fa7512492bb1cd3bac94b89d1a27d1d9ca99656d30418bfe46d70943616209327ab3e33993451b97c9832b1e45cc7568a24b1cae0ae6aa9a8a1f462201b5473e589f8857b60f11f831d6afa0348b8d8f411a4d00db2d08c2367575393ea0898ff951a5f1526d", @typed={0x8, 0x8, 0x0, 0x0, @fd=r4}, @nested={0x24, 0x67, 0x0, 0x1, [@nested={0x20, 0x141, 0x0, 0x1, [@typed={0xc, 0xcf, 0x0, 0x0, @str=')$-+-!\\\x00'}, @typed={0xc, 0x2f, 0x0, 0x0, @str='}^%\xcd$.&\x00'}, @typed={0x4, 0xc7}]}]}]}, @MACSEC_ATTR_OFFLOAD={0x19c, 0x9, 0x0, 0x1, [@typed={0xe, 0x5c, 0x0, 0x0, @str='/dev/ram7\x00'}, @typed={0x8, 0x12, 0x0, 0x0, @u32}, @typed={0x8, 0xd1, 0x0, 0x0, @pid=r2}, @generic="fbeee240e3634f4e5a26bdd772618c36e001b3fdb60c28933a9c6bb1e50a40b68415eb382eaf5b0ebf0e78ec49c479812873e60080926c62d17cbf0937e082c225ce0faa41e4e29248e67ca433f90fb458dd3fb44ea67d5cf3fcb009b3a131332452475c31d43c128e84ed3004da5e0632ddaf07548f7f143c02721f", @nested={0xfc, 0x9b, 0x0, 0x1, [@nested={0x4, 0x50}, @typed={0xc, 0x4, 0x0, 0x0, @u64=0x5}, @generic="d7aac435c94baed9fd64e1acaf3880c90bcee58fc8b60eb9a3628a96ec79e30699fe6782b9386ee0422e9ccdc6f03f883ca831474e32ec58ee8ecffb8937f280a872805d1fd8ecdd491c92fdbb09cc9edf3e0a81f55cab55203d03bcb801e39c3a3596dba982f0ce2e1d1dd935df2dfab44f8843b84cd1dbf20c2fd3937eb2dd55530502f361199f46ffd363a72a8e1558302e6bb84da07e3f6decba651cf28fed828ffd7ffc2b3cf098b6d5ee6cb6cd26a89019898adbc9ff2de4e0aca25a0272aa87", @generic="cb20e4e5ea61e298c9aaa0664a34b0e9a76bafaa01d9059520c1fab378", @typed={0x8, 0x6e, 0x0, 0x0, @pid=r2}]}]}, @MACSEC_ATTR_OFFLOAD={0x29c, 0x9, 0x0, 0x1, [@nested={0x1b0, 0x13c, 0x0, 0x1, [@generic="034bb87e4cc4803b7d55e9c0902ce043dd75aa30640c758c2fb09b40ba58a985ae6bfd650c6772fc81d258e2b7fa3b0facb1eaf1ab7ca917e1f056b8a079c870c9a90f9b3c81af7f39eeba6613708f7ae3115423e939011298d395d9a37f0dcabf1caf0a2e7d6ef85c372fa950ac4648f0", @typed={0x8, 0xb2, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x9a}, @generic="b4f858528018436174c22c77352bc8fe16ff4d9c34326e6ed442b393e26e95dbe2b4f84b534ced92c9db64b5eaacdda9f61ed0f84d51f95777096a7be3f7af2bf518ded57ad40f0ea5415a2d44bbb8a1aa3c85248d80fee1c1c2e86960c3cd59d2fa824928de55", @generic="e0205f6780f961acd4e9bdc56b39584e512dd2feaa71889c746ee89b1fa148b7750266c6c008ea211aa265fd6f00108c99888153b67dd809fd0bb5980031208af82cf07a66c0dd2447e3afba17b4471c3126fb26981cdd15dd9a22eb80304501ace5878e94c1781a87e35c1919426ce1a1dffa2e3d39e2a607b96fdc2b6ba5dd46cdb01fba59f29760e0e78c58614ec8caef21f03c6604051692df16c9d5128a5023e437e7fa86afd2a5f983381c3ce9806dc0ea83a63ecb", @nested={0x4, 0x123}, @typed={0x8, 0x127, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xe8}]}, @nested={0x24, 0x25, 0x0, 0x1, [@typed={0x20, 0x106, 0x0, 0x0, @binary="a2ca55e3d8a41139f5a969763048b23e2bd334e5b85d906631243b88"}]}, @nested={0x4, 0x122}, @generic, @nested={0xc0, 0x2d, 0x0, 0x1, [@nested={0xbb, 0x22, 0x0, 0x1, [@typed={0xc, 0x39, 0x0, 0x0, @str=')$-+-!\\\x00'}, @typed={0xe, 0x66, 0x0, 0x0, @binary="5b580ada8438f6994fd4"}, @generic="bebf84fbd274f4832e62d0f2fe7267193c14ea086612d599328c564bae0341804e0f6b98b6de96a349b8412ce0668730f8714cb5c503873fb7201df4653f631e7e66f454481a23bd5aad4c206f01c5c9140d72e56334395735d0943164062abcb0ae034392fc55ee2d0915ba43f74decc161922fc592a390ca832c57717e03c056ce6a2489991a05702d36f7d4de4a00afdfc03ebca064e3b7dc97"]}]}]}]}, 0x8dc}, 0x1, 0x0, 0x0, 0x40}, 0x40088c1)
sendmmsg$auto(r5, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x3, 0xa505}, 0x7ff}, 0x7, 0x4008)
r10 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x18, r10, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4044820)
executing program 1:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000)
r0 = io_uring_setup$auto(0x1, 0x0)
r1 = bpf$auto(0x5, 0x0, 0x102)
mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000)
ptrace$auto(0x10, 0x0, 0x400, 0x2)
r2 = fanotify_init$auto(0x7a, 0x80000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYBLOB="06acae4b11b09ba5170e697d45a9a1f1dc31e045e858a3665aae3abdc209d64fca4cb4ac021f5782732da47d5e00a6b5702083fd6ffcbb0c21bbc178dd61ee013fc5e5d6090b66cb22e23cb2f1259d5e34ced7c1ea2c3fb54e8be8c12f46d3c9785a540b3534aea149127ae78da3ad1f1491ca24044ed1537df854ec919fa6a080936f1a4909cda3ec1555a60d2616ef3b2662bb81b516796c17c732117c211d1d", @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES16=r0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES8=r1], 0x1ac}}, 0x40000)
r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/oom_adj\x00', 0x14a502, 0x0)
writev$auto(r3, &(0x7f00000001c0)={0x0}, 0x5)
read$auto_uinput_fops_uinput(r1, &(0x7f0000000000)=""/34, 0x22)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
unshare$auto(0x2b8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
splice$auto(0x4, 0x0, r4, 0x0, 0x1000, 0xf)
fcntl$auto(r4, 0x408, 0xffffffff80000000)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
executing program 3:
syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x24040050)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x2, 0x0)
r0 = socket(0x2, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
socket(0x2, 0x1, 0x106)
listen$auto(0x3, 0x81)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20008dff)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r0, 0x1ff, 0xfc9c, &(0x7f0000000040)='/dev/audio1\x00', 0x4589dc41)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x15)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x40840, 0x0)
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x6a2803, 0x0)
statx$auto(0xffffffffffffffff, 0x0, 0x7, 0xe747042, 0x0)
mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
futex$auto(0xfffffffffffffffd, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x18ad42a8)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
umount2$auto(&(0x7f0000000040)='.\x00', 0x4)
mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
readv$auto(0x3, 0x0, 0x6)
umount2$auto(&(0x7f0000000000)='.\x00', 0x4)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0)
timer_settime$auto(0x3, 0x0, 0xfffffffffffffffd, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x400, 0x0)
pread64$auto(r2, 0x0, 0x1fe, 0x9)
executing program 1:
mmap$auto(0x800000000000000, 0x4020009, 0x6, 0xeb1, 0x401, 0x8005)
sysfs$auto(0x2, 0x8, 0x0)
fsopen$auto(0x0, 0x1)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0)
read$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000080)=""/4096, 0x1000)
read$auto(r0, &(0x7f0000001200)='\xefI5\x1d\xc4~\xd0>\xd2;\xbcj\xce\x18+\x9blE\x18\xa1>V\n\xa4\x90cgy\x98O\xf4\x7f\xe0\xbf\xbb\x9f\xfc\xfb\x870l0\xcf\xb4\rx\xcb\bpg<ez\x87\xe6\xd9\x8dq5 \xf4J\xe8\xd6I\xaf\x04\xb8\xf1\x8a\xa8(\x1e\xc8\x8a\x05\x9b0\xa4\x06\xf9\x8f\xde\x16!\x9b\xd2\xb1\x81\x97\\\x8a,@\x02.p\xf6\xbe\xeaG1C\xd1~\xee\v\x19\x1c\xdd\n\xdc\x83\xb5\xb1\x8b\xc5U\xee\x92\x9e8.\x05R\x90\xab\x8c\x18.*YnZ\xb1\xe2\xec\xe6\xf2\x8d\x03A~\xa8_uk$\xce\xbe?\xd5\x11\r\xadQ\xdb\xc3w\x04r\x84\x92\x1b\xb4\x81*}\xc6\x1ev+\xb7\xb3X\x034\xcf\xce\x06Y\xef\x1a,\xc9\x88\x1d\xcd\x9b\xba\xf7\xca\x99\xe8\t\xbf_\xf2{\x9f\xb8\xe9\xf9\x05\xc8\xd1\x8e\"\xaa\xc0\x9d$\xfaE/\xf75\xfb\xe6\xbb\xe7\xdc', 0x20000074d)
clone3$auto(0xfffffffffffffffe, 0x101)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/local_cpus\x00', 0x800, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x65, 0x2, 0xffffffffffffffff, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
write$auto(0x3, 0x0, 0xfffffdef)
mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0)
shutdown$auto(0x200000003, 0x2)
sysfs$auto(0x2, 0x1b, 0x0)
r2 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/1:0:0:0\x00', 0x0, 0x0)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0)
openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9b)
ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0)
mmap$auto(0x0, 0x400008, 0xe1, 0x9b7f, r2, 0x7ffc)
executing program 3:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
ioctl$auto(0x1, 0x541b, 0x8)
r0 = getpid()
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000080)={0x9, 0x800, 0x3, 0xf8, 0x81, <r1=>r0})
r2 = prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0xfff, r1, 0xfffffffffffffff8, 0xc)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_seqnum\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001dc0)=""/195, 0xc3)
syz_clone3(&(0x7f0000001180)={0x8a200080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
r4 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_lprops\x00', 0x40aa2, 0x0)
write$auto_dfs_global_fops_debug(r4, &(0x7f0000000d80)='0', 0x1)
read$auto_trace_time_stamp_mode_fops_trace(r2, &(0x7f0000000000)=""/36, 0x24)
r5 = socket(0x8, 0x1, 0xffffffff)
r6 = getsockopt$auto(r5, 0x84, 0x9, 0x0, 0x0)
setsockopt$auto_SO_PROTOCOL(r6, 0x3, 0x26, &(0x7f0000000040)='/sys/kernel/uevent_seqnum\x00', 0x4)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x200008000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/nfc/nfc0/rfkill0/soft\x00', 0x8081, 0x0)
r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91)
read$auto(r1, 0x0, 0x1)
write$auto(r0, 0x0, 0xe)
socket(0x29, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000)
executing program 5:
mmap$auto(0x0, 0x400008, 0xdf, 0x4009b72, 0x2, 0x8000)
socket(0xa, 0x801, 0x100)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x8)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
r2 = prctl$auto_PR_SET_MM_ARG_END(0xc, 0x9, 0x0, 0x1, 0x4)
sendto$auto(r2, &(0x7f00000000c0), 0xff, 0x7fff, &(0x7f0000000100)=@ax25={0x3, @bcast, 0x1}, 0x7fff)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
socket(0x18, 0x2, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
socket(0x2b, 0x1, 0x1)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socket(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0)
write$auto(r7, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4)
write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000002c0), 0x0)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
executing program 1:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x4021000)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4)
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2b, 0x1, 0x0)
sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2404c040)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
connect$auto(0x3, 0x0, 0x55)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0x4)
select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x1, 0xd, 0x250, 0x100000001, 0x3, 0x2017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000001]}, 0x0, 0x0)
lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6)
executing program 0:
openat$auto_fops_blob_file(0xffffffffffffff9c, 0x0, 0xca981, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
adjtimex$auto(&(0x7f00000004c0)={0x7fffffff, 0x0, 0x7d, 0xfffffffffffffffd, 0xd4, 0x4, 0x4, 0x0, 0x1, 0x368e, 0x5, {0xc, 0x10000}, 0x5, 0xa, 0xfffffffffffffffd, 0xd, 0x0, 0x80000004, 0x10081, 0xffffffffffff628e, 0x4, 0x0, 0x800})
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
socket(0x28, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto(r0, &(0x7f00000001c0)='/dev/audio1\x00JR\xe7\xae\xd27M<f\xa7\x02\x8f\xcb],\xd3\x1d\x8c\x8bB\xc7\xfc\x90\xd1\x03h$\x98\xc4\xc2#\xc0{\xf2\xdf\x83\xa40\xa5?\x8e\x92\xf5\"\xa9q\x8d\xf9uR\x82\xbe.\x82OD.5\xc2\xcd\xa4\xd9@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\x1f\xc4\x03)\xbb\xa3\xb5\x10\'{\x97\x0e\xb3\xa1\xe10H\xd4\xefe\xac.f\x82Lk\xe5\xb3\x11AT6R@\xbb\x8c\xa4\xf2\xe8\xafo\x17\xb9\b<|tB!\xa3\xa5\n\b\x8cA;\xbc\xc7\x91\xeb\xc0\xc7\xeb$\xc0\xa6', 0xa3d9)
