Extracting prog: 2h51m20.378576444s Minimizing prog: 11m13.10377963s Simplifying prog options: 7m23.534364777s Extracting C: 2m11.83557866s Simplifying C: 0s extracting reproducer from 59 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_genetlink_get_family_id$auto_nlctrl-mmap$auto-close_range$auto-close_range$auto-mmap$auto-socketpair$auto-socket-getsockopt$auto-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-mmap$auto-write$auto-write$auto-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-sendmsg$auto_CTRL_CMD_GETPOLICY-socket-mmap$auto-mlockall$auto-mmap$auto-mmap$auto-setsockopt$auto-openat$auto_proc_single_file_operations_base-openat$auto_proc_single_file_operations_base-openat$auto_proc_oom_score_adj_operations_base-openat$auto_proc_oom_score_adj_operations_base-readv$auto-readv$auto-ioperm$auto-open_tree$auto-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-close_range$auto detailed listing: executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 59 programs with base timeout 30s testing program (duration=44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 12, 30, 12, 24, 14, 14, 21, 27, 12, 8, 30, 8, 8, 12, 22, 21, 30, 29, 30, 30, 21, 4, 1, 4, 26, 30, 30, 30, 19, 30, 10, 3, 22, 22, 4, 6, 30, 13, 1, 19, 27, 2, 30, 30, 13, 16, 3, 7, 30, 30, 10, 4, 9, 13, 24, 12, 5, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000f0ffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) mlockall$auto(0x7) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000fc000000000000c0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vimc.0/video4linux/video4/name\x00', 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x3}, 0x20000007}, 0x3, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x81}, 0x1, 0x0, 0x0, 0x8) (async) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mlock$auto(0x1000, 0x6) (async) mlockall$auto(0x800000000000005) (async) pselect6$auto(0x8000, &(0x7f0000000080)={[0x800, 0x3, 0xb, 0xb9, 0x7, 0x7, 0x28, 0x4, 0x100, 0x9, 0x3, 0xffffffffffff6ee4, 0x80, 0x47, 0x3, 0x40]}, &(0x7f0000000640)={[0xfffffffffffffffc, 0x8, 0x101, 0x4, 0xb, 0x0, 0x3f8b, 0xc, 0x2, 0x2, 0x7, 0x7f, 0x0, 0x800, 0x7fffffffffffffff, 0x6]}, &(0x7f00000006c0)={[0x5d58, 0x7, 0xa5, 0x7f, 0xffffffffffffff63, 0x6, 0xfffffffffffffffa, 0x2001, 0x4, 0x7, 0x6, 0x8000, 0xc, 0x101, 0x4, 0x9]}, &(0x7f0000000200)={0x6, 0xac}, &(0x7f0000000740)="84564c8c26b8144fd4d3e1ecb7942bbed10faff85baff45164fe66cd970aa99ce6e0b82e3f049231ba73698898fcd2a65389893a8ce8b267d7aa4f5258122e0b18ac67ffde635cac8164af89d15c5b3222a32a0e03b46c0b57abb954eb9a7ba2e851d345c9e7319f0334e91d93a1a639c9a157cbd953f98a055c6326e49c3691aa27e73928cfc94b6ca85e02c62ac8fc9925f5c6481c62e36169492d6741aa7e32fbc03e9391f9b9b275e7e9551b938d5b80bafbdc1dd37bfb2772dbc29cf87b41fa609e535de02906ee62739ad3f141062547") (async) madvise$auto(0x0, 0x200007, 0x19) (async) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) madvise$auto(0xb, 0x0, 0x3) (async) madvise$auto(0x7, 0x4, 0x2) (async) r2 = socket(0xa, 0x5, 0x13c) getsockopt$auto(r2, 0x20000028, 0x6, 0x0, 0x0) msync$auto(0x7, 0xfe, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x7) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f009effffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mbind$auto(0x10, 0x0, 0x80, &(0x7f0000000040)=0x4, 0x2be4, 0x1000) executing program 0: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) executing program 32: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) executing program 3: mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) writev$auto(r1, &(0x7f0000000280)={0x0, 0x45}, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="080061000100000008006200fcff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_setup$auto(0x59, 0x0) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRES8=r4, @ANYRES32], 0x18}}, 0x80) executing program 3: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/class\x00', 0x800, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x5, 0x0) msgctl$auto(0x26, 0x400, 0x0) rseq$auto(0x0, 0xfffffff4, 0x0, 0x7) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/mtd\x00', 0x80000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r0, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) write$auto_console_fops_tty_io(r1, &(0x7f0000000040)="0152f1ccbaf0a250747d8adb", 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) setsockopt$auto(0x1, 0x1, 0x46, &(0x7f0000000000)='\x00', 0xbb) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_NVRAM_INIT(0xffffffffffffffff, 0x7040, 0x0) socket(0x21, 0x2, 0xa) select$auto(0xb, &(0x7f00000000c0)={[0x40, 0xfffffffffffffffb, 0x0, 0x3, 0xffffffffffff4fc9, 0x9, 0x6, 0x0, 0x3b73, 0x5, 0x7, 0x8, 0x10001, 0x2, 0x6, 0xade]}, &(0x7f00000001c0)={[0xfffffffffffffff9, 0x3, 0x100, 0x51b, 0xb, 0x0, 0xc, 0x2, 0x31, 0x9, 0xff, 0x1, 0xb, 0x4, 0x101, 0x5]}, &(0x7f0000000240)={[0x3, 0x3ff, 0x70f, 0x200, 0x913, 0x9, 0x5, 0x8000000000000001, 0x77, 0x7, 0x7ff, 0x3e95, 0x6, 0x4, 0x6, 0x10]}, &(0x7f0000000140)={0x101, 0x9}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x5608, r3) executing program 3: mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8040) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1a) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r1, 0x0, 0x20000000001, 0x7fff) executing program 3: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) tgkill$auto(0x0, 0x1, 0x1) mkdir$auto(0x0, 0x8) socket(0x22, 0x2, 0x7) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r0, 0x5408, 0x0) executing program 3: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x18, 0xa, 0x1) r1 = socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) quotactl_fd$auto(r4, 0x4, 0xffffffffffffffff, 0x0) shmctl$auto_SHM_LOCK(0x10001, 0xb, &(0x7f0000000440)={{0xfffffff7, 0xffffffffffffffff, 0x0, 0x1, 0x7ca2, 0x3, 0x6}, 0x4, 0x1, 0xb7, 0x8, @inferred=0xffffffffffffffff, @inferred, 0x9, 0x0, &(0x7f0000000340)="c00f87773c44b8b6cbb6c50dd42957f448855f3876a33d06df799f0536f433e46520f1c8fa1a9f1546f6f356e75612bdd0353e293c24a990cd9e716aa5f0e9f3", &(0x7f0000000380)="a1937b45e771290c616e3c402dec57ecca600893cf1f4849977d9fae8284674b03acc3f1d5c386d6b14792ee9eab958e39a3e504a8bb2420159cc381ddc6213b96c769f3a07b33e0aaa522b5237af57f4cf89209654b44caf89ab73dfc865e011db686e789993baf8cf436ebd8cb50062131503109c72569d5d2f88599716c595a15b89d93a6398b689fc755dd5e0b5b0d57cfc128270d18ceaf45b3c306ed35d08e3a3f1365033849594b705b926f5fdb7de37d5ee96165"}) sendmsg$auto_IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000001900)={0x1680, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x145e, 0x3, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @pid}, @generic="8b8bd25fece342c432878ac66463fec7b55c680b601bb7b3aa9a775e34f77decf4c1828704441f1df271bf59112a60ff2324e639ae5ed4b94d6d0e35b882404c8d36804d45bb6bd89bfcd043d1fe471d3ec57e6d54655478aec001113799d408f8468b02bc30e5077718f6916e9c6d4404a40e1809eca74f0161ef843ecc6a4b46e6", @nested={0xea, 0x144, 0x0, 0x1, [@nested={0x4, 0x47}, @nested={0x4, 0xdb}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0xda27}, @nested={0x4, 0x128}, @typed={0x8, 0x14, 0x0, 0x0, @fd=r4}, @generic="6ca420c5ae223ead8f4be36f25b2c0718b444b98088dce7df68e3e81808a506e59c51d3e74f18bf91c09b351155a8b6c859bd07765e18122c19746bcde429cf675ef057aca852ade921f813313b9e655d80624c9af129345631a22428badb0a820c3286eeef1dad5ae5eb66e0480dd92fb20a5d888cbc6b720fbd70fd4c1d2a5e4fe7e7bff704dc196ee2b449cf44f2fa08138685e3078a116d23700b4ae7072c5a558cab708bf8f039756cce3911f8c5b841ef4669ce15834c1a77140cb71fc3891", @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="9a49a06d3148f8282ebdd146563bc9dac60735ebfb88cfd3e4644ee7bd9d26dad648609efce412fdab4c91d667a99dad97610432e95dd94180f98870b3761568aa2604cbeca749a29ff697c85c433d307a4a81afd5dc72c76df98dff24fa5d2e3470d9089b14b56d64441170b80d2c15a248e193d3b9d62abacea7bee0d55ea5afe2067488dabedcee7fb4ebdd33df09aa214cfba238227a93449f76b5361c814c20e24d3c1ab754aee022d6209cfad353f6b3b41de45ad71b4ce70008b83b3896df650fe577acfb17dfd27cf5aa015db38ca943655b25c820c3d841bce9cbdd462175feca491d8469b274a8af823e743126e5e7831f5abea22ba1e4856719bf1c21107e6c5d95ef61c3fb0b61216bee2a2a4750f93f05a9a04fdce875627b0487b66b78903103a0a3d6e0f329c9cdcc8536da8ce096cb7ade15947868b1b7526a0ed41b4cf6b16172be072b7cbe301a2fd309e5077217abc65877ddea7549466b6a388946741c01823c1c6c1307bdab8c696a86ed1c0a0189dcee8b82fccb745e510c643566fd1420d4901463019a0dc8ed9096c06b49e38eaef13f3028cce796799f438ae0b9a304e3b2f93bd3749173d819fe56ef6bcdae394ca771f11360b4d419754b64a1381ab8425def0e3206bdc1bdf72f66abc0b5fd35ab821a74b07046d10d5e879db175d06cf905e458b9cf21f6245d81b82104474470c9545ac63ff7dd05e35b2e2e7f75d185e204e219306ae2a76d98a232e3b0f29b8c9989c91fa3cc5d223140b95810c1a18dce2c320d46456f10e6fee631c2623b7847bd3468668e0f4e88070c464f11cd096bc2d8ab73ae77c700691222cf819bf9e8dccb64d0413b2dff9b4669979fce18b350104ea155331115470065d023da0a3ae294f4ed07676bff19b64d1ab355341faa62d66383f6c10fa77e0da945448a79694433ccb97c3e0a0ee9da26774e836d5846311728741ffda7269d92e2d7f39901a9014ce0b5130c5dd011c0aa05b59e06b5a89668ed2e228e5c06c27723324eb3e1e9c43545d1ed43994069e912df62231fd1bc427345810230f61447222f2166a5d9b16e333e15d56601261d650cc327aebdf3acfbea3d334a7b6775da3e1e3c79f99579c81f1993b911b62ce8468df73d55c8e731b948f9607d30517e8b58ab7353824510b92d6a6799a66b11beb6bcee5a4d4e122ea946aa38e7349735232bdff9bcf21ad45df0cad61edae2bc64d706f6ab203a7b33a93b964680153193b7d7c6ba1ae66515b6ead746c44da3d70667cbce7ae8fe367af8cbe2921b07eb721471aa7ecfed7370193d15d4c102bb9499183db2c0ef55b5d542510361c4ccb4c4b16aa16fe93cfe2a63b9fef6dfb1458e126bd3cdd21d0de6adff4b2c0181126506b5fa9e532c36ae3096d6db24cd5b7bcf7a5bf5b11bd1d24831a91a3aab49b99870ffcd54fe240713a80d83f5a4b2d97df3b0c522aae284a04ece8e561f24dc83d668f75f8c754d03bdc465e87125fa3bb68ca82ecada48b64762af02bb3e678427d545b957f96e31ea2a5662e4127a954aa6a291714f6faedd173465197dfce63853316d5dd8c51f096d179b183d5c49dc645fb2768fd37bc9ba677c462df7aac309436cbbed014c58e70ee35ec5c41e0c292acd63fce7ad39813d94610c6fce5addc9700543c048ddb09c87cac31d881f2146d0568593e9beb0cdaade87f86a5978dfc08a9c1e6de2201b1414dc0265079db385303d63fb86940830c146397c1ad33ecdecd45b0160557f4babe4e9c88aabbcaefbab445875db60548e128e4888f799ffc005abf8bf7f2c8893f27bd1c1e51fcafb25c199f680011df64db3265ea9c3d17f7af3454a53842c5dd5cc72ebc4971aede87c0f7ae0f7b39c520fbe71fc5e9672631ab2a059411126db1024c69a1bc6bb87ef83790c5978c989ec2c047de5b767d85196cc4324f88dc73bef92333e6ea0a8532d94e4ab35d89136f1c3a483794630a18aa7b100f5738383c091f5c28b651c6a329ed673678ed11947631ce35838ca958e184b40f4515067bd1c6c0c72b6b07ba87c74e5c0b2a9bdda7a3af6a3c0215cb1c4a06c3282e57da38a94f41369c63364edf751aecceba3bc7fed02c93b1b14a9c0d437e037291108f603d17548e4a03e947c5c6bbdc05593475a982f1e15e8592c37dd1be8272bcbfb48e6efb59647fdfb2043f93c58a4e67331ce5bc825887b97ed60b36285601ff92c7ce0df6628f2907655053fc2dc826d8a17c4519c1913e55505c50f1822891a67ae7a6844ac4b5bba94ed5bdf74812494ee19ebc39b9891fc01fd2aa306e0dcc9a0909aec78a0645a9a431c694a12588a93cae4eeab10f2facc1d5bd2cded7e6cd34e548ee7e8ec56b4bc33db07aa96d7ae1985d44d545cf5395779096763ee06ae54a8a77972a64cb159724d369f114dd96a4a7ccf8515930ffefd0ff3993edaed6d32949d256c2b1cb35f798f41acce00af006b128b4cfbdaaf74900aafe6aaba66c523c94e2bfd6899eca6f86be6c073d7b8082c7dee3003262edb4875b58d2aefb5b2fea609fae2bca2e0918444db09718bd4032a1d173557d63fbdab8327b6ff992c210f0fa01e21f99b017bf338f968b53b67894710c201e9298b662e2938136f95f58fee45aa93d79d61aa80b3676f7f133d6bca884228e0d6b13566435eea3fac5c92199219f84bdec9658a9f9b200b8d31c3f4e987f819e9dc36d6f0a581b361fd26f1e9ad69706a913eeadd0245b26e4087422d68da9743ffce45b19d6aa17557c661b66d02e166356be1d4be162dfa3d45b6ca443e21ad3cc9d34fbc7a139eaa6469c1c9e78f3400b63dc154339dd41e44d76c209037e33a21366f5a66cc6a9db062c06268818dd86dccc903f3305ab1e1996cf2b9e9546414d7f3322a8734b1a9f1d4f1b6d0ecb5c3b0ab30ea111164c247762c64a120841c1938ee7337be39f1216ec5014379fb3d9886f0f11badd6e1e34780554b0ba3f87ec4ad424d5579fb05a47b80c13fbcd2c0c658562857ef21c6cb6192ba02695cf367a21c05c711398c0e817f8084bc2466359f2710c828f37f79467b7dacfdc39106807a863380c1394aefc7baf56b49c0eeb4f71ecd74e37cf6afbc8192f3aba599576a8a5eba9c42d61bc3ba0bc4246234cb892d3d0ee9c362b497a5e846123481645802a59aa2a0510e60a86bbf95546619a169bfaf9c5e36de24ba5d227f221010a8c284bc0b9b8c29536b3f8ed0f8e588df3a1abffaa59c18dc72e8f1c6747b1eab9aaacd572d4bc5640620f37562b15e7da757b9c73c01d2efc5c385f39d9d19637fae37d0ee642a8cde316130eb1ae