clock_adjtime$auto(0x4, &(0x7f00000000c0)={0xa91, 0x0, 0x10000, 0x2, 0x2, 0x9, 0x10000, 0x0, 0xb, 0x6, 0xcd4, {0x401, 0x9}, 0x9, 0x5, 0x8, 0x54f3, 0x0, 0x2, 0x8, 0x2, 0xfffffffffffffffe, 0xfffffffffffff9b4, 0x2})
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1f, 0x948b, 0x2, 0x15f4da0a, 0x3000000, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x6, 0x0)
connect$auto(0x3, 0x0, 0x55)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x28}, 0x1, 0x0, 0x0, 0x20040c04}, 0xc0804)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8044)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fedbdf250300000004000800100003800c00148008000100", @ANYRES32=r1, @ANYBLOB="12000100898771f1c19f1779048590822ad90000040002"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800)
executing program 3:
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x269c2, 0x90)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x29, 0x2, 0x88)
setsockopt$auto(r0, 0x11, 0xa, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x5e61)
openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/extended_iref\x00', 0x18b440, 0x0)
read$auto(r1, 0x0, 0x9)
ioctl$auto_USB_RAW_IOCTL_RUN(0xffffffffffffffff, 0x5501, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setresuid$auto(0x0, 0xffffffff, 0x9)
r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, r2)
sendmsg$auto_ETHTOOL_MSG_FEC_GET(r2, 0x0, 0x800)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="fa080000", @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d000000080004000000010030001a80080001008703000004000480040002001c000480180001800800060000000000040004000800060001000000", @ANYRESHEX=r0, @ANYRESHEX=r3], 0x7c}}, 0x4000800)
fchown$auto(0xffffffffffffffff, 0x0, 0x0)
socket(0xa, 0x5, 0x0)
executing program 0:
keyctl$auto_KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1)
syz_clone3(&(0x7f00000001c0)={0x281000, &(0x7f0000000000)=<r0=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x1a}, &(0x7f00000000c0)=""/124, 0x7c, &(0x7f0000000140)=""/55, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58)
getsockopt$auto(r0, 0x4, 0x5, &(0x7f0000000380)='\x00', &(0x7f00000003c0)=0x9f11)
mmap$auto(0x0, 0xf9, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x4, 0x0)
socket(0x2b, 0x1, 0x1)
setsockopt$auto(0x3, 0x8000000000000006, 0x25, 0x0, 0x7ffffc)
waitid$auto_P_ALL(0x0, r0, &(0x7f0000000240)={@_si_pad}, 0x6, &(0x7f00000002c0)={{0xff, 0xb}, {0x6, 0x5}, 0x7, 0x2, 0x7, 0x3, 0x8, 0x5, 0x8, 0x6, 0xd, 0x625369de, 0x8000, 0x1, 0xfff, 0xffffffffffffffff})
executing program 5:
mmap$auto(0x5, 0x2020009, 0x8, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000005600)='/proc/sys/dev/parport/default/timeslice\x00', 0x88281, 0x0) (async, rerun: 32)
write$auto(0x3, 0x0, 0xfdef) (async, rerun: 32)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) (async)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
read$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000240)=""/129, 0x81) (rerun: 32)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/device_info\x00', 0x8002, 0x0) (async, rerun: 32)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
fstat$auto(0x2, 0x0) (async)
sysfs$auto(0x2, 0x10000000000048, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae03, 0xffffffffffffffff) (async)
open(&(0x7f0000000800)='./file0\x00', 0x6a9183, 0x165) (async)
execve$auto(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async)
mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async)
mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
executing program 3:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x8200, 0x0)
pread64$auto(r0, 0x0, 0xa5, 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fsconfig$auto(r1, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = fcntl$getown(r0, 0x9)
sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84804022}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x290, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [@nested={0x38, 0xa7, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @pid=r3}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x46}, @typed={0x8, 0x3a, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x146, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xf0}, @nested={0x4, 0x11d}, @nested={0x4, 0x100}]}]}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xb1, 0xbb, "c19b944e692217bfdaf2f3e8fd37776f5c91c0d82dd65626ce31f2e737fa41d921c515c2a91a1e69cdc8ce2d7c4f35279e2d0fc96ca9284edc425169ea19c6145d2be85036610a4bf165ff9b0e953cb2e6f483e80bd4dafc720c3082a72881acbc58c48c4e64e185024edaaec3eba65cb5b90c3cbfb43f827d3c2a73881f8c3d88c171652bd49a0ac18f6ee513407f2e593fadcb0b5c8617f9e3184e1707cf83fb938e38edc3af7adbcecdf0c4"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff8}, @NL80211_ATTR_FILS_ERP_REALM={0x8b, 0xfa, "a09d18611e0b9cb4cb21dbf240da474ec3810e07e848fb5bf227839d6a54af8035df36934a658a4c7c69afa138e4f94e75a77f6282accd4fac18b148a5626bcadb49746bdafcf57ef725b948bbe5d7be4d879abc23fde41de1673522679eb7d3d41bb23362ce877d6fc81b8e86030e0e032583bdcf36391ff08887597f9ba55c8a3852c651a045"}, @NL80211_ATTR_NAN_FUNC={0xf8, 0xf0, 0x0, 0x1, [@nested={0xe8, 0x88, 0x0, 0x1, [@nested={0x4, 0x14c}, @nested={0x4, 0x2c}, @nested={0x4, 0x29}, @generic="b91fe5cfeb340394973d575fe5b110e8164a74a2f5333b139cf3df217186edfc7b54504ef3e367bea1aa96c8307002cb3b622d7cb30a4152ecf425788394f6f46755deaa9a96ea296fd90b88623a06c86849e2273f91eebafb7fd366d0d7733034fc6a7b3907fd0a7949dbc5526fa6ca917292cc5407a2c75d91e30b42e2dc2f58d60b78c9fc0fda73185ab6f471700293d55f8b129307ba803d213dc14e799e8873a9536d773d93e0374101b055080efb0d240007edb3655e5f4f103df51216274b96fb8515176d9f742c88f19b9a408d6ea378", @nested={0x4, 0x29}]}, @typed={0x4, 0xed}, @nested={0x8, 0x63, 0x0, 0x1, [@nested={0x4, 0x48}]}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040044)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
socket(0x2, 0x3, 0x100)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x20008000)
setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r1, 0x7f, 0x44, &(0x7f0000000100)='$%{^\xf4)\'){(@\'\x00', 0x18a6)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r2, 0x5607, r2)
executing program 3:
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0c/sub2/xrun_injection\x00', 0x282440, 0x0) (async, rerun: 32)
mlockall$auto(0x7) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
madvise$auto(0x0, 0x2000040080000004, 0xe) (async, rerun: 64)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
mmap$auto(0xfffffffffffffffe, 0x400, 0x4000000000de, 0xeb1, 0xffffffffffffffff, 0x3ff) (rerun: 32)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4)
r1 = socket(0xa, 0x1, 0x56) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) (async, rerun: 64)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r6 = getpgid(0x0)
kcmp$auto(r6, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) (async)
sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c0b0000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800f800", @ANYRES32=r5, @ANYBLOB="b500f7800c00a00005000000000000000e004200403a255b23272e2c2a00000008005600", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08c21c7653793d52cc94223f63000200ffad00000800c0000a01010108001e00640101005e0137802100068038206aba884903844ba449f1350bd8a72f35a1fc2c013b1ac5d43281ac0000006ea69873bfd49aa43ff8f5d8cb4aea0a65dd53f8ac6df9bfea02a327a90316bd4478bef68fdb226fb7b54adf9982692f317a96471ae8739e2e552a236862c7b34bbc77e16559b2b111d0f4bd2d7a6bd37f0b36c1842fe42aca9d7676a7623ec158494f55be81db5bbd995aa04f7f0053cd4c2337af3c2da3830b40c197a1f924167f899cae8cb47816c2188e1c07c33ee51ff4fbb42fc8bdb7abd8ea1a6472eb71faa6acbe470c9715fe0cd94e313a84e562ee1d5fdaa6fe4d637813e3970e53023d30fdecec61688e9b445efff2f65addebad320412513d807b78b019101a62f9c71accd26ef7cadeac1af394e5c0cdbffaffeed757ecdf3944e14c86cc434aa88e8ba4fe941610745d32ce58c7682ae449b7252d12180036800400078004007f800400db000800a600", @ANYRES32=r6, @ANYBLOB='\b\x00K\x00', @ANYRES32=0x0, @ANYBLOB="00000f0028800800a200", @ANYRES32=r0, @ANYBLOB="a78cb90008008800", @ANYRES32=r3, @ANYBLOB="00000004002b80c25faa73bf97721b2e7fe95143b1df4243d7a1b6348b90f3b218e0a0770aa4e1b489e623f5ff856b54ee388a6b8dadd4eb04a864cdf396473de29b75a83c23a8ce87bf44d70bf9971e4409565bc21af82f56b6d475070ce56758b3532cdf5ec33066243ecb9f67a02f473e4c11b433fa9117a2982c99e2e1e725d3000800b7006e626400f9fdc0c5945932bd7447f0aa76f34cd714f2627427203721a1a08598074811ffdead229c3054f96414552cf17d7bef033dc742dc994c0594fe8718a2adc408d8229e37c110a9d9766a3608007600", @ANYRES32=r5, @ANYBLOB="e7fed39ede5a371933e7fd1b87624b55242ce4d8eab04a041132fca87ae98fd6f3816f22b7375da30264a7fac13ac1b2f59c9532f047221377b5a8dd820d71d88349fcb2f489f09ba9b5b50d2ab37fe61d64ed2877e38d6d0000060096000400000008004200070000001400f9001ebf9b13f793f1fdfd9ad73771ccb3a6"], 0xb9c}, 0x1, 0x0, 0x0, 0x48080}, 0x20000010)
syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r2)
sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000009400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x20040000) (async)
semctl$auto(0x8, 0x806, 0x13, 0x46) (async)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB32(r8, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"])
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x1a3540, 0x0) (async)
ioctl$auto_USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000000080)=0x53)
ioctl$auto(r8, 0x4008550d, r8) (async)
socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
executing program 5:
mmap$auto(0x800000000000000, 0x4020009, 0x6, 0xeb1, 0x401, 0x8005)
sysfs$auto(0x2, 0x8, 0x0)
fsopen$auto(0x0, 0x1)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0)
read$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000080)=""/4096, 0x1000)
read$auto(r0, &(0x7f0000001200)='\xefI5\x1d\xc4~\xd0>\xd2;\xbcj\xce\x18+\x9blE\x18\xa1>V\n\xa4\x90cgy\x98O\xf4\x7f\xe0\xbf\xbb\x9f\xfc\xfb\x870l0\xcf\xb4\rx\xcb\bpg<ez\x87\xe6\xd9\x8dq5 \xf4J\xe8\xd6I\xaf\x04\xb8\xf1\x8a\xa8(\x1e\xc8\x8a\x05\x9b0\xa4\x06\xf9\x8f\xde\x16!\x9b\xd2\xb1\x81\x97\\\x8a,@\x02.p\xf6\xbe\xeaG1C\xd1~\xee\v\x19\x1c\xdd\n\xdc\x83\xb5\xb1\x8b\xc5U\xee\x92\x9e8.\x05R\x90\xab\x8c\x18.*YnZ\xb1\xe2\xec\xe6\xf2\x8d\x03A~\xa8_uk$\xce\xbe?\xd5\x11\r\xadQ\xdb\xc3w\x04r\x84\x92\x1b\xb4\x81*}\xc6\x1ev+\xb7\xb3X\x034\xcf\xce\x06Y\xef\x1a,\xc9\x88\x1d\xcd\x9b\xba\xf7\xca\x99\xe8\t\xbf_\xf2{\x9f\xb8\xe9\xf9\x05\xc8\xd1\x8e\"\xaa\xc0\x9d$\xfaE/\xf75\xfb\xe6\xbb\xe7\xdc', 0x20000074d)
clone3$auto(0xfffffffffffffffe, 0x101)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/local_cpus\x00', 0x800, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x65, 0x2, 0xffffffffffffffff, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
write$auto(0x3, 0x0, 0xfffffdef)
mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0)
shutdown$auto(0x200000003, 0x2)
sysfs$auto(0x2, 0x1b, 0x0)
r2 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/1:0:0:0\x00', 0x0, 0x0)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0)
openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9b)
ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0)
mmap$auto(0x0, 0x400008, 0xe1, 0x9b7f, r2, 0x7ffc)
executing program 0:
openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x88041, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0x450100, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30100000", @ANYBLOB="1b0026bd7400fddbdf25030000007eff08000c10038008100680040001807dcbc67b75953555a721fc8f1c97ffaa3f4c869e4079611b8eb1879255cc9f307af983cecd798bcc562d8f41c5a2616a12c9c83716cd350ce7b6abf119f6c018f0c196bc4d1387d547a48838f7ed9edf143ca3eb3419d53ed5ce6e09b2ea5ce25b482cf09b27a7c67b25a716118a614862385441308cabfcd4ec90a84bc3523b89cd21aa8a339a12a81132a5e5626f69d5443f67d568a682cf83faa52a6b2f691f9ad7524d808b03c925bfa6003eea202187ec4a1cd9288c086f842f44119462c456476022897dbe2cb5a048a42ed851b85a2ffbb3a998a661ceade91ee3d21f2bdb723f43ca7e29170c569f13f074b6937b1c6889ed57f5c4a6bd26167f68f4e94da43879b52cebf19fe72b1c315422867321d113445a8051150abbd3bee8f2b4113259223becfa71ae0cc0e0d4046a1e15303a3c6f7f6b098c15773cddea620cfef8409c40edb8fbc78bcf55aba946b89972a65fdaf0e822ed0a57adaa88e9523f9e57f0582fab60ffdc90bca72551499b9dbced9c21de053600aada4a6cb46059d1252658986ae37804cb3ee60866e113865b09bf50e6a51da29d8fba90b6e370ebd26cf60331127ef340a5dc70f25fed41f6f44740f7590b75b2dc2b275f5c4d17e5d24472c2313402bd6fc65d30361d1fe0ba52e072b3939a75f998a21b6e6f6860b70c90d1c87c0fe6ad5f7c94e6964fe281580614c3641078c666a0f8de5e774d047cfabc3fae9b2a2468be92a70e1b5213930c3eb8372db9855b4537736eda6085217bd907368d73d1c77f941ee2b6bcdfca8acfa43a80a48010d215b81db050eda0a668a2890b486dd288d031d23433b0090068477f4fae7dc0f926117f15e73c943097091f7d26eead54c836d8deded15173be5de892325c5cd8a04bcc696a367868780c9578c64d3bb57f7d2891e8f25b6480218f6a1ec1fefef82777d0d36f9194988a2e569a8b2e9aa4f3865c20eb4235d8ff8087a62b01bfcb3a8bdedd1e9b0ebc1c0121863d3d748a97b18e47727d4147afc1dc4d81c101e7fe57c7a91354648884e53980d76802775fadd73ec85d8e6054c2223951dcc99c2ebee89c620d5cd039830b11b6b087c27fcba993262d08032bc4dee03cb9cb83e9ee6f3ddb905239f3597fd1e85eacfe91a26a8d091dc7dca7b520ab57a3e6ab6f9022f9865df4a1dbfada9494f5c66690d4853a3e45966b0f60af21c7d6c7711ed60bade9ddf5f2082eab6ce0d2e27f9a3350282c971582ac14db51e5d79f09d968320019bd4ce56c69a8730760c7f6b57b07a5dab5e37204210cb5a3389dc17e75692d28df136048ac5ebfc96a45b6929a1e30ae5f79b785958504451417ece491de4d781aed96d8db11444d50530867d748cb7a407a13f21cacfbd1aaf1d4e469d6b4a00be824c0b48d1b348928e3fb84b2d168633a0aa62783c93a671ee5e74b7f4335cb8fa1de4803c816c1ce288a70b4dde4a204b6dbaf36e73cde10e40f97b07bd798f039372e814da69aea01a008ce298fbc0305cc8ece786a8a791a6efa03229a9aef8f59b69bcd0bd437cd41be73a4528d72b806eb72a1fb34eda5c507218ab63801d519aa8bd48a86686e8039281f41f61bae2936e831c7260956ee7494d549a7701db93987ac18656cbeec8f2511cba48cf020ec0d2983d9767f1366cbf546801e86fb106979882c09cf94b2a9193729485be0975adc80c3915735a7815bc5dff683d703bb74b19adc4ec4c26fb09fecd94a7e6a0e6ea026f19ed5d0427f43e2b886a96be2fa3786296ffd7551c810058b09b32ad24f1932824f5bcc582262fdfbc539fdc20ef7d50c116c446b6b856ba48e2266ee2ecad58d09b4684ed378f25e21b8fc357325b069a8959dde23f818e0a0fb147b020fa882e85868b2e27df44588eb050ea6e06d01d9c84538cb8028fa44527bf0edaad470668b2a5bd5b1af5dac3b12fc295282f66c716e9b48b8bf3b2d9af78ac88d5509515def7704b0932f0e07a907d08f73249bf859029df3118317d2d9e5de50ff10db4f0e89ab6fbf4668ebfb80a11e4a3f075499a0093bdceb2de7ab3231504f9e28a5a06093f72c1b508a8c043aae63432b8a86d0aef2db61a297b254a14c51a4b6b7f6c2896eebd145b427de15cf671ca71add761c352655bda7b5218633d548a7e466a37aa82366d3b512ea9bba5ee915e979fc0681dcb4815abe0108230fc1f0a34b91e48673017d6a33aa3c7f1ddef5e0fc34c813f306513d65f8071e17854d116b527f2ee03da054892fb08c378b7d6d0b391a45b7ffecb06ece490dff53e92547896e970fc9d98c554306af79fdfad740073f78b665385b72f938086266060321e973e1a8f9735b1c4531637856a95a2c1807c1b399fb9dd621725b098e9395fb7b9c37e2a0dcce6ea7f1b388cc519ac2b3dc39e1774d535e9d7bd60bef040f762457423cb205d87380bcb7b8be1e61cebfa28912da458673bdcb61b8b932a01e5c195562f81bdc1e5f6c06b80f9046dc088e2efbdbf231c15061ee45e7300de5d3bc9d53ad51cd112fa9b23ca4dc5a8e80daa3f07f466b10ee6a"], 0x1030}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4008, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r2 = mq_open$auto(0x0, 0xde8, 0xb, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/virt_wifi0/interval_probe_time_ms\x00', 0x382, 0x0)
sendfile$auto(r3, r3, 0x0, 0x2)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r5 = socket(0x2, 0x1, 0x106)
getsockopt$auto(r5, 0x3, 0x21, 0x0, 0x0)
ioctl$auto(r4, 0x4b66, 0x1)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x800, 0x0)
r6 = fanotify_init$auto(0x1f53, 0x2000000000002)
fanotify_mark$auto(r6, 0x1, 0x6d, r6, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x5, "feb2d1be631a0b383cd600975a2e541e4593fa295db4ec6662a1b7fa608cc76d", @raw=0xc})
executing program 5:
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000)
r0 = io_uring_setup$auto(0x1, 0x0)
r1 = bpf$auto(0x5, 0x0, 0x102)
mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000)
ptrace$auto(0x10, 0x0, 0x400, 0x2)
r2 = fanotify_init$auto(0x7a, 0x80000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYBLOB="06acae4b11b09ba5170e697d45a9a1f1dc31e045e858a3665aae3abdc209d64fca4cb4ac021f5782732da47d5e00a6b5702083fd6ffcbb0c21bbc178dd61ee013fc5e5d6090b66cb22e23cb2f1259d5e34ced7c1ea2c3fb54e8be8c12f46d3c9785a540b3534aea149127ae78da3ad1f1491ca24044ed1537df854ec919fa6a080936f1a4909cda3ec1555a60d2616ef3b2662bb81b516796c17c732117c211d1daf", @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES16=r0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES8=r1], 0x1ac}}, 0x40000)
r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/oom_adj\x00', 0x14a502, 0x0)
writev$auto(r3, 0x0, 0x5)
read$auto_uinput_fops_uinput(r1, &(0x7f0000000000)=""/34, 0x22)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
unshare$auto(0x2b8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
splice$auto(0x4, 0x0, r4, 0x0, 0x1000, 0xf)
fcntl$auto(r4, 0x408, 0xffffffff80000000)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
r1 = socket(0xa, 0x801, 0x84)
r2 = socket(0xa, 0x1, 0x84)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r3, 0x0, 0xe)
getsockopt$auto(r2, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r4 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r5=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r4, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000000c0)=""/33, 0x18)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy6\x00', 0x2, 0x0)