8eede4a4a85edfb1d3a924d29e2e853ecb514e4fb02df4ce06dfc44778ab9f29b654b7ad3682c08caaa5b0ab5715febb60e0926fdf91ba88803734c87ae37fcd82ef008f12e50c16657be3d2f404c1d35385331d837939e9b3f177f27f1fb8b6f35b6eebcc8d1fc4bd8f0455b9973f801248d135c63292689865ae33c735e0c08d77ec7c9852484fefb996c412b68c11f0a358acf277cdc5aff766f4dd1b1cfa16fe633698e8c2849274a84a19585f9e7cd0266e6a0860c9f4e8e4b9b0c5c2556c217030cff380367c0976b0dd48196502a5492e120b0129ff943a753d29a32914ba5d8ef83227289e71143e9c6c41f2c711b51bb238906e96223c679c3b5f2d0b6379df30e3d0ff4616f1853989f4580b4597cfaac4650649ec76abbf6aceb471d10c6c5956ed106c9c160584e7deb1c2399fc23c53c1ebf9b9610cd651d90d6c81f6de9456f480d2924f769a1e6266f10ec29fa139d16c3a9d1ba7bc8c73c0e50e62a12bb7e14f3e74abb78a6b5a8cdbd8b2feac26c4d7c0d18ad181c60cb4f297b7c34232e8ab84489c43f30db00280d9e90015693a6047e7f5691a86007e82fd35e7d4fa1c258d7ac7332dfd7324a27a266f5a2d87bef031db6cd62833af0059b774a629735c921e181f741a6b390e120d19f4ed554c722cc5b8f70084c1f7e68637ba48364aa44e189b98753fe8a94f1407b90d430d33252d0d93e2ddec19531caed1a5a672aa3bf45459cd4c59a923bf4a88f9b666360a0fee84b7e2824bbce19769f495e2cd686b9302f72ca97e1c7dd1ef3e034350deab5d5bb00db69c47a53c360c60e0d845e1b046a0236f35577573dd7a99ad4eb5b852754bbcf144e5a37afe70fbb5055f7fb9c641cb4f22335e12cf2085f82f02bc1453198510e18375e9716ca37f7d717cd1e770717d95850797550ccb68e2c911172772cb42f191690be5118f9fdc2bcaf97ddc595403c61ab9511ed3d017057d4642d6a476800155f2fc79f2454e0497850415a845f7d19f7da748821bc24041df5554dae8b0fa9ea56c4d3d44f618e0d86f73227575508378bf781dd6420b42f5b6b57f56d70c75acf07b81e571db6f4665f3815acc4fc176b7326fab6b8ef5b52a1c12b88b19648f3e1930227facbaed26ae2ce53794daf3927b2e8586f7eda8bcb6204163dbab76140666a1b4651d47b9adb2d4d851536764c67b070304ad8dfb95cd3ed2bf36b667ae69dfb4403ae1ec7993b836eca54e4f637735918bfb3f2485063d102eafb769bc30f2944518410c31db575a7155b23d4358ad28de8e4333c07dddff9c639bee598d9e0b223fbb2599d9cc41b4310a45c67dba3cf7c38775e19d4e6266774661426e1244c2ccf7a1ad53804f330ff219c141b326c8d6295b10caaaedafa4d1a09ff416546e8444dd15676bc2a9faa41e96ad753ceb71fb5e7ff1a572ab386872cbadab51094e60e329da11c10d7bcfda882a82174d38456e999291b473b467902a9f01b973ae69cf855520ca9833597c9355a24f3565b1edbb7014dbbddc954bc8c5c2d39f93861dfcaec98077e36483670399c6e172a12a9789cc27e4f0350d0b4915430769074b37ff766291f9cfa01e14afd9b42ecfa9cf0bef7528741f42d54644ae0d1f0e36512e74599df09ee56cff81c13f9263f119e8679effbd9bceae2420f31a9ec4f3673fb3356500410687f6dc43c384a4f6e28b2eb1f53f3f7b317b8319bcb189c93120cf81b0893666f74a9d2500e7201126ce3513b52c816ecd30bf24a3aacd99dc8e603fe54709ee7c08d6df7575abc7a858590d2ba5efb59e36899107e4ffc7a7d4057b8d54997756abc4a0ce5f914797905a2326f06839cccd7896bed24c5b16ef8a7343e16bb0223651420b5303ceaa7e061b594d9f96a9e85bbb300dc5351030e5755f368c1d59af07ce16954a4b8d4385d60624d3d0154c85652637d894abe2461be95ba7777ca6b4a448bc93136de08a9fc71137d8e030844c9491556dc6a43384401c169a615acd4c9ba5dbc45692825ff51404954c0eb3f6de775c11b3eeb0b8e267226239b53735a0988a6ac0a602626c1b67ff7057bb1c8ea5612e9aaab20b67438e92f2771d0f04fbe61edf6e40ee2177e2f297e9ded23d41f351ec7e18b6697769c4c76a699da2f6ee9e17ba8e0ca37135537c0a14090f20ab45a174aa1d3e35eba623586371649f5ad164e6366be2c3c5ebe578e0977dc5f13e9b17ef9d23291a298b7ff4416ce83d5d25c1cd3a181591fba4389abfc6503019361630a005fd5c36342f15473d2b6c4536c5a390bdb7b957baf4f0110c77787415af148341d60f5c0a9763d2ad7b9672373d96c9c050ebd2068e602852b28c28788ebb12c3209dcb3e828fb9a2468f00edeb7ff150e567ef50242e6cd021c3c86320230a3369a76ba8e5d5a5798fa1e", @nested={0x11e, 0xe, 0x0, 0x1, [@nested={0x4, 0x64}, @nested={0x4, 0xba}, @generic="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", @typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@loopback}]}, @generic, @nested={0x14a, 0x13, 0x0, 0x1, [@generic="8d9dfa3bd02f355a96eb6109995c0b2f70c0b0cff7f96677fcd201dfe1cb6d2baebd03d5c1e74d408150564ec7d0ee2c22882eb9de2db00a3943eb5771c18fd37fa5312996ed81bb2a70544cb3371ffb3a61596a51c13695f41d3c8579edac899c459929523c675701818842730d0b7c96d1bac5192419", @typed={0x8, 0x123, 0x0, 0x0, @uid=r5}, @generic="cf9ac7b7ab2f2b25c00021efa8cc7722ec5e23e21260d3c47669861eb5afd3fb013bc74be10b27a6257fcb79b12dd8c061986982ee37d4233873c381003c91e12057e4fe4de339f3608fe5067073cea3028dc3d858a4003128226a5d4a862d2167a0e61524c21c8c44a3d7c85a170850c755106d2138b5a9863f11570dd805e7a28ed71b72a1a2f6f44f4af7596c3ecfbb97a2f6d9b3514a2ada101d1f882559d74aba2440c7692005b145da398e53d526d20ce2a86fb7521add3dfe702ec422c1c8b0", @nested={0x4, 0xb3}]}, @nested={0x78, 0xf6, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x4, 0x64}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x6}, @generic="596ca0b1488ea6a0c345fc15b88d5a2b6ffa7b0ade5ba46aa9c1d39a8193aa05508f53", @nested={0x4, 0x10}, @nested={0x4, 0x4c}, @typed={0x8, 0x21, 0x0, 0x0, @ipv4=@local}, @generic="22cde702cc2e4febfd7454751a4bb134dd2a79ca08900f6fb6f736f693b53fcfb281a0178a", @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x3, 0x0}}, @nested={0x4, 0x88}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc2f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @fd=r0}]}, @IPVS_CMD_ATTR_DAEMON={0x1f5, 0x3, 0x0, 0x1, [@typed={0xa0, 0x5, 0x0, 0x0, @binary="1bc4525b65adb4ac8bfa5b05591ad86be9172955e7fa6cb16e32cdba316f5559366898317edac346b74b8c49f90c7303ce934d6617c9c4946a4c7eb811944eef7bee65a5ec787d6d2a48c24172a9cd27180c1da011ce56210065fa631bd23338037604ce2a6a42bbd212695e03c1efc5790e161cf7f732d525b2b75b008cb9b6c18e1accecf85293929ef2aa68059891312bf4bc959eadfb5a74acfd"}, @generic="203b4e5cdc6863d3e6207e55ac42883bd0ed48ebf8957ad1c816f7c28cf9d4ffdec1ab123e61e15ab720605d27a5fbadc99209cb17dffef6cfd04d6565aeaef0b38434266b8cdf7c068016f761d7772d47b20a4d761010ec53568f4bab0c650ebcf4e93fb6356d167ccd15b97d04a20267e0328120564f82efaa50507444aab8d2c1f7ded32003b95da8ca4e8edd7f9040e3eba21b8ab0d7513d8fd4450156a3b91f72fa72344bbd665bf510047cb39eb02d56f14853a81b05199800ccc315d62cae1922c2550e10f04702508fa651e7fb4d880b", @generic="2371be940a082411c16f59f902c743a350d015be173c571446494218505c75ecff3fa3f3f7ab385576270a7422f9d96b54f0b7dcf1e8899084a7bbbde107e2b9f327615c80c9cd24d4a38de009aba6148c78095e52f2abb4c56ef296e0bb7ceef6665ea66eba8fca1d7bb095d6f966cbfc6a244668b017e28c1b2d4f3c"]}]}, 0x1680}, 0x1, 0x0, 0x0, 0x41880}, 0x48000) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20006, 0x3, 0xe72, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x4, 0x7ff) wait4$auto(r6, 0x0, 0x80000000, 0x0) rt_sigqueueinfo$auto(r6, 0x5, &(0x7f0000000240)={@_si_pad}) write$auto(0xffffffffffffffff, &(0x7f0000000080)='#-*,+\\}\x00', 0x8) unshare$auto(0x40000080) executing program 3: mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) executing program 33: mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) executing program 4: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f000000000000030000c0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 4: r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0x0, 0x9, 0xc8e6}, 0x27, 0x101) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r2 = socket(0x1d, 0x3, 0x1) getsockname$auto(r2, 0x0, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000180)={0x4, 0x1ff, 0x4, 0x5, 0x4800000, 0xffffffff, "b8556e95fd689b52ae05aa60209708fe", 0x6, 0x8, 0x17, 0xa7, 0x1, 0xfc, 0x81}) r3 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) read$auto_debugfs_devm_entry_ops_file(r3, &(0x7f0000000940)=""/46, 0x2e) fcntl$auto(r1, 0x400, 0x1) read$auto_tracing_stats_fops_trace(r1, &(0x7f0000000000)=""/250, 0xfa) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0xa2400, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0x0, 0x9, 0xc8e6}, 0x27, 0x101) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async) socket(0x1d, 0x3, 0x1) (async) getsockname$auto(r2, 0x0, 0x0) (async) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000180)={0x4, 0x1ff, 0x4, 0x5, 0x4800000, 0xffffffff, "b8556e95fd689b52ae05aa60209708fe", 0x6, 0x8, 0x17, 0xa7, 0x1, 0xfc, 0x81}) (async) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) (async) read$auto_debugfs_devm_entry_ops_file(r3, &(0x7f0000000940)=""/46, 0x2e) (async) fcntl$auto(r1, 0x400, 0x1) (async) read$auto_tracing_stats_fops_trace(r1, &(0x7f0000000000)=""/250, 0xfa) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0xa2400, 0x0) (async) executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x167c0, 0x152) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setpgid$auto(0x7, 0xffffffdffffffff4) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000), 0xa) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r1, 0x40044145, 0x0) ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, &(0x7f0000000100)="36f088b87bfe468f324f00fc60a01a18f9d1e34d813d4b558061677ca920738feb61791ce8f7af4d754895925e7ba736b3c9e9c5ba570bd5491ea83dcd05db74774669a4ca194e5136eb04bb2c01e3fee9a0505620603d150052f5e8b19bd1db7ed1bf086360c5b80f619b77c4331dab395b88ada34a84904a7ba805e191b31c1092dec0c3b434c4132787f9c85c70bbdb5bcfd902da8fc52c8496d4f6f57680ec19a285b5a593587c273682d32829b8df1e269f28c074ddc9ac0d5c611ac89add24fbcf2236ba4a8d45d7c2b2f83568c6594739c837e71490d0a38e7adb") openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) mmap$auto(0x3, 0x2060009, 0x7fffffffffffffff, 0x7fffffff, r0, 0x8004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) io_pgetevents$auto(0x7fff, 0xd47, 0x3, 0x0, &(0x7f0000000040)={0x100000000000000, 0x2}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) r3 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) futimesat$auto(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xb, 0x100000001}) pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) splice$auto(r4, 0x0, r0, 0x0, 0x768, 0x9) close_range$auto(0x2, 0x8, 0x0) executing program 4: mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000480), r3) shmctl$auto(0x3a9, 0x16d, &(0x7f0000000580)={{0x6, 0xee00, 0xffffffffffffffff, 0x100, 0x8000, 0x5, 0x4}, 0x40, 0x4, 0xb, 0x6, @inferred, @raw=0x10, 0xde4, 0x0, &(0x7f00000004c0)="ecea", &(0x7f0000000500)="29d4c45d90eddee334bc10951a649c51a2f426b4505d85262b04da444efd83b0ed5cff471f9485e3ecd0fa9206913dccb1e5b9d5ee13c034ddc269d153fca7e14697a286435808a946458c06cae902afb62e1a2fb76e77f588a48e647be62868fec031"}) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000001180)={0x14ec, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0xf2, 0x3, 0x0, 0x1, [@typed={0x8, 0xb5, 0x0, 0x0, @uid=r5}, @generic="c2184e10db349177ab61c22ec1433da73ff5ff97266360a76d3e5d5b2e306e60a388444ffdc3593a98d8014a1cee702732f826d32204986afcbf1648a8a483981c17a0655abe7921a12cda0a1169f56f4736ee546b2727e1ed79d9af41f5b927ef42c0d3aa33080b8482f59410ecbe1a4518f425b5442fda68b78ea734fd16647a7be84a91bc8abf0ed23fe6fb3d2813296a1b948fc9951aaa672ffc0bb33cb6f1d6ca03", @generic="cd74f188c91081813ab0db7288642bc28a8891084818a048c3673a15b28e5d151d2b38b8cd8ed75cb3eac8df6c897ef3a224785e06979dc289ce920d312faebd8a90"]}, @IPVS_CMD_ATTR_DAEMON={0x1b7, 0x3, 0x0, 0x1, [@typed={0x4, 0x12a}, @generic, @nested={0xe3, 0x2d, 0x0, 0x1, [@nested={0x4, 0x63}, @typed={0xc, 0xd8, 0x0, 0x0, @u64=0x81}, @generic="bb1087eadb1c6963b3be40cb94eeb2388bd85c29b634195cdc989a5654e787937807647a166c23ce3176d6f958975c74b796323cb16b63e66e3921c2e43f15d8eca214f578ccbef1f7ded18481b3182db0a22eb4c4ac9b9214b0b76349536b5f2886421a8789bc1b38655cd7b0605b3197dd115c8c03881d9c61c523b985f2923278324e3e0b670efc9f17a33474eef89cb38705d629f538bd50d097d780d1a27f8cc2c003d710914d6e01a42c86b73c47b7c52fe84d5d9754f0f82c2d4c91a31ed9af", @typed={0x8, 0xc4, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x96}]}, @generic="ed583b14c8cdd5bfe22511137d2b16279d9a7c519f90931af1f12be1894aa3b3440ea05d3c2be1d341e99549ff698f942161f6697ea8427a4b1ccd674246d31f3fd9a8c1577fc3be53a8b96eb2a727c72e11e5e67f86b12eea0e07d57ac5f37fee12a3db6ed0482545e6831749fd4325e72d61793b2ecf48dbeeb005b2ec4ba335d4ce8b3a84d968e1bd671f3ecfeabf0b22d932d8cbb7952981fd5e72e722c58172d0548ab6314ae066e00b0c277343f7335651bc72c1d73c80737b924798f295443a50b17685dc065b3a"]}, @IPVS_CMD_ATTR_DEST={0x1173, 0x2, 0x0, 0x1, [@generic="0d36b99361b746c60f879dc06c116186026f8588f5c3673b0b4ed6bb940f2a234056be9f21d726f7736feadb9dad09902f3633058230f3bdd0fea271c213b0c0752a7a5c32d500514acc4bb9ee83518545310b19110e9416a33f8fe24176cedd336a6e5a8f90cc7a73874804b3d74ff233239b6f83938d26c905e70827800f52781367738cd11f0650fff5", @generic="eda9e53dcdc6bda0f6a93fb8f92c3fb77bfbd11660cb9a1808a2939f34d95f8f4ae020b906c2bdfb14798961dba37fbc92b0662691d9c0ef75356e84b9e656e2d9534f09d2234ef2", @generic="90ae998d2968e109764c9b7060b953831f01a03f01e92a342241f475ef693115a9470c448e2758eb0715bfd8476684c19c28bb817a3574f16a0d69f3bde8dea320e329c4f42ffee8c7933e0de85599b33d9c14c6fb1d27c257f9f2140fcfc2aafa75c10593e6c6e0ffce0b8653d3734992bfa648d3a5fe2e77cfa7e3e91247080ffb33074b1ba5763d5d3966a2b1b2ef53216256", @generic="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", @nested={0x8, 