ioctl$auto(r1, 0x5602, 0xffffffffffffffff)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20a675f3", @ANYRESOCT=r3, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000c0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4001)
socket(0x10, 0x2, 0xc)
executing program 5:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
mmap$auto(0xfffffffffffffff9, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0x2, 0x8)
openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x841, 0x0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
write$auto(r0, 0x0, 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000000c0), r1)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, "a7f67c10f9f2f68f69b563763527bdf664ecc5f554b680e2d9d06175dd2f6d06a85e438f9f8f8cb41db663f236f483ab3c944ad5cd5ed9fcd29ee7d1100c8e1360eeb508cbe1422f4e85fa74e1830b94a763fa26bd5fe09df5c611ce642cd9736ea4cb66533d8ebf4fd6cc73f64d68918c1eb8c3ed6661b6f621c66634dc0a09bb87eecc20b7729899c34ced93051d0dfc9870323fa01f3563653ce5"}, 0xb0}, 0x1, 0x0, 0x0, 0x840}, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto-mmap$auto-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mousedev_fops_mousedev-sendmmsg$auto-socket$nl_generic-sendmsg$auto_HWSIM_CMD_NEW_RADIO-sendmsg$auto_NL80211_CMD_GET_REG-socket
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
r1 = socket(0xa, 0x801, 0x84)
r2 = socket(0xa, 0x1, 0x84)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r3, 0x0, 0xe)
getsockopt$auto(r2, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r4 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r5=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r4, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000000c0)=""/33, 0x18)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy6\x00', 0x2, 0x0)
ioctl$auto(r1, 0x5602, 0xffffffffffffffff)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20a675f3", @ANYRESOCT=r3, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000c0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4001)
socket(0x10, 0x2, 0xc)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
single: successfully extracted reproducer
found reproducer with 29 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto-mmap$auto-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mousedev_fops_mousedev-sendmmsg$auto-socket$nl_generic-sendmsg$auto_HWSIM_CMD_NEW_RADIO-sendmsg$auto_NL80211_CMD_GET_REG
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
r1 = socket(0xa, 0x801, 0x84)
r2 = socket(0xa, 0x1, 0x84)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r3, 0x0, 0xe)
getsockopt$auto(r2, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r4 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r5=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r4, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000000c0)=""/33, 0x18)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy6\x00', 0x2, 0x0)
ioctl$auto(r1, 0x5602, 0xffffffffffffffff)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20a675f3", @ANYRESOCT=r3, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000c0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4001)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto-mmap$auto-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mousedev_fops_mousedev-sendmmsg$auto-socket$nl_generic-sendmsg$auto_HWSIM_CMD_NEW_RADIO
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
r1 = socket(0xa, 0x801, 0x84)
r2 = socket(0xa, 0x1, 0x84)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r3, 0x0, 0xe)
getsockopt$auto(r2, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r4 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r5=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r4, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000000c0)=""/33, 0x18)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy6\x00', 0x2, 0x0)
ioctl$auto(r1, 0x5602, 0xffffffffffffffff)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20a675f3", @ANYRESOCT=r3, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000c0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto-mmap$auto-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mousedev_fops_mousedev-sendmmsg$auto-socket$nl_generic
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
r1 = socket(0xa, 0x801, 0x84)
r2 = socket(0xa, 0x1, 0x84)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r3, 0x0, 0xe)
getsockopt$auto(r2, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r4 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r5=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r4, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000000c0)=""/33, 0x18)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy6\x00', 0x2, 0x0)
ioctl$auto(r1, 0x5602, 0xffffffffffffffff)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto-mmap$auto-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mousedev_fops_mousedev-sendmmsg$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
r1 = socket(0xa, 0x801, 0x84)
r2 = socket(0xa, 0x1, 0x84)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r3, 0x0, 0xe)
getsockopt$auto(r2, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r4 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r5=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r4, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000000c0)=""/33, 0x18)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy6\x00', 0x2, 0x0)
ioctl$auto(r1, 0x5602, 0xffffffffffffffff)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto-mmap$auto-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mousedev_fops_mousedev
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
r1 = socket(0xa, 0x801, 0x84)
r2 = socket(0xa, 0x1, 0x84)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r3, 0x0, 0xe)
getsockopt$auto(r2, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r4 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r5=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r4, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000000c0)=""/33, 0x18)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy6\x00', 0x2, 0x0)
ioctl$auto(r1, 0x5602, 0xffffffffffffffff)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto-mmap$auto-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io-ioctl$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
r1 = socket(0xa, 0x801, 0x84)
r2 = socket(0xa, 0x1, 0x84)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r3, 0x0, 0xe)
getsockopt$auto(r2, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r4 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r5=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r4, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000000c0)=""/33, 0x18)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy6\x00', 0x2, 0x0)
ioctl$auto(r1, 0x5602, 0xffffffffffffffff)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto-mmap$auto-read$auto_v4l2_fops_v4l2_dev-close_range$auto-openat$auto_tty_fops_tty_io
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
socket(0xa, 0x801, 0x84)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r3 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r4=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r3, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f00000000c0)=""/33, 0x18)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy6\x00', 0x2, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto-mmap$auto-read$auto_v4l2_fops_v4l2_dev-close_range$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
socket(0xa, 0x801, 0x84)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r3 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r4=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r3, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f00000000c0)=""/33, 0x18)
close_range$auto(0x2, 0x8, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto-mmap$auto-read$auto_v4l2_fops_v4l2_dev
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
socket(0xa, 0x801, 0x84)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r3 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r4=>0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r3, 0x8000)
read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f00000000c0)=""/33, 0x18)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto-mmap$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
socket(0xa, 0x801, 0x84)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r3 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r3, 0x8000)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev-bpf$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
socket(0xa, 0x801, 0x84)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto-openat$auto_v4l2_fops_v4l2_dev
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
socket(0xa, 0x801, 0x84)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto-getsockopt$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
socket(0xa, 0x801, 0x84)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r2, 0x0, 0xe)
getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x1, 0x84)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_fb_fops_fb_chrdev
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x1, 0x84)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x2000, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x1, 0x84)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-socket-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x1, 0x84)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
socket(0xa, 0x801, 0x84)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-map_shadow_stack$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
map_shadow_stack$auto(0x2, 0x3, 0x1)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-ioperm$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
ioperm$auto(0x7, 0x6, 0xffffffffffff4064)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-ioctl$auto_XFS_IOC_ALLOCSP64-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-msgctl$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f00000001c0)={{0x4, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x6, 0xf000}, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x10, 0x1ff, 0xfffb, 0x1, @raw=0x2d85e56c, @inferred=0xffffffffffffffff})
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-syz_genetlink_get_family_id$auto_nl80211-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0x28, 0x807, 0x9a)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
socket(0x28, 0x807, 0x9a)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-madvise$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x7e, 0x6)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
reproducing took 2h17m35.061755041s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff88807f505000 by task syz.0.616/6674

CPU: 1 UID: 0 PID: 6674 Comm: syz.0.616 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xd9/0x110 mm/kasan/report.c:634
 force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:398
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f350cb8d169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe78458258 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f350cda5fa0 RCX: 00007f350cb8d169
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f350cc0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f350cda5fa0 R14: 00007f350cda5fa0 R15: 0000000000000003