0x118, 0x0, 0x1, [@nested={0x4, 0xe2}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_SERVICE={0xa8, 0x1, 0x0, 0x1, [@nested={0xa3, 0x105, 0x0, 0x1, [@typed={0xc, 0x6b, 0x0, 0x0, @u64=0x1ff}, @generic="c539d7f79fe3f1c7bcd9598b47d4bc11553d9eb1394accc89fb914f089a72c5ff4aa4878481ad79305e6b4176bc871e7ec768fe7a4fdfda52f6da4bda73e88b86d89bb0f438cd8ffe51263f96a5b2bc8c930494b19684196a7b93bfa06f02444efe6c7bd6b18853b4aeea8ee565d8c35053c73d7141134fe0c861a", @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0xdf}]}]}]}, 0x14ec}, 0x1, 0x0, 0x0, 0x8001}, 0x1) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x2, 0xcd5f, 0x1, @_kill={0x0, 0xffffffffffffffff}}}, 0x7, &(0x7f0000000140)={{0x5, 0x23}, {0x7, 0x8001}, 0x1, 0x3, 0x3, 0x1, 0x0, 0x7ff, 0x6, 0x1, 0x6, 0x7, 0x691, 0xa9, 0x0, 0x7}) adjtimex$auto(&(0x7f00000002c0)={0x2, 0x0, 0xcb, 0xcd, 0x3, 0x8000, 0x3, 0x0, 0x80, 0x4000, 0xfffffffffffffe01, {0x6, 0x10001}, 0x4, 0x2, 0x7, 0x7, 0x0, 0x64873d63, 0x7, 0x8, 0xffff, 0xa, 0x3ff}) sendmsg$auto_OVS_DP_CMD_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_NAME={0x6, 0x1, '*\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8040) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, 0x0, 0x1a) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/module/ib_iser/parameters/max_sectors\x00', 0x20a42, 0x0) sendfile$auto(r7, r7, 0x0, 0x4f64a1d2) adjtimex$auto(0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x10eb1, 0xfffffffffffffffd, 0x8000) socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) executing program 4: open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptya3\x00', 0x82e343, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/shmem_fallback\x00', 0x101700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) socket(0x25, 0x6, 0x0) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000001080)={"f2b0e77c15814ccbd31cbfc1be00641bdbc5590fa669dd00000100000000004bbe432f9f1498df37b37b5682b4a45de81ed08d2421f6d4dd6277f0cbf348d3b6d6d237ddee104e8bdd3134c07c645c9e1058f625c2250683796a35edbe0dc9a99f436e05c010101fda81b336aa520d52594a7366f205857c7c4f08af2874e4835f0088b46db869b0de065b53d4470ba071c622eb6d174c6b8afcfed6e66c011ee02367a79b51bfc45a9d624b0533400f784075094246f86a42fc2183ebab9eaf7f0101d2b1555b3d2c1213c9cec2d78dd57a1d628d93f379a7b9e65d4ec3a7ab8b7ccd5db4670f000061c8316fbe84aa6f2900", 0x3, 0xf}) mmap$auto(0x0, 0x20009, 0x20004000000000db, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x8208ae63, r3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x133e02, 0x0) bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x630, 0x57d, 0x9, 0x8}, 0xa3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) executing program 4: mmap$auto(0x1000000006, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) syz_clone(0x800800, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000, 0x5, 0x0, 0x8, 0x2) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) write$auto(r1, 0x0, 0x800f) sendmmsg$auto(0x3, 0x0, 0x9aa, 0x7000002) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) mmap$auto(0x6, 0x100, 0x4000001000df, 0x18, r0, 0x4008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd13/queue/max_segment_size\x00', 0x400000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x80000000020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc1}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x7, 0x8) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram2/integrity/read_verify\x00', 0x7095c2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x10, r2, 0x5) dup2$auto(r2, r0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) executing program 34: mmap$auto(0x1000000006, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) syz_clone(0x800800, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000, 0x5, 0x0, 0x8, 0x2) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) write$auto(r1, 0x0, 0x800f) sendmmsg$auto(0x3, 0x0, 0x9aa, 0x7000002) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) mmap$auto(0x6, 0x100, 0x4000001000df, 0x18, r0, 0x4008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd13/queue/max_segment_size\x00', 0x400000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x80000000020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc1}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x7, 0x8) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram2/integrity/read_verify\x00', 0x7095c2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x10, r2, 0x5) dup2$auto(r2, r0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) executing program 6: r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/loop2/poll_stat\x00', 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) userfaultfd$auto(0x816) mlockall$auto(0x7) mprotect$auto(0x0, 0x8000000000000001, 0x6) r1 = clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0xffc, 0x100000004, 0x100000002, 0x0, 0x7ff, 0x5) setuid$auto(0xe) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r3}, 0xa3) socket(0xa, 0x3, 0xff) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r5, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7ffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r8 = prctl$auto_PR_SET_MDWE(0x41, 0x2, r1, 0x2, 0x9) bpf$auto(0x3, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex=r7, r3, 0x8, 0x5, r8, @relative_fd=r4, 0xb4}, 0x8) pread64$auto(r0, 0x0, 0x1000f429, 0x100) executing program 6: open(0x0, 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) fcntl$auto(0x3, 0x400, 0x2) ioperm$auto(0x90d5, 0xc, 0x2) executing program 6: mmap$auto(0x0, 0x8, 0xffb, 0x8000000008011, 0x3, 0x0) executing program 6: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) executing program 6: r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/sub1/status\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_options\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x80001, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) ioctl$auto_NVRAM_SETCKS(r2, 0x7041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) geteuid() socket(0x28, 0x1, 0x0) r3 = getsockopt$auto_SO_SNDBUF(r0, 0x5c5, 0x7, &(0x7f0000000040)='/proc/thread-self/net/can/rcvlist_eff\x00', &(0x7f0000000080)=0x8) ioctl$auto_RTC_AIE_OFF(r3, 0x7002, 0x0) pread64$auto(r0, 0x0, 0x594c, 0x9fffffffd) executing program 6: r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x600, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xdc) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x3, 0x9) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$auto(r1, 0x5502, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000000c0)=""/215, 0xd7) socket(0x28, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyw1\x00', 0x20000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20940, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0xffffffff80000000, 0xffffffffffffffff, 0x300000000000000, 0x80000003, 0x8, 0x0, 0x5, 0x10001]}, 0x0) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x80000000c, 0x4000000000df, 0x44eb2, r1, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) write$auto_proc_loginuid_operations_base(r0, 0x0, 0x0) executing program 35: r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x600, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xdc) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x3, 0x9) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$auto(r1, 0x5502, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000000c0)=""/215, 0xd7) socket(0x28, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyw1\x00', 0x20000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20940, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0xffffffff80000000, 0xffffffffffffffff, 0x300000000000000, 0x80000003, 0x8, 0x0, 0x5, 0x10001]}, 0x0) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x80000000c, 0x4000000000df, 0x44eb2, r1, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) write$auto_proc_loginuid_operations_base(r0, 0x0, 0x0) executing program 7: prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="210026bd7000fadbdf25010000000800088004004080"], 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x80) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, &(0x7f0000000100)="0537af53ed9030cd811d944ea9fa540bcc2e935093eb0a8bf7a36a7a49241f82525a20d768f76bd71f261e20c4f095dac74a15a83e4bc7292aa6b0f487f3c7136462e3e943aadf737f432b53eda491d572d3358a8aa6596c8581a929526e22cb0505fbb9780a2a47af540f7909743b") write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x100, 0x2091ce, 0x0, 0x0, 0x6, 0x2) prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, 0x0, 0xcd8, 0x100) close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x40000080) prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0) socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x10, 0x401, 0x300000000000) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x82, 0x0) clock_adjtime$auto(0x6a, &(0x7f00000002c0)={0xc, 0x0, 0x1fffc0, 0x7, 0x0, 0xffff, 0x51, 0x0, 0x7, 0x9, 0x1, {0xf3e, 0x6}, 0x2, 0x5, 0x100000001, 0x4, 0x0, 0x9d98, 0x4, 0x0, 0x0, 0x8}) r2 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\b\x1a\x1e`0x0}) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NFC_CMD_GET_SE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}]}, 0x1c}}, 0x24000000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$auto(r4, 0x400454ca, 0x38) ioctl$auto_TCFLSH2(r3, 0x8926, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3b3da7541f6379a90e400200000008000300", @ANYRES32=r2, @ANYBLOB="0a000900aaaaaaaaaa11000008000b00ffffffff"], 0x30}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) executing program 36: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NFC_CMD_GET_SE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}]}, 0x1c}}, 0x24000000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$auto(r4, 0x400454ca, 0x38) ioctl$auto_TCFLSH2(r3, 0x8926, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3b3da7541f6379a90e400200000008000300", @ANYRES32=r2, @ANYBLOB="0a000900aaaaaaaaaa11000008000b00ffffffff"], 0x30}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) executing program 2: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x7, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) executing program 2: openat$auto_transaction_log_fops_(0xffffffffffffff9c, 0x0, 0x2800, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a000100000000000000000006000600050000000800", @ANYRES32=0x0, @ANYBLOB="0800040003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f20000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000280), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x29, 0x5, 0x0) executing program 2: syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/x86/tlb_single_page_flush_ceiling\x00', 0x1, 0x0) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x2d) r2 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r3 = socket(0xa, 0x3, 0xff) connect$auto(r3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) r4 = getpgid$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x11, 0x0, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000001900)={0x14bc, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1496, 0x3, 0x0, 0x1, [@generic="0ae556ea96b6aac20a2df353bb08ecd46a7f933d1b2db8ce9af498e5ff3a90bfe88cc0b1e2e58b0f02ef589c88720e1e867e4da84e9bd27e4e7c2e138ed9b259006d0495ac1d03abe76afce408df49a9a4d2c79e8416718b6ea62d96bfe4d485b5898da01e69d213069313429fe114911f46d2480f", @nested={0x1111, 0x43, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @pid}, @nested={0x4, 0x5e}, @generic="1b6180a9a251a5f7309b5b6b8af06ed32ba9a6c9b4845494259b2eee6bf6aceccc80f3c1ac1e002fbb719b8a15e2fe551c7c038ef05802e35f6c3566675751865ee538b9e57ac3c3ac0668a4b3929be439d1ef4cdd24c7415036f9d02f18333fe5fccf1ccb5a61d1e047fa29c9119ab9bbea68f91fc936910e843c7c568c765383c07ce45c309fbf64924e2567db900905537a8003e022f7a044", @typed={0x12, 0x14b, 0x0, 0x0, @str='/dev/snapshot\x00'}, @generic="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", @generic="627d93aa42f40ad39e72806204876c62645d32e22db38cf26b22937449b0acd596f82d21bbab5d200dbe014bca9443d8ef194821a06d9151f0027a098a56ce0fe0fb799d8437668b53f1752dcb19744e1fc8cd"]}, @nested={0x5e, 0x57, 0x0, 0x1, [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x14, 0xa3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x53}, @generic="0baa9962d832bfc7a1598f73f290676159d5d963f0ef3f3694e8c4769e09a76a5681c9ac27bac98715719137d62e"]}, @generic="5b4616330f58eec7166fdb5686acea5e1073d07a6eb7b91e3eb3ad97fb23c2aa1e37e9c9253c0115d7c961fed3edb90a3043132ec20bdf79be7ae10344c3f520acf5783d0eb3c0e11c56c454f6919da28e35da492fd3bd376918d0d1db7541fe3db6ce2b222834198cbee80a7b8b144af6a3fea938b06a01046b00b17c01cfd123", @generic="0a8c25de9c6f31e39a6bcfad2f409551b2465a4c1003d3a46dc8740e9d4e1794644249f256fb7ba7b4475e04825ebcdadeb3d0824157cddbcb471d53880652048b58569b6e4c33ce64cb48ab36673752d6980118e2b398045597a158fb9fcc22e5ba4cdb205e8980f4ca5620bc9270655998e15fd4623e70d35bb1c3c2d4386f44f98217d65dc1b99d0995bb4e2f", @generic="1eecf67e42a1d61f4e23ea7292fa8f0b334f8861a5905219476eac17430e2a6298df7834dd39fea33d5140246b3c8cede37cc5d84006fce1b686f9aa64fbd490f5bdb6e8810fecef991664c54e804cd59dc1e3ce75bb3e4f7e12a5b3c9a7022868b3de8ec536b30525e4728d360702f8d5b0e5ddfdaefc630b8e9dcec51b6492186a79401903db258e75a34ca1c0f85639b3bdb06d35b5d220556679c0e28bdd", @generic="894e299d6260a47e11406008a472f6a9725b9fef7c39d86f448a815b8fe227", @nested={0x2c, 0x12, 0x0, 0x1, [@generic="dc641df00c5037ab80751ccffa98cf32a2937c8ff7aa7c751f859c9c5dba646cfa7737c23e800600"]}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r4}, @generic="81b8b1fc1c32599be89ba74119c806ea27f3aa5e9c5679a312270e7e81db4890806dea78fbeef252fe7f1b53f45998db15af37e140c0980a2d7fbcd426c4d79699daf726d795c9ee038fbb00977b0cb662122831dd9d93cd3f297d8ba7f0c40aa0be2f15b6a064c90ed84f6e5fbe01f3bf592c3a924602291753fa87cf056ef96dc23104d826ebf0cb14701dd5813e112b131f931c47eb04b4122e7add7159a42977ab9a220fea"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x14bc}}, 0x4c0a4) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) setgroups$auto(0xe32, 0x0) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) r1 = gettid() kill$auto(r1, 0x7) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x2, 0x2, r1, 0xf39, 0x7) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'netdevsim0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000) sendmsg$auto_TIPC_NL_KEY_FLUSH(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fd557453", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 2: readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) executing program 2: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/if_inet6\x00', 0x40100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000080)=""/104, 0x68) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r2, 0x301, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvmsg$auto(r1, 0x0, 0x4) ioctl$auto(0x3, 0x80045500, 0x38) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r0, 0x3b8a, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x40103d0b, 0x0) executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYRES8, @ANYRES8], 0x18}}, 0x200080c0) r2 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SEND_CMD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x41) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0xfffffffffffffff8, 0x6, 0x1, 0x613, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x8000000000000000, 0x4, 0xef8d, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x4, 0x9, 0x9}, 0x7f) msgctl$auto_MSG_STAT_ANY(0x773, 0xd, &(0x7f0000000340)={{0x6, 0x0, 0xee00, 0x8f46, 0x1, 0x6, 0x10}, &(0x7f0000000280)=0xb6, &(0x7f0000000300), 0x8, 0x9, 0x2, 0x0, 0x2, 0x2, 0x5, 0x67, @raw=0x1, @inferred=0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'dummy0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x24, r7, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r0, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001040)={&(0x7f0000000400)={0xc38, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_LIST={0x1c9, 0x2, 0x0, 0x1, [@typed={0xc, 0x43, 0x0, 0x0, @u64=0x10001}, @typed={0x8, 0xdb, 0x0, 0x0, @u32=0xffff}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x1000}, @typed={0x8, 0x8e, 0x0, 0x0, @u32=0x8001}, @nested={0x103, 0xaa, 0x0, 0x1, [@typed={0x4, 0xbc}, @nested={0x4, 0xe}, @typed={0x8, 0xdd, 0x0, 0x0, @uid=r3}, @generic="65807136fcf094f1f9d64a9b3911c73d77f2635c60a24ec449248f4b955cf9511aac7a8218083c7590b6102e1c1ce44063d3a8b85e0b856c255f3fc751ecfb61283af5bfaa090ce300ebbd8c454e807a25bef8a5b0d86ab8f1f67148f0f636fd232c88db9d5033632ecfab17578d108ce5ee95a74afc95e09b57310de21fa0e28a08689214d000bc47f5c25e6577f7ea8f50546734f12b2966ae2f35cad208bf3e118a71ad955d9b3abbfd6873508ec876c9a28092559c9439522a92fb2c4c932fb8c1cec8d6268d2c0666", @nested={0x4, 0x74}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0xec6}, @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x6, 0xf, 0x0, 0x0, @str=':\x00'}, @generic="ab4f661677ac7b90fc42457042c37c978877e49fd78f8dc5b58736d097e9099971c275c56295d352c65b0be44d529e6df1888dfe9fbad1ad38cb8ce2e1cc668ae40add7921bd20d98673a34075b95ca952f1686e1b4884eddbd65965d4206b358f81fc04ef5e5bda9534de6088c9027b3dc0329de976384e0c59cc1600187eed3b", @typed={0x8, 0xd0, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x36, 0x0, 0x0, @uid=r4}]}, @NCSI_ATTR_CHANNEL_ID={0x8}, @NCSI_ATTR_DATA={0x413, 0x5, "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"}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r5}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_DATA={0x620, 0x5, "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"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x5}, @NCSI_ATTR_MULTI_FLAG={0x4}]}, 0xc38}, 0x1, 0x0, 0x0, 0x8054}, 0xc80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = socket(0x10, 0x2, 0xc) r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r9, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xc00}}, 0x14}}, 0x10004010) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x1000088) recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0) r10 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd6\x00', 0x8001, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) ioctl$auto_PAGEMAP_SCAN(r10, 0xc0606610, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r10, 0x0, 0x9a6, 0x0) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) executing program 1: sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf250300000008000100feffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000d4) sched_setaffinity$auto(0x1, 0x1, &(0x7f0000000000)=0x1200000000008a) socket(0x10, 0x2, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0xfffffffd) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c000180"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) futex_waitv$auto(&(0x7f0000000040)={0xf, 0x105d93, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62b9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = fanotify_init$auto(0x401, 0x1) close_range$auto(r1, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x3}}, 0x6a) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x1002, 0x100000000000ffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pwrite64$auto(r2, &(0x7f0000000080)='\vX\xb5\"\xa5p\xe6\x1eRN8\x90\x86\xd9e\x1cJ\x99\x00\x11:\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xd7\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xc0\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6c\xc6\xb2Jg\x01JZ\xbb\xff\xff\xff\xff0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1e;8\xed\xf6L\x05\xe8X\xaf\xe2\xe3\xd3\xc5:\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]\xff\xff\v\xff\xff\xff\xff\xff\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1', 0x7, 0x0) r3 = socket(0x2, 0x1, 0x84) setsockopt$auto(r3, 0x84, 0x17, 0x0, 0x27) write$auto(r0, 0x0, 0x100082) executing program 5: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7500000000000000) write$auto(r0, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x3, 0xfffffffffffffffe, 0x12, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) socket(0x2c, 0x5, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000180)) ioctl$auto_SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f00000001c0)="1ab7") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x80) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = semctl$auto_SEM_INFO(0x3, 0xfffffff9, 0x13, 0x8) prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, r3, 0xcd8, 0x100) madvise$auto(0x0, 0x20499e, 0x9) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x40046205, 0x9) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) executing program 1: mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getrandom$auto(0x0, 0x6000000, 0x3) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000980)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/machinecheck/machinecheck0/monarch_timeout\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)="33aa0d7191af", 0x6) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800) r2 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r2, 0x7) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) executing program 1: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0xffffffffffffffff) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) prctl$auto_PR_PPC_GET_DEXCR(0x48, 0x6, r0, 0x3, 0x9ed) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1000, 0x6) pselect6$auto(0x8000, &(0x7f0000000080)={[0x800, 0x7f1, 0xb, 0xb9, 0x7, 0x7, 0x28, 0x2, 0x100, 0x4, 0x7, 0xffffffffffff6ee4, 0x80, 0x47, 0x3, 0x40]}, &(0x7f0000000100)={[0xfffffffffffffffc, 0xffff, 0x101, 0x4, 0xb, 0x0, 0x3f8b, 0xc, 0x2, 0x2, 0x7, 0x20000000007f, 0x0, 0x0, 0x7fffffffffffffff, 0x6]}, &(0x7f0000000180)={[0x5d58, 0x7, 0xa5, 0x7f, 0xffffffffffffff63, 0x6, 0xfffffffffffffffd, 0x2001, 0x4, 0x7, 0x3, 0x8000, 0xa, 0x101, 0x4, 0x9]}, &(0x7f0000000200)={0x6, 0xac}, &(0x7f0000000240)="84564c8c26b8144fd4d3e1ecb7942bbed10faff85baff45164fe66cd970aa99ce6e0b82e3f049231ba73698898fcd2a65389893a8ce8b267d7aa4f5258122e0b18ac67ffde635cac8164af89d15c5b3222a32a0e03b46c0b57abb954eb9a7ba2e851d345c9e7319f0334e91d93a1a639c9a157cbd953f98a055c6326e49c3691aa27e73928cfc94b6ca85e02c62ac8fc9925f5c6481c62e36169492d6741aa7e32fbc03e9391f9b9b275e7e9551b938d5b80bafbdc1dd37bfb2772dbc29cf87b41fa609e535de02906ee62739ad3f141062547") madvise$auto(0x0, 0x200007, 0x19) ioperm$auto(0x7, 0x6, 0x1) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) executing program 5: mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) (fail_nth: 6) executing program 5: r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x59, 0x7) ioctl$auto_SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000040)) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="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", 0xfe04) executing program 1: mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x30, 0x0, 0x56b) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0xd}, @ILA_ATTR_LOCATOR_MATCH={0xc}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x5}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x5}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/initstate\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x5, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x10]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x11, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) getpeername$auto(r3, 0x0, 0x0) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) execveat$auto(0x6, &(0x7f0000000000)='[[]$)%*++{#\x00', 0x0, 0x0, 0x1000) r7 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x2881, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r7, &(0x7f0000000080)="390d00a741ee", 0x6) getpid() executing program 5: mmap$auto(0x8, 0xf88, 0xdf, 0x20009b72, 0xffffffffffffffff, 0x100000001) r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/sockcreate\x00', 0x6400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r3, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf255100000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_NET_GET(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$auto(0x9, &(0x7f0000000000)=@bpf_attr_11={0xffff, 