 </TASK>

Allocated by task 5944:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:179
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x735/0x1c40 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5944:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x2c4/0x4d0 mm/slub.c:4757
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3ff/0xb70 fs/file_table.c:464
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x24ed/0x26c0 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88807f505000
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff88807f505000, ffff88807f505400)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f500
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000003 ffffea0001fd4001 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5635, tgid 5635 (dhcpcd), ts 43887284726, free_ts 43863757794
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4739
 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xc5d/0x1720 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_node_noprof+0x2f0/0x510 mm/slub.c:4300
 __kvmalloc_node_noprof+0xad/0x1a0 mm/util.c:662
 kvmalloc_array_node_noprof include/linux/slab.h:1063 [inline]
 bpf_int_jit_compile+0x7f4/0x1830 arch/x86/net/bpf_jit_comp.c:3491
 bpf_prog_select_runtime+0x32a/0x4c0 kernel/bpf/core.c:2428
 bpf_migrate_filter net/core/filter.c:1307 [inline]
 bpf_prepare_filter+0xd3d/0x1100 net/core/filter.c:1355
 bpf_prog_create_from_user+0x1e4/0x2d0 net/core/filter.c:1449
 seccomp_prepare_filter kernel/seccomp.c:693 [inline]
 seccomp_prepare_user_filter kernel/seccomp.c:730 [inline]
 seccomp_set_mode_filter kernel/seccomp.c:1965 [inline]
 do_seccomp+0x7b6/0x2640 kernel/seccomp.c:2085
 prctl_set_seccomp+0x4b/0x70 kernel/seccomp.c:2138
 __do_sys_prctl+0xf42/0x2450 kernel/sys.c:2551
page last free pid 5634 tgid 5634 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4171
 getname_flags.part.0+0x4c/0x550 fs/namei.c:139
 getname_flags include/linux/audit.h:322 [inline]
 getname+0x8d/0xe0 fs/namei.c:223
 getname_maybe_null include/linux/fs.h:2860 [inline]
 vfs_fstatat+0xdf/0xf0 fs/stat.c:363
 __do_sys_newfstatat+0xa2/0x130 fs/stat.c:532
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88807f504f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88807f504f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88807f505000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff88807f505080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88807f505100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff88807f505000 by task syz.0.616/6674

CPU: 1 UID: 0 PID: 6674 Comm: syz.0.616 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xd9/0x110 mm/kasan/report.c:634
 force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:398
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f350cb8d169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe78458258 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f350cda5fa0 RCX: 00007f350cb8d169
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f350cc0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f350cda5fa0 R14: 00007f350cda5fa0 R15: 0000000000000003
 </TASK>

Allocated by task 5944:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:179
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x735/0x1c40 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5944:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x2c4/0x4d0 mm/slub.c:4757
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3ff/0xb70 fs/file_table.c:464
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x24ed/0x26c0 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88807f505000
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff88807f505000, ffff88807f505400)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f500
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000003 ffffea0001fd4001 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5635, tgid 5635 (dhcpcd), ts 43887284726, free_ts 43863757794
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4739
 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xc5d/0x1720 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_node_noprof+0x2f0/0x510 mm/slub.c:4300
 __kvmalloc_node_noprof+0xad/0x1a0 mm/util.c:662
 kvmalloc_array_node_noprof include/linux/slab.h:1063 [inline]
 bpf_int_jit_compile+0x7f4/0x1830 arch/x86/net/bpf_jit_comp.c:3491
 bpf_prog_select_runtime+0x32a/0x4c0 kernel/bpf/core.c:2428
 bpf_migrate_filter net/core/filter.c:1307 [inline]
 bpf_prepare_filter+0xd3d/0x1100 net/core/filter.c:1355
 bpf_prog_create_from_user+0x1e4/0x2d0 net/core/filter.c:1449
 seccomp_prepare_filter kernel/seccomp.c:693 [inline]
 seccomp_prepare_user_filter kernel/seccomp.c:730 [inline]
 seccomp_set_mode_filter kernel/seccomp.c:1965 [inline]
 do_seccomp+0x7b6/0x2640 kernel/seccomp.c:2085
 prctl_set_seccomp+0x4b/0x70 kernel/seccomp.c:2138
 __do_sys_prctl+0xf42/0x2450 kernel/sys.c:2551
page last free pid 5634 tgid 5634 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4171
 getname_flags.part.0+0x4c/0x550 fs/namei.c:139
 getname_flags include/linux/audit.h:322 [inline]
 getname+0x8d/0xe0 fs/namei.c:223
 getname_maybe_null include/linux/fs.h:2860 [inline]
 vfs_fstatat+0xdf/0xf0 fs/stat.c:363
 __do_sys_newfstatat+0xa2/0x130 fs/stat.c:532
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88807f504f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88807f504f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88807f505000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff88807f505080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88807f505100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================