0x1, 0x9, 0x6, 0x3ff, 0xa7, 0xb, r0}, 0x9) r8 = socket(0x1f, 0x5, 0x0) mmap$auto(0x1, 0x85, 0x40e5, 0xebd, 0x405, 0x7ffd) r9 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ubifs/chk_general\x00', 0x10800, 0x0) read$auto_dfs_global_fops_debug(r9, &(0x7f00000001c0)=""/187, 0xbb) getcwd$auto(0x0, 0xffffffffffffffff) r10 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/v4l-subdev7\x00', 0x102f03, 0x0) poll$auto(&(0x7f0000000480)={r10, 0xffff, 0x29}, 0x6, 0x8) bind$auto(r8, &(0x7f0000000280)=@sco={0x1f, @none}, 0x6a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) iopl$auto(0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x80000, 0x8b) socket(0xa, 0x2, 0x0) executing program 8: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r1 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x56a, 0xb275, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r2, 0x40085503, &(0x7f0000000600)={0xd, 0x0, 0x3}) preadv$auto(r2, &(0x7f0000000100)={0x0, 0x20000dd}, 0x1, 0x2, 0x5) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffd, 0xeb1, 0xffff7ffffffffffa, 0x8) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty2\x00', 0x20500, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, 0x0) sendmsg$auto_TIPC_NL_KEY_FLUSH(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000000c0)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) executing program 8: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) epoll_create$auto(0x3e) write$auto(r0, &(0x7f0000000000)='/dev/nullb0\x00', 0xb2) close_range$auto(0x2, r0, 0x0) executing program 8: ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x9, 0xffffffffffffffff}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebd, r0, 0x8000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x4, 0x8) (async) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x2, 0x0) (async) io_uring_setup$auto(0x59, 0x0) executing program 8: ioctl$auto(0xffffffffffffffff, 0x80045439, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) readv$auto(r0, 0x0, 0x3) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x2, 0x8, 0x0) (fail_nth: 1) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) executing program 5: request_key$auto_KEY_SPEC_REQUESTOR_KEYRING(0x0, 0x0, 0x0, 0xfffffffffffffff8) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/mem_used_max\x00', 0xa081, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) setrlimit$auto(0xb, 0x0) mincore$auto(0xff7, 0x8001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio28\x00', 0x101100, 0x0) mmap$auto(0x0, 0x9, 0x9cad, 0x8012, 0x3, 0x8000) read$auto(r1, &(0x7f0000000000)='+-\x00', 0x5) r2 = gettid() ioctl$auto_EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=0x8) rt_tgsigqueueinfo$auto(0x0, r2, 0x21, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) readv$auto(r3, 0x0, 0x4) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) executing program 5: openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x9, 0x20008, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4038ae7a, r0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) executing program 8: r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYBLOB='h\x005'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x620081, 0x0) write$auto_ctl_device_fops_user(r1, &(0x7f0000000340)="a504ff4c280e43904055ceb3bc98cf2af453126b06d1f8b678ad4700b35e33bf24e0c6269dd4fcfeafaacd781a02e63a0f9cf51e53d742c6cd3e1a4531a69c151e3714d2418d3a55d79a114e8309e48778a229eef16577bd021ce7b48a29a4e1c32f5f0c3393287d", 0x68) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_genetlink_get_family_id$auto_nlctrl-mmap$auto-close_range$auto-close_range$auto-mmap$auto-socketpair$auto-socket-getsockopt$auto-openat$auto_force_devcoredump_fops_hci_vhci-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-mmap$auto-write$auto-write$auto-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-sendmsg$auto_CTRL_CMD_GETPOLICY-socket-mmap$auto-mlockall$auto-mmap$auto-mmap$auto-setsockopt$auto-openat$auto_proc_single_file_operations_base-openat$auto_proc_single_file_operations_base-openat$auto_proc_oom_score_adj_operations_base-openat$auto_proc_oom_score_adj_operations_base-readv$auto-readv$auto-ioperm$auto-open_tree$auto-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-close_range$auto detailed listing: executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 59 programs with base timeout 1m40s testing program (duration=1m54s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 12, 30, 12, 24, 14, 14, 21, 27, 12, 8, 30, 8, 8, 12, 22, 21, 30, 29, 30, 30, 21, 4, 1, 4, 26, 30, 30, 30, 19, 30, 10, 3, 22, 22, 4, 6, 30, 13, 1, 19, 27, 2, 30, 30, 13, 16, 3, 7, 30, 30, 10, 4, 9, 13, 24, 12, 5, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000f0ffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) mlockall$auto(0x7) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000fc000000000000c0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vimc.0/video4linux/video4/name\x00', 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x3}, 0x20000007}, 0x3, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x81}, 0x1, 0x0, 0x0, 0x8) (async) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mlock$auto(0x1000, 0x6) (async) mlockall$auto(0x800000000000005) (async) pselect6$auto(0x8000, &(0x7f0000000080)={[0x800, 0x3, 0xb, 0xb9, 0x7, 0x7, 0x28, 0x4, 0x100, 0x9, 0x3, 0xffffffffffff6ee4, 0x80, 0x47, 0x3, 0x40]}, &(0x7f0000000640)={[0xfffffffffffffffc, 0x8, 0x101, 0x4, 0xb, 0x0, 0x3f8b, 0xc, 0x2, 0x2, 0x7, 0x7f, 0x0, 0x800, 0x7fffffffffffffff, 0x6]}, &(0x7f00000006c0)={[0x5d58, 0x7, 0xa5, 0x7f, 0xffffffffffffff63, 0x6, 0xfffffffffffffffa, 0x2001, 0x4, 0x7, 0x6, 0x8000, 0xc, 0x101, 0x4, 0x9]}, &(0x7f0000000200)={0x6, 0xac}, &(0x7f0000000740)="84564c8c26b8144fd4d3e1ecb7942bbed10faff85baff45164fe66cd970aa99ce6e0b82e3f049231ba73698898fcd2a65389893a8ce8b267d7aa4f5258122e0b18ac67ffde635cac8164af89d15c5b3222a32a0e03b46c0b57abb954eb9a7ba2e851d345c9e7319f0334e91d93a1a639c9a157cbd953f98a055c6326e49c3691aa27e73928cfc94b6ca85e02c62ac8fc9925f5c6481c62e36169492d6741aa7e32fbc03e9391f9b9b275e7e9551b938d5b80bafbdc1dd37bfb2772dbc29cf87b41fa609e535de02906ee62739ad3f141062547") (async) madvise$auto(0x0, 0x200007, 0x19) (async) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) madvise$auto(0xb, 0x0, 0x3) (async) madvise$auto(0x7, 0x4, 0x2) (async) r2 = socket(0xa, 0x5, 0x13c) getsockopt$auto(r2, 0x20000028, 0x6, 0x0, 0x0) msync$auto(0x7, 0xfe, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x7) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f009effffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mbind$auto(0x10, 0x0, 0x80, &(0x7f0000000040)=0x4, 0x2be4, 0x1000) executing program 0: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) executing program 32: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) executing program 3: mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) writev$auto(r1, &(0x7f0000000280)={0x0, 0x45}, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="080061000100000008006200fcff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_setup$auto(0x59, 0x0) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRES8=r4, @ANYRES32], 0x18}}, 0x80) executing program 3: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/class\x00', 0x800, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x5, 0x0) msgctl$auto(0x26, 0x400, 0x0) rseq$auto(0x0, 0xfffffff4, 0x0, 0x7) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/mtd\x00', 0x80000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r0, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) write$auto_console_fops_tty_io(r1, &(0x7f0000000040)="0152f1ccbaf0a250747d8adb", 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) setsockopt$auto(0x1, 0x1, 0x46, &(0x7f0000000000)='\x00', 0xbb) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_NVRAM_INIT(0xffffffffffffffff, 0x7040, 0x0) socket(0x21, 0x2, 0xa) select$auto(0xb, &(0x7f00000000c0)={[0x40, 0xfffffffffffffffb, 0x0, 0x3, 0xffffffffffff4fc9, 0x9, 0x6, 0x0, 0x3b73, 0x5, 0x7, 0x8, 0x10001, 0x2, 0x6, 0xade]}, &(0x7f00000001c0)={[0xfffffffffffffff9, 0x3, 0x100, 0x51b, 0xb, 0x0, 0xc, 0x2, 0x31, 0x9, 0xff, 0x1, 0xb, 0x4, 0x101, 0x5]}, &(0x7f0000000240)={[0x3, 0x3ff, 0x70f, 0x200, 0x913, 0x9, 0x5, 0x8000000000000001, 0x77, 0x7, 0x7ff, 0x3e95, 0x6, 0x4, 0x6, 0x10]}, &(0x7f0000000140)={0x101, 0x9}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x5608, r3) executing program 3: mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8040) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1a) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r1, 0x0, 0x20000000001, 0x7fff) executing program 3: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) tgkill$auto(0x0, 0x1, 0x1) mkdir$auto(0x0, 0x8) socket(0x22, 0x2, 0x7) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r0, 0x5408, 0x0) executing program 3: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x18, 0xa, 0x1) r1 = socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) quotactl_fd$auto(r4, 0x4, 0xffffffffffffffff, 0x0) shmctl$auto_SHM_LOCK(0x10001, 0xb, &(0x7f0000000440)={{0xfffffff7, 0xffffffffffffffff, 0x0, 0x1, 0x7ca2, 0x3, 0x6}, 0x4, 0x1, 0xb7, 0x8, @inferred=0xffffffffffffffff, @inferred, 0x9, 0x0, &(0x7f0000000340)="c00f87773c44b8b6cbb6c50dd42957f448855f3876a33d06df799f0536f433e46520f1c8fa1a9f1546f6f356e75612bdd0353e293c24a990cd9e716aa5f0e9f3", &(0x7f0000000380)="a1937b45e771290c616e3c402dec57ecca600893cf1f4849977d9fae8284674b03acc3f1d5c386d6b14792ee9eab958e39a3e504a8bb2420159cc381ddc6213b96c769f3a07b33e0aaa522b5237af57f4cf89209654b44caf89ab73dfc865e011db686e789993baf8cf436ebd8cb50062131503109c72569d5d2f88599716c595a15b89d93a6398b689fc755dd5e0b5b0d57cfc128270d18ceaf45b3c306ed35d08e3a3f1365033849594b705b926f5fdb7de37d5ee96165"}) sendmsg$auto_IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000001900)={0x1680, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x145e, 0x3, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @pid}, @generic="8b8bd25fece342c432878ac66463fec7b55c680b601bb7b3aa9a775e34f77decf4c1828704441f1df271bf59112a60ff2324e639ae5ed4b94d6d0e35b882404c8d36804d45bb6bd89bfcd043d1fe471d3ec57e6d54655478aec001113799d408f8468b02bc30e5077718f6916e9c6d4404a40e1809eca74f0161ef843ecc6a4b46e6", @nested={0xea, 0x144, 0x0, 0x1, [@nested={0x4, 0x47}, @nested={0x4, 0xdb}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0xda27}, @nested={0x4, 0x128}, @typed={0x8, 0x14, 0x0, 0x0, @fd=r4}, @generic="6ca420c5ae223ead8f4be36f25b2c0718b444b98088dce7df68e3e81808a506e59c51d3e74f18bf91c09b351155a8b6c859bd07765e18122c19746bcde429cf675ef057aca852ade921f813313b9e655d80624c9af129345631a22428badb0a820c3286eeef1dad5ae5eb66e0480dd92fb20a5d888cbc6b720fbd70fd4c1d2a5e4fe7e7bff704dc196ee2b449cf44f2fa08138685e3078a116d23700b4ae7072c5a558cab708bf8f039756cce3911f8c5b841ef4669ce15834c1a77140cb71fc3891", @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="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", @nested={0x11e, 0xe, 0x0, 0x1, [@nested={0x4, 0x64}, @nested={0x4, 0xba}, @generic="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", @typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@loopback}]}, @generic, @nested={0x14a, 0x13, 0x0, 0x1, [@generic="8d9dfa3bd02f355a96eb6109995c0b2f70c0b0cff7f96677fcd201dfe1cb6d2baebd03d5c1e74d408150564ec7d0ee2c22882eb9de2db00a3943eb5771c18fd37fa5312996ed81bb2a70544cb3371ffb3a61596a51c13695f41d3c8579edac899c459929523c675701818842730d0b7c96d1bac5192419", @typed={0x8, 0x123, 0x0, 0x0, @uid=r5}, @generic="cf9ac7b7ab2f2b25c00021efa8cc7722ec5e23e21260d3c47669861eb5afd3fb013bc74be10b27a6257fcb79b12dd8c061986982ee37d4233873c381003c91e12057e4fe4de339f3608fe5067073cea3028dc3d858a4003128226a5d4a862d2167a0e61524c21c8c44a3d7c85a170850c755106d2138b5a9863f11570dd805e7a28ed71b72a1a2f6f44f4af7596c3ecfbb97a2f6d9b3514a2ada101d1f882559d74aba2440c7692005b145da398e53d526d20ce2a86fb7521add3dfe702ec422c1c8b0", @nested={0x4, 0xb3}]}, @nested={0x78, 0xf6, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x4, 0x64}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x6}, @generic="596ca0b1488ea6a0c345fc15b88d5a2b6ffa7b0ade5ba46aa9c1d39a8193aa05508f53", @nested={0x4, 0x10}, @nested={0x4, 0x4c}, @typed={0x8, 0x21, 0x0, 0x0, @ipv4=@local}, @generic="22cde702cc2e4febfd7454751a4bb134dd2a79ca08900f6fb6f736f693b53fcfb281a0178a", @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x3, 0x0}}, @nested={0x4, 0x88}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc2f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @fd=r0}]}, @IPVS_CMD_ATTR_DAEMON={0x1f5, 0x3, 0x0, 0x1, [@typed={0xa0, 0x5, 0x0, 0x0, @binary="1bc4525b65adb4ac8bfa5b05591ad86be9172955e7fa6cb16e32cdba316f5559366898317edac346b74b8c49f90c7303ce934d6617c9c4946a4c7eb811944eef7bee65a5ec787d6d2a48c24172a9cd27180c1da011ce56210065fa631bd23338037604ce2a6a42bbd212695e03c1efc5790e161cf7f732d525b2b75b008cb9b6c18e1accecf85293929ef2aa68059891312bf4bc959eadfb5a74acfd"}, @generic="203b4e5cdc6863d3e6207e55ac42883bd0ed48ebf8957ad1c816f7c28cf9d4ffdec1ab123e61e15ab720605d27a5fbadc99209cb17dffef6cfd04d6565aeaef0b38434266b8cdf7c068016f761d7772d47b20a4d761010ec53568f4bab0c650ebcf4e93fb6356d167ccd15b97d04a20267e0328120564f82efaa50507444aab8d2c1f7ded32003b95da8ca4e8edd7f9040e3eba21b8ab0d7513d8fd4450156a3b91f72fa72344bbd665bf510047cb39eb02d56f14853a81b05199800ccc315d62cae1922c2550e10f04702508fa651e7fb4d880b", @generic="2371be940a082411c16f59f902c743a350d015be173c571446494218505c75ecff3fa3f3f7ab385576270a7422f9d96b54f0b7dcf1e8899084a7bbbde107e2b9f327615c80c9cd24d4a38de009aba6148c78095e52f2abb4c56ef296e0bb7ceef6665ea66eba8fca1d7bb095d6f966cbfc6a244668b017e28c1b2d4f3c"]}]}, 0x1680}, 0x1, 0x0, 0x0, 0x41880}, 0x48000) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20006, 0x3, 0xe72, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x4, 0x7ff) wait4$auto(r6, 0x0, 0x80000000, 0x0) rt_sigqueueinfo$auto(r6, 0x5, &(0x7f0000000240)={@_si_pad}) write$auto(0xffffffffffffffff, &(0x7f0000000080)='#-*,+\\}\x00', 0x8) unshare$auto(0x40000080) executing program 3: mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) executing program 33: mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) executing program 4: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f000000000000030000c0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 4: r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0x0, 0x9, 0xc8e6}, 0x27, 0x101) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r2 = socket(0x1d, 0x3, 0x1) getsockname$auto(r2, 0x0, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000180)={0x4, 0x1ff, 0x4, 0x5, 0x4800000, 0xffffffff, "b8556e95fd689b52ae05aa60209708fe", 0x6, 0x8, 0x17, 0xa7, 0x1, 0xfc, 0x81}) r3 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) read$auto_debugfs_devm_entry_ops_file(r3, &(0x7f0000000940)=""/46, 0x2e) fcntl$auto(r1, 0x400, 0x1) read$auto_tracing_stats_fops_trace(r1, &(0x7f0000000000)=""/250, 0xfa) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0xa2400, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0x0, 0x9, 0xc8e6}, 0x27, 0x101) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async) socket(0x1d, 0x3, 0x1) (async) getsockname$auto(r2, 0x0, 0x0) (async) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000180)={0x4, 0x1ff, 0x4, 0x5, 0x4800000, 0xffffffff, "b8556e95fd689b52ae05aa60209708fe", 0x6, 0x8, 0x17, 0xa7, 0x1, 0xfc, 0x81}) (async) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) (async) read$auto_debugfs_devm_entry_ops_file(r3, &(0x7f0000000940)=""/46, 0x2e) (async) fcntl$auto(r1, 0x400, 0x1) (async) read$auto_tracing_stats_fops_trace(r1, &(0x7f0000000000)=""/250, 0xfa) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0xa2400, 0x0) (async) executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x167c0, 0x152) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setpgid$auto(0x7, 0xffffffdffffffff4) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000), 0xa) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r1, 0x40044145, 0x0) ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, &(0x7f0000000100)="36f088b87bfe468f324f00fc60a01a18f9d1e34d813d4b558061677ca920738feb61791ce8f7af4d754895925e7ba736b3c9e9c5ba570bd5491ea83dcd05db74774669a4ca194e5136eb04bb2c01e3fee9a0505620603d150052f5e8b19bd1db7ed1bf086360c5b80f619b77c4331dab395b88ada34a84904a7ba805e191b31c1092dec0c3b434c4132787f9c85c70bbdb5bcfd902da8fc52c8496d4f6f57680ec19a285b5a593587c273682d32829b8df1e269f28c074ddc9ac0d5c611ac89add24fbcf2236ba4a8d45d7c2b2f83568c6594739c837e71490d0a38e7adb") openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) mmap$auto(0x3, 0x2060009, 0x7fffffffffffffff, 0x7fffffff, r0, 0x8004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) io_pgetevents$auto(0x7fff, 0xd47, 0x3, 0x0, &(0x7f0000000040)={0x100000000000000, 0x2}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) r3 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) futimesat$auto(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xb, 0x100000001}) pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) splice$auto(r4, 0x0, r0, 0x0, 0x768, 0x9) close_range$auto(0x2, 0x8, 0x0) executing program 4: mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000480), r3) shmctl$auto(0x3a9, 0x16d, &(0x7f0000000580)={{0x6, 0xee00, 0xffffffffffffffff, 0x100, 0x8000, 0x5, 0x4}, 0x40, 0x4, 0xb, 0x6, @inferred, @raw=0x10, 0xde4, 0x0, &(0x7f00000004c0)="ecea", &(0x7f0000000500)="29d4c45d90eddee334bc10951a649c51a2f426b4505d85262b04da444efd83b0ed5cff471f9485e3ecd0fa9206913dccb1e5b9d5ee13c034ddc269d153fca7e14697a286435808a946458c06cae902afb62e1a2fb76e77f588a48e647be62868fec031"}) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000001180)={0x14ec, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0xf2, 0x3, 0x0, 0x1, [@typed={0x8, 0xb5, 0x0, 0x0, @uid=r5}, @generic="c2184e10db349177ab61c22ec1433da73ff5ff97266360a76d3e5d5b2e306e60a388444ffdc3593a98d8014a1cee702732f826d32204986afcbf1648a8a483981c17a0655abe7921a12cda0a1169f56f4736ee546b2727e1ed79d9af41f5b927ef42c0d3aa33080b8482f59410ecbe1a4518f425b5442fda68b78ea734fd16647a7be84a91bc8abf0ed23fe6fb3d2813296a1b948fc9951aaa672ffc0bb33cb6f1d6ca03", @generic="cd74f188c91081813ab0db7288642bc28a8891084818a048c3673a15b28e5d151d2b38b8cd8ed75cb3eac8df6c897ef3a224785e06979dc289ce920d312faebd8a90"]}, @IPVS_CMD_ATTR_DAEMON={0x1b7, 0x3, 0x0, 0x1, [@typed={0x4, 0x12a}, @generic, @nested={0xe3, 0x2d, 0x0, 0x1, [@nested={0x4, 0x63}, @typed={0xc, 0xd8, 0x0, 0x0, @u64=0x81}, @generic="bb1087eadb1c6963b3be40cb94eeb2388bd85c29b634195cdc989a5654e787937807647a166c23ce3176d6f958975c74b796323cb16b63e66e3921c2e43f15d8eca214f578ccbef1f7ded18481b3182db0a22eb4c4ac9b9214b0b76349536b5f2886421a8789bc1b38655cd7b0605b3197dd115c8c03881d9c61c523b985f2923278324e3e0b670efc9f17a33474eef89cb38705d629f538bd50d097d780d1a27f8cc2c003d710914d6e01a42c86b73c47b7c52fe84d5d9754f0f82c2d4c91a31ed9af", @typed={0x8, 0xc4, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x96}]}, @generic="ed583b14c8cdd5bfe22511137d2b16279d9a7c519f90931af1f12be1894aa3b3440ea05d3c2be1d341e99549ff698f942161f6697ea8427a4b1ccd674246d31f3fd9a8c1577fc3be53a8b96eb2a727c72e11e5e67f86b12eea0e07d57ac5f37fee12a3db6ed0482545e6831749fd4325e72d61793b2ecf48dbeeb005b2ec4ba335d4ce8b3a84d968e1bd671f3ecfeabf0b22d932d8cbb7952981fd5e72e722c58172d0548ab6314ae066e00b0c277343f7335651bc72c1d73c80737b924798f295443a50b17685dc065b3a"]}, @IPVS_CMD_ATTR_DEST={0x1173, 0x2, 0x0, 0x1, [@generic="0d36b99361b746c60f879dc06c116186026f8588f5c3673b0b4ed6bb940f2a234056be9f21d726f7736feadb9dad09902f3633058230f3bdd0fea271c213b0c0752a7a5c32d500514acc4bb9ee83518545310b19110e9416a33f8fe24176cedd336a6e5a8f90cc7a73874804b3d74ff233239b6f83938d26c905e70827800f52781367738cd11f0650fff5", @generic="eda9e53dcdc6bda0f6a93fb8f92c3fb77bfbd11660cb9a1808a2939f34d95f8f4ae020b906c2bdfb14798961dba37fbc92b0662691d9c0ef75356e84b9e656e2d9534f09d2234ef2", @generic="90ae998d2968e109764c9b7060b953831f01a03f01e92a342241f475ef693115a9470c448e2758eb0715bfd8476684c19c28bb817a3574f16a0d69f3bde8dea320e329c4f42ffee8c7933e0de85599b33d9c14c6fb1d27c257f9f2140fcfc2aafa75c10593e6c6e0ffce0b8653d3734992bfa648d3a5fe2e77cfa7e3e91247080ffb33074b1ba5763d5d3966a2b1b2ef53216256", @generic="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", @nested={0x8, 0x118, 0x0, 0x1, [@nested={0x4, 0xe2}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_SERVICE={0xa8, 0x1, 0x0, 0x1, [@nested={0xa3, 0x105, 0x0, 0x1, [@typed={0xc, 0x6b, 0x0, 0x0, @u64=0x1ff}, @generic="c539d7f79fe3f1c7bcd9598b47d4bc11553d9eb1394accc89fb914f089a72c5ff4aa4878481ad79305e6b4176bc871e7ec768fe7a4fdfda52f6da4bda73e88b86d89bb0f438cd8ffe51263f96a5b2bc8c930494b19684196a7b93bfa06f02444efe6c7bd6b18853b4aeea8ee565d8c35053c73d7141134fe0c861a", @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0xdf}]}]}]}, 0x14ec}, 0x1, 0x0, 0x0, 0x8001}, 0x1) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x2, 0xcd5f, 0x1, @_kill={0x0, 0xffffffffffffffff}}}, 0x7, &(0x7f0000000140)={{0x5, 0x23}, {0x7, 0x8001}, 0x1, 0x3, 0x3, 0x1, 0x0, 0x7ff, 0x6, 0x1, 0x6, 0x7, 0x691, 0xa9, 0x0, 0x7}) adjtimex$auto(&(0x7f00000002c0)={0x2, 0x0, 0xcb, 0xcd, 0x3, 0x8000, 0x3, 0x0, 0x80, 0x4000, 0xfffffffffffffe01, {0x6, 0x10001}, 0x4, 0x2, 0x7, 0x7, 0x0, 0x64873d63, 0x7, 0x8, 0xffff, 0xa, 0x3ff}) sendmsg$auto_OVS_DP_CMD_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_NAME={0x6, 0x1, '*\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8040) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, 0x0, 0x1a) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/module/ib_iser/parameters/max_sectors\x00', 0x20a42, 0x0) sendfile$auto(r7, r7, 0x0, 0x4f64a1d2) adjtimex$auto(0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x10eb1, 0xfffffffffffffffd, 0x8000) socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) executing program 4: open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptya3\x00', 0x82e343, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/shmem_fallback\x00', 0x101700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) socket(0x25, 0x6, 0x0) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000001080)={"f2b0e77c15814ccbd31cbfc1be00641bdbc5590fa669dd00000100000000004bbe432f9f1498df37b37b5682b4a45de81ed08d2421f6d4dd6277f0cbf348d3b6d6d237ddee104e8bdd3134c07c645c9e1058f625c2250683796a35edbe0dc9a99f436e05c010101fda81b336aa520d52594a7366f205857c7c4f08af2874e4835f0088b46db869b0de065b53d4470ba071c622eb6d174c6b8afcfed6e66c011ee02367a79b51bfc45a9d624b0533400f784075094246f86a42fc2183ebab9eaf7f0101d2b1555b3d2c1213c9cec2d78dd57a1d628d93f379a7b9e65d4ec3a7ab8b7ccd5db4670f000061c8316fbe84aa6f2900", 0x3, 0xf}) mmap$auto(0x0, 0x20009, 0x20004000000000db, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x8208ae63, r3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x133e02, 0x0) bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x630, 0x57d, 0x9, 0x8}, 0xa3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) executing program 4: mmap$auto(0x1000000006, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) syz_clone(0x800800, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000, 0x5, 0x0, 0x8, 0x2) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) write$auto(r1, 0x0, 0x800f) sendmmsg$auto(0x3, 0x0, 0x9aa, 0x7000002) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) mmap$auto(0x6, 0x100, 0x4000001000df, 0x18, r0, 0x4008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd13/queue/max_segment_size\x00', 0x400000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x80000000020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc1}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x7, 0x8) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram2/integrity/read_verify\x00', 0x7095c2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x10, r2, 0x5) dup2$auto(r2, r0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) executing program 34: mmap$auto(0x1000000006, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) syz_clone(0x800800, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000, 0x5, 0x0, 0x8, 0x2) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) write$auto(r1, 0x0, 0x800f) sendmmsg$auto(0x3, 0x0, 0x9aa, 0x7000002) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) mmap$auto(0x6, 0x100, 0x4000001000df, 0x18, r0, 0x4008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd13/queue/max_segment_size\x00', 0x400000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x80000000020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc1}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x7, 0x8) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram2/integrity/read_verify\x00', 0x7095c2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x10, r2, 0x5) dup2$auto(r2, r0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) executing program 6: r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/loop2/poll_stat\x00', 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) userfaultfd$auto(0x816) mlockall$auto(0x7) mprotect$auto(0x0, 0x8000000000000001, 0x6) r1 = clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0xffc, 0x100000004, 0x100000002, 0x0, 0x7ff, 0x5) setuid$auto(0xe) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r3}, 0xa3) socket(0xa, 0x3, 0xff) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r5, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7ffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r8 = prctl$auto_PR_SET_MDWE(0x41, 0x2, r1, 0x2, 0x9) bpf$auto(0x3, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex=r7, r3, 0x8, 0x5, r8, @relative_fd=r4, 0xb4}, 0x8) pread64$auto(r0, 0x0, 0x1000f429, 0x100) executing program 6: open(0x0, 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) fcntl$auto(0x3, 0x400, 0x2) ioperm$auto(0x90d5, 0xc, 0x2) executing program 6: mmap$auto(0x0, 0x8, 0xffb, 0x8000000008011, 0x3, 0x0) executing program 6: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) executing program 6: r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/sub1/status\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_options\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x80001, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) ioctl$auto_NVRAM_SETCKS(r2, 0x7041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) geteuid() socket(0x28, 0x1, 0x0) r3 = getsockopt$auto_SO_SNDBUF(r0, 0x5c5, 0x7, &(0x7f0000000040)='/proc/thread-self/net/can/rcvlist_eff\x00', &(0x7f0000000080)=0x8) ioctl$auto_RTC_AIE_OFF(r3, 0x7002, 0x0) pread64$auto(r0, 0x0, 0x594c, 0x9fffffffd) executing program 6: r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x600, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xdc) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x3, 0x9) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$auto(r1, 0x5502, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000000c0)=""/215, 0xd7) socket(0x28, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyw1\x00', 0x20000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20940, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0xffffffff80000000, 0xffffffffffffffff, 0x300000000000000, 0x80000003, 0x8, 0x0, 0x5, 0x10001]}, 0x0) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x80000000c, 0x4000000000df, 0x44eb2, r1, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) write$auto_proc_loginuid_operations_base(r0, 0x0, 0x0) executing program 35: r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x600, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xdc) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x3, 0x9) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$auto(r1, 0x5502, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000000c0)=""/215, 0xd7) socket(0x28, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyw1\x00', 0x20000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20940, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0xffffffff80000000, 0xffffffffffffffff, 0x300000000000000, 0x80000003, 0x8, 0x0, 0x5, 0x10001]}, 0x0) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x80000000c, 0x4000000000df, 0x44eb2, r1, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) write$auto_proc_loginuid_operations_base(r0, 0x0, 0x0) executing program 7: prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="210026bd7000fadbdf25010000000800088004004080"], 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x80) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, &(0x7f0000000100)="0537af53ed9030cd811d944ea9fa540bcc2e935093eb0a8bf7a36a7a49241f82525a20d768f76bd71f261e20c4f095dac74a15a83e4bc7292aa6b0f487f3c7136462e3e943aadf737f432b53eda491d572d3358a8aa6596c8581a929526e22cb0505fbb9780a2a47af540f7909743b") write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x100, 0x2091ce, 0x0, 0x0, 0x6, 0x2) prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, 0x0, 0xcd8, 0x100) close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x40000080) prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0) socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x10, 0x401, 0x300000000000) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x82, 0x0) clock_adjtime$auto(0x6a, &(0x7f00000002c0)={0xc, 0x0, 0x1fffc0, 0x7, 0x0, 0xffff, 0x51, 0x0, 0x7, 0x9, 0x1, {0xf3e, 0x6}, 0x2, 0x5, 0x100000001, 0x4, 0x0, 0x9d98, 0x4, 0x0, 0x0, 0x8}) r2 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\b\x1a\x1e`0x0}) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NFC_CMD_GET_SE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}]}, 0x1c}}, 0x24000000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$auto(r4, 0x400454ca, 0x38) ioctl$auto_TCFLSH2(r3, 0x8926, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3b3da7541f6379a90e400200000008000300", @ANYRES32=r2, @ANYBLOB="0a000900aaaaaaaaaa11000008000b00ffffffff"], 0x30}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) executing program 36: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NFC_CMD_GET_SE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}]}, 0x1c}}, 0x24000000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$auto(r4, 0x400454ca, 0x38) ioctl$auto_TCFLSH2(r3, 0x8926, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3b3da7541f6379a90e400200000008000300", @ANYRES32=r2, @ANYBLOB="0a000900aaaaaaaaaa11000008000b00ffffffff"], 0x30}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) executing program 2: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x7, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) executing program 2: openat$auto_transaction_log_fops_(0xffffffffffffff9c, 0x0, 0x2800, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a000100000000000000000006000600050000000800", @ANYRES32=0x0, @ANYBLOB="0800040003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f20000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000280), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x29, 0x5, 0x0) executing program 2: syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/x86/tlb_single_page_flush_ceiling\x00', 0x1, 0x0) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x2d) r2 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r3 = socket(0xa, 0x3, 0xff) connect$auto(r3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) r4 = getpgid$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x11, 0x0, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000001900)={0x14bc, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1496, 0x3, 0x0, 0x1, [@generic="0ae556ea96b6aac20a2df353bb08ecd46a7f933d1b2db8ce9af498e5ff3a90bfe88cc0b1e2e58b0f02ef589c88720e1e867e4da84e9bd27e4e7c2e138ed9b259006d0495ac1d03abe76afce408df49a9a4d2c79e8416718b6ea62d96bfe4d485b5898da01e69d213069313429fe114911f46d2480f", @nested={0x1111, 0x43, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @pid}, @nested={0x4, 0x5e}, @generic="1b6180a9a251a5f7309b5b6b8af06ed32ba9a6c9b4845494259b2eee6bf6aceccc80f3c1ac1e002fbb719b8a15e2fe551c7c038ef05802e35f6c3566675751865ee538b9e57ac3c3ac0668a4b3929be439d1ef4cdd24c7415036f9d02f18333fe5fccf1ccb5a61d1e047fa29c9119ab9bbea68f91fc936910e843c7c568c765383c07ce45c309fbf64924e2567db900905537a8003e022f7a044", @typed={0x12, 0x14b, 0x0, 0x0, @str='/dev/snapshot\x00'}, @generic="395f418d8ccd213b76afaae11be06a5a75d1fbe210c40cb791a0abe156bc52949221a980a0b63be72353f97a8f5d139effde40655d680f49c3d509c479e7c778ba80c93a332b73fee5e7851d99b7790790b1f87c42079246a9abdebcae1f1c9e91fc9f5ab439fcaf541fd2c8b1eb175118288d8bd28a08922d56f8158609e7b331e7cd7ea385ccc17d754b0721cc30b4483c77c13881e91d8a66c67259ad5de87699ed7aad541602fde260f449ade26661d40e3d086214b7d1c1de11afc75422fe9c0fc92288f6c0fac3310ab62daa907216be544a6802cf4d296fc1fefeeced4c07bfe7917259624af5a57c2523867e02012a9b1b8fed77e834fb5ce2aac1a9d17d1bb330d9d97359525b5c6e8f8ea241434498782383ccfe81dd9e34d7e8562ee0508e202cf2c4852b9544c656f7e3537bad6a31829cc6f72542521617d021bd865d8d0eac04e2c7125138d707c079d1baedcdcfdf4877aacc518102a197c2b13483bf1bc61d03d118510b526d04f12346862dfad3a2cfc35ab3e50a51cd2ce2386f5fd4e1a8f6fc6a4037f45075abf0e9096dc477cb2d7c8fc5cfc211b4f2e8fdc6f476db07af16e632f220f732b843aa368514c8b596ac9f3305ec7a483dd2ecc57c10330cba81854533a6d46282116992bbb5ef08e982a7e1323a719e461a87f9bca967e5055d3d8271a55e6b2153b45f106df057911c306f683fd22aee23b693c6805561ddc3c658c39d33e0bb7901954ff315d6a88f25acbd2e4ed788cb0b54df51330eebc51e4b132f435b24d3856cc7e2a4ed6fa8e15b34032ae84508bb573e7337d61646fa05654ab65cc465431aee614f80c6964241d74564d3f9d813487a9af11bbf2755ae6c616cfb0c94ac179484277eafa47df9a8c8a5019712cdc727e335bac522bdd442421df0cd0b239eccc8e32a6bcc052eb91ebbc82f2cb9243c983776b01501ad5f873c1845a3e17a09fb0821b05af5a3e0123d95c4b4e304ebbf107809b67f67e4f004cb61655f77970718c53910799bcc3d8e87946adee8364181b0865fcdae02fe6a25e6839149313e93856f6c24b0dc1e0246e2bb412e0c6584f355737c24b91622388bc331f39c29940c339ea2d7078af156df5889cab8d7ead6d06bc12f63ead8df499f8a5f9f4754035b1435df49111b30a82c926cfd393b0637644e5e80578aa8eb47335672cd60aebe4b4256e80f0c5f2e4180f74ac73ac2da18f19fb067d307143d1dacc09d1dbd194104f3e3434ac32aece53b37c176ec04db39c1bfffbf885512c037f8a980fcb1eb6410eb5a133fad5368b0ac79ccc6f27d1e3e06c1df359aea1a87f31ce1af207c6683af001effca7a27a095d0180cf3c9ac00f64d162eb80b3b10ffbe62df3c6469647236be30ae99d4be4c78af0fc1a451b08f1cb23a777d734cacae0caf2d16259d7114b35d0ee44986bf0d45429b569f16d1d351bb8a8cf1c742d51a1b9ff5a78110335e5f0a7788ae04cf354e8eb8e4d57edced746749eb457fa7e0d458784df469d4881ff9d1984609062d5a609997a685a77d3d845d8ba2daee91cd2367d3b79e538178cca2daf9d6c72f3e7284a306f31befc8d92fd7cfea609ee352ffc5afcdfe3f5bd21f91fcfdf4ab0983388c1723269f6e96af59ac1edbaee595e6366dc5eae80590106afeaa2f809743abf0c95aa2b7d7a5f16e5711fcfa935c35bff6836b95d90dad329422e437a1d7762bd2e51bfc2b937791bc24bd4fc7b071c255c99b4fad4186d262f435782801fa38aca78f268b3cd137a18630a31adbc7d30bcf4be5e26631a2afe4e424bdc42ec38424ad2df801ef5e5381c72ef69d91f97f280f6815706d91dc87534d24d11e5d8c7214febfc569ef1fb51d956f5f0754b0120c6381de4631218701586734252650f3d4f96fa28b1aca859c8b9dc7854a73c587ee5ff8c68b97085ee1e7419f8c8ccdc08b0d3cfe9676226ad462dd145cab90e572cf2063f98fa7d5366e4f142e2899a6de89fa5c7e304452f7071eb817d5293f57489a291b57e659e2e64ae344b7c54f92d34cc467ddcc0bde3ee28601d8d86602e51825e8b91f4cbed4ab4dd46f5e5772a9162b59f33240a251e2db690e162fdf261778b2c97d9baa53a2ea3382548923a5c001bdcb0c74312a13660a2407bacfd4dfa482e41a53f69598fa06d9ccae807fcc80b996cbc69444392bb2728543acf773298ff4239ad322bf4a91efcc3f3e2120ab7e909be9328a883b83cfc23145ad5999283b98642c5613b0b8e4cdc546dbff5192decf94b1857d59c39864a6310854ec11d9d7cade27f3669c1b47164379ebea8ece6c227980dce8219dc02b1f9584c4ac9a4658b9621bc1eadb877e59d9180ba8793688a98ee79c0898fd22c5d75a93a3873772ad58a0b55f9c7da67cdba525ccf5457827054d1e9ae30a47c85f7627be3ea5fb4951c3858cf5f4c82edb14eff5d319bd2f11d471fca26e9db245c9a72757e7de4925896ef38d34b59e76d57024d0a42c803f39d958f86c3c8eb4b62a0067fb8c0c75d5033064c6be9174c54efb94e014e652cb57f08a4461878d2dff15db7a03686bba65fd988e816e406e04e5b4b273618493819f5b8a1ced7fa7f30e72c513113484c1e82b5fe9bc817f903baf6b3c7f081ee7bb882fb2a7ad0da10177c3f45176b440dee745919f32f7b24093a106c17bb8ede6c42aaf2cb3e67cc71521ba474b9f397493b2beeae4ff74e462b7dbc8186a6f72fde7ebff371f4a2d2f7a8eefddb40eecfb6cf6926863755d2924c30f75ddea2824246c0675a130bdd454265f69a4daab67a39654045d0c9ee1a9795d266520301dda66974f3f0d7f9ca84f2c7e25039996484c27ada248d86caadee567dda1441dcc8cfe399ff1c80b2a8712cb237e911d48ff10db781d08cc73dacbeefbd7dc09cbc9a4aa9aad071be09fe992a09fc74ee1b70b9db987f2471c1d554a47247314c86da885b821cd634f5cc6046ec604f4e4adc1ad8065bf1ae7f73d249a8ee6f0e52ebd9c260175560262d2170224c08836af31742ec737cc3e57398ba166b2642af288135b87a7642d752880c64adcb20468d14d5f640d62fe5444cf87230937c4f86c437e28b07cc7e432dcc923533fc22ec7fe89b128fdc42c146c3777a650a29effe655754e35f402eb03db7906703b68e5f2602fff2af6cea73c51c5776b92c32bd9c90aa7e43a62dc79e850fbb89b3340af5be787b52551de131b2d9b97b90e24814045cf0fde5836861d3c3ec2c44967a35f6be70d83528c5fe9bd619c65115e8602375badc8bd2b8e7487cdd1d1faa5b89a8f8020d810b0bd039d4135ec94fcd445e0dfd9256642dfb93ab1a8ca66e47ef6ddf2728fd09cffdec7bf7030726277d880cdbaa6f36c1328caf3acaf77a382ea2296556ae9b49d6ff3ae05eabe3d5e7343a3b2d0a6c3f4f09ffe41e69832f717413c5ad78ffabb0265a667cff1e779406dd7d2761088c9916f4e6820817aebd4bad71cb846ec50c385ac82f16adbd49f8a29ecf115a3c8ad155fece142d0f6999509f03bb57ea4f0c13e301f671ccc6f274520e43e194776c65929297da82b4ead6c5ec0027b47e95b4de2a39a6b5ff988170144142e93210729088d4b7688f69e6ff3d2eecd13714661632ecabf09d41d403b34e3bb313994250532ba16bb93a018042625e491aea5a4a738694ae4c6192c2870048fd5c09d338a8213419e1c1d4d89b80bce2081fe577e34c8a0836fbee81cfaa19cbf7d70e4086f414ddb95e04d409471e267eb05d3bf7653223d2ff13d77f5547b543c36418fbcf55cf6e5658bbfcf26f00a1863b3c6ae8e1eeb18e5a48bb69d94698206598a15909f68deff87bec9b434235877603497dd1da0ed4910da7e8a5def74840de23223de0a9bd75767432aa1442e607a8adf6a552c7e41f93665633644eecd744299f1b57b317c8a4374290da06a7ffe1e2196c12753fe2a3343f2de446b3c9a10116a99f4112286db2e5881660ac858cca68d31ccfe45d363f6bdf1a98d77b69ccb14bd1f39d3473709db1f0df7b1ffb8c85e94dfc53a855266039fcce1aa5d3fdb7819a5cb4dcf517a4f17aa025c34ec98a69582e4ec2c2be2ee91eb5dbfc01bc89c6bffef56cc6c6f8700857ddf0c4a19cdc85012f08d15fec00056efb9d7a5b91b0cbcccb0121688a5117ff27e6b2e23b9caa1d7c43fb1251205aa44ca0c7d2d930c15c80a58335c539d723041778afc770877e9acba2eb236c85ded4b240fab3a6007c3849f7bc33227cde2228af8a16f82514d3e89270d071e91e42da1602311616d6dba9bd0c65f1f39aa94354434816bf6e8094f0053fdf29f10b9e71ea09b8295e12b1ae3793042a1ca17bf8c7aed3f397e3a0f78f1d1202e7c6ab43a0f7784ca6107350f187562e26bcba8d604e7e12c477ef42c75232396d351da2936718ae28d32984555e24a88282f8c01da47d8132ee34f1465a9e239b22c64c2380f2f8c2053e0ff19af020232be23efe687a63f1d2f91004f2ab83a1aa3e43f042f895bf12bf4b43be251affc9360100f03ffd2d5f8d9831a177ad21c2608ee416557e7be244ef7bdf43286a89c494046ce177cd3b12752d4f8121be31549e6cc4a529d5836ed4fa0949db363c10b9a63cd778ff901fb94cf3f87640324b247eefd6567b7d9fe584efe1137f597f450ef41fc7a531246526e5ac8a240041f4ad5d3ea4af670c718b488204a1671ed7ffcbd3c70dff205986dd71fb625d8faf2b059f7db10d6a153a292164f8ff6f493a465a3020c5b3d9b734fb950afe00e41c8b96313a9d1c2695582c48e15d16ffcc0f799dde1b765dc383326b6c5c3409e6c743be936b4bf7e6ce70fed010af80a4f69db2dd1f4b6d6bd0b598f79e85bef04a3a7df1364669bdb6f37b0ec195bad9e980e4f95777e5bb8daaf335959d33c8928a9cb20a44a53d232c17d2e5113a194d6e73bd3eb4f30e64edf8f4669b811ddb1ce06d29f1d96d9d57e90faef5f63b3949b658ee64ceb0fa1eb8d6c3a67c4b56f8a44400c17843ae1bf79e26f52d500b89e3c2cf78b246b54a85602011521e3fc56c585ab45a2a50bcdf9e4b78f1cc2dd4bd3f6b09f7a4e7ce60e963a8099b95cc500f47f6dc9cb95a402d9afd09b6132ab451a9afeae5ac124fa7c305717a506d211bda72c03fb928864e5e42442c333af4c1cf8d116664821d547fdf00f97428d7b09fb9adf0c7ad5f1cd844fbb8babadba23452cb04f8d158b57b6440781d4343d340703cf4c1fedc45b22be60d7e5d0ee5e0790dcbefe050b01c643911f287b9c812ebdd33e0262d762e65bae83613bd7ae70b9affcb56b73a992144bb0c363088fb4eb69e0e851124e69599f9883f1eb36649f6cc192109833df2f63923def8c90829b87cd6050e820cd4a76c8b5425f3d198f329bb4b4dca0eb5d943b57a05d607bef48189ddb51f34b425bf0fa782a76acfe1a9bb827b00e2e9d5b66157ba30ae3ff3f0fec3049cfa1d5e36731ecbf01f0143d0953faa8278cf6be98c69a621e18f34cac6bf9199270804759a281262303f99a5ec434c868052ff915ad7ea5bde411869e86933846357cedcdd4b26d6d0e9408b72b31fac9c77700148287be91c598cf4366dda5824c4ae96c24d6409872a3761e06709da56963871a3af979bf2170e55e828c1add71c30389b8065c53e70af50664b9279aa384c722bf4a718c6dee25970ba36d7ea29d63b58cf134fd458ba9743978cbfaaa595d423f63044f9d007bdcf843fcb28f8ccdfca18c8403", @generic="627d93aa42f40ad39e72806204876c62645d32e22db38cf26b22937449b0acd596f82d21bbab5d200dbe014bca9443d8ef194821a06d9151f0027a098a56ce0fe0fb799d8437668b53f1752dcb19744e1fc8cd"]}, @nested={0x5e, 0x57, 0x0, 0x1, [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x14, 0xa3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x53}, @generic="0baa9962d832bfc7a1598f73f290676159d5d963f0ef3f3694e8c4769e09a76a5681c9ac27bac98715719137d62e"]}, @generic="5b4616330f58eec7166fdb5686acea5e1073d07a6eb7b91e3eb3ad97fb23c2aa1e37e9c9253c0115d7c961fed3edb90a3043132ec20bdf79be7ae10344c3f520acf5783d0eb3c0e11c56c454f6919da28e35da492fd3bd376918d0d1db7541fe3db6ce2b222834198cbee80a7b8b144af6a3fea938b06a01046b00b17c01cfd123", @generic="0a8c25de9c6f31e39a6bcfad2f409551b2465a4c1003d3a46dc8740e9d4e1794644249f256fb7ba7b4475e04825ebcdadeb3d0824157cddbcb471d53880652048b58569b6e4c33ce64cb48ab36673752d6980118e2b398045597a158fb9fcc22e5ba4cdb205e8980f4ca5620bc9270655998e15fd4623e70d35bb1c3c2d4386f44f98217d65dc1b99d0995bb4e2f", @generic="1eecf67e42a1d61f4e23ea7292fa8f0b334f8861a5905219476eac17430e2a6298df7834dd39fea33d5140246b3c8cede37cc5d84006fce1b686f9aa64fbd490f5bdb6e8810fecef991664c54e804cd59dc1e3ce75bb3e4f7e12a5b3c9a7022868b3de8ec536b30525e4728d360702f8d5b0e5ddfdaefc630b8e9dcec51b6492186a79401903db258e75a34ca1c0f85639b3bdb06d35b5d220556679c0e28bdd", @generic="894e299d6260a47e11406008a472f6a9725b9fef7c39d86f448a815b8fe227", @nested={0x2c, 0x12, 0x0, 0x1, [@generic="dc641df00c5037ab80751ccffa98cf32a2937c8ff7aa7c751f859c9c5dba646cfa7737c23e800600"]}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r4}, @generic="81b8b1fc1c32599be89ba74119c806ea27f3aa5e9c5679a312270e7e81db4890806dea78fbeef252fe7f1b53f45998db15af37e140c0980a2d7fbcd426c4d79699daf726d795c9ee038fbb00977b0cb662122831dd9d93cd3f297d8ba7f0c40aa0be2f15b6a064c90ed84f6e5fbe01f3bf592c3a924602291753fa87cf056ef96dc23104d826ebf0cb14701dd5813e112b131f931c47eb04b4122e7add7159a42977ab9a220fea"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x14bc}}, 0x4c0a4) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) setgroups$auto(0xe32, 0x0) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) r1 = gettid() kill$auto(r1, 0x7) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x2, 0x2, r1, 0xf39, 0x7) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'netdevsim0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000) sendmsg$auto_TIPC_NL_KEY_FLUSH(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fd557453", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 2: readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) executing program 2: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/if_inet6\x00', 0x40100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000080)=""/104, 0x68) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r2, 0x301, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvmsg$auto(r1, 0x0, 0x4) ioctl$auto(0x3, 0x80045500, 0x38) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r0, 0x3b8a, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x40103d0b, 0x0) executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYRES8, @ANYRES8], 0x18}}, 0x200080c0) r2 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SEND_CMD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x41) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0xfffffffffffffff8, 0x6, 0x1, 0x613, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x8000000000000000, 0x4, 0xef8d, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x4, 0x9, 0x9}, 0x7f) msgctl$auto_MSG_STAT_ANY(0x773, 0xd, &(0x7f0000000340)={{0x6, 0x0, 0xee00, 0x8f46, 0x1, 0x6, 0x10}, &(0x7f0000000280)=0xb6, &(0x7f0000000300), 0x8, 0x9, 0x2, 0x0, 0x2, 0x2, 0x5, 0x67, @raw=0x1, @inferred=0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'dummy0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x24, r7, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r0, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001040)={&(0x7f0000000400)={0xc38, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_LIST={0x1c9, 0x2, 0x0, 0x1, [@typed={0xc, 0x43, 0x0, 0x0, @u64=0x10001}, @typed={0x8, 0xdb, 0x0, 0x0, @u32=0xffff}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x1000}, @typed={0x8, 0x8e, 0x0, 0x0, @u32=0x8001}, @nested={0x103, 0xaa, 0x0, 0x1, [@typed={0x4, 0xbc}, @nested={0x4, 0xe}, @typed={0x8, 0xdd, 0x0, 0x0, @uid=r3}, @generic="65807136fcf094f1f9d64a9b3911c73d77f2635c60a24ec449248f4b955cf9511aac7a8218083c7590b6102e1c1ce44063d3a8b85e0b856c255f3fc751ecfb61283af5bfaa090ce300ebbd8c454e807a25bef8a5b0d86ab8f1f67148f0f636fd232c88db9d5033632ecfab17578d108ce5ee95a74afc95e09b57310de21fa0e28a08689214d000bc47f5c25e6577f7ea8f50546734f12b2966ae2f35cad208bf3e118a71ad955d9b3abbfd6873508ec876c9a28092559c9439522a92fb2c4c932fb8c1cec8d6268d2c0666", @nested={0x4, 0x74}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0xec6}, @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x6, 0xf, 0x0, 0x0, @str=':\x00'}, @generic="ab4f661677ac7b90fc42457042c37c978877e49fd78f8dc5b58736d097e9099971c275c56295d352c65b0be44d529e6df1888dfe9fbad1ad38cb8ce2e1cc668ae40add7921bd20d98673a34075b95ca952f1686e1b4884eddbd65965d4206b358f81fc04ef5e5bda9534de6088c9027b3dc0329de976384e0c59cc1600187eed3b", @typed={0x8, 0xd0, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x36, 0x0, 0x0, @uid=r4}]}, @NCSI_ATTR_CHANNEL_ID={0x8}, @NCSI_ATTR_DATA={0x413, 0x5, "179bc16b8d59005349069d7f680e3a197f962b8436702a7e413e2bc967d0a444b6979c2b7e46507ace42501cb0f5d21ff11d518a446e27c88a20aac0b4d7bd5fa9dea12e57d5770795394b04f7e264b8a5e60dace14e7d241daff8afb7cbec7b4d1f9cd9def29e7053f03ed930985aa57300bc1ef0ad17de383c5f57453e2885bfc9eab515466c0623c4ceb136921eaa0dd39cb9484462645afb180e11009331c210a2a3c38c2393723a73c70e08a2f2e1f5ce96fdc8f47ca7d04deef306529155d8a1332c5a3f2dbc0efe65d998d6c718c3d68009e7ebe7804cc0b61fd382e158b6d5a614098de76e4fe8be136d5c10c823b2adcd6a7e9386ec2d4c743b1eff6e6ff38754eca01cfcb1f52791dc4b4a4c4b4c80fbc16e79034b4b6a9b224fb1b489a12af9a13d31e9af74dcb8b774a408286b3a95237d1739179b0ae6d7ab7680f65d0736626c1ce7b1d82b6b043ed3d75559322a9a1be74a58b6e38c6ec703903473d36168854dbc07b891217940b1dde3f2eea039fe82bea58eaccbb82559442dd26a57bc3afac005a3e93b4f1ca1a67deac33b89eaad7bdc20770428fa8dc6555889941e9ec7387b674e9e93fd9821216b7d39f76a831c3c3cef05cf3a3fdc582d1ca356950a7cbf4e3a2a7d65f341152e3d96269a0311b0b94b34042b84a4d9676a0a0289f5091e15d0541a986e58739ec47a74199a8a8a4598d2f5c26cefca7930a4b431b38943d2517f65ae6c9738083af681ec67249e2c2987610a7fd078ecff7ab718548b8a35541b74bcc775d02cfe238374525eaa5b6ee83ab7218d127544628c1530f15bf9dafd99b2ebb2467b81d02cd1f10ba73c45cae74c556f99c1e78b2aed64ede8d81ef2c788479abbb9aa438ce6c68be7d02062c6bdf7497a0f7134f0b4ccc50ec23fa29dd7167796b816d97e84c51b6ac558c1f8afc67f48ab4199b2907fe7c7e1185a68e09f73d30239d71143bc77312b1e198a0e4bb8bdfa4a70d768bd745b156d876074ad3f99761ecabb35ce47dc169479520225bc2bcb4483032dbdc7e062efdd53af38584093afaf6c66e4f1222c27d1e74b5b7ffb1762509e088bd5fe5153a074e7a462bd6176f99830d883d631c557d1f60444396c349536afa976230305c25d282243a6f8f6e6669f99a04c4155289e56157e4b774108b16ae2a146686edc444a7f4540c043afe11f9c1c1ea76e161b98205aa6ced06d7148cea200cfce21153298a0bb19bca9f9a3f1b03852734141793dd03ce6b34c80bdd07600c389d7d66bc61fb5b4a594b207eee36019a8164d14570cd49def78459b6b76f496315cffcc861cd97ad6dbb59adad89daa6e87226c70d4e7a763a15c5fffc32fc24d985a3cec2eaaac9b846e5a26630308e125acbab8db1103ceda04b6f6d3ebc552e396f3a9a2a6ef06cd6eb0a89ae7586718d8e0758eb0ca27ce4d349f5f5871cbbace7f"}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r5}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_DATA={0x620, 0x5, "371a7277025b3039c15a2f6e380aede2ccfcaa1103f8705ba8b7b61c956fc10dae881d0ff2b5214bf56ce7df3b649fb13a49be7164f7e094a8dfee6f26d3c488305962e0c4525ad86d6dce2a562f2c9502118dbb9473c24e2e7be68d6ee8fe09ee0dfd3b0a36c0d31c7bd16eacc48ef8f9d995f91731aae3f949dd3b1641c938c69e88556e1b4a37a613b3396019a8553b20ddc10500c91a87c3b1bc9c350f69072c8d92eaef8823eae7934f2514565186663d1ce18b383b20342542aa7ffcc3314f9427dc4d5ecad1609943874b935c73f14ee888b95dee976f7b00b2d0f878544990e9a2391109abd08a778a56c81a372b7735e927c2789680de7e74b79789f35d73afa5c0035cea88ae668aae45e28163e5b6fb0589ed00a1bd1f4b8bb9263a0d8f5ac0705f544ccbe4ddee7dbb1c8ca9a07f6090bead20f3bd3a7fb04c4313f8ab346afc27b9187f11b4c7f8cac9cc69c59776fb01044f9171d4ecb3584fd8a90a83a2fb135cee7abd3bb50d3f138739853e43bba1a27562e4404bf00e0e3d3a99d8a9f85146ff17f14b5132dae9936c6c59c3df6419d9a7e2825b764b41f6f73a996affa4bacbc01524fedeae4c39431340df6aad5999ebab1d27fb7f1c713b1be3b19493271f804ece59f89354d006ec83a022e8ca41c6f6ca9f87181a784d6b24c33e5338c6351aea87d43d694c3bf0f48bff9811cddb93d810e593b449e2d713b95882e8db9989bfa421724f6405604189a976f930d54e014a20a2ee852852ec8469b63188e8f92437246c2fb5ebd8b7290ea5feb3a53cb098bcfd28997722f0d91bb2e37532e1155d5b641040a4d3b001f9a0d451ea8f6df785bd02e43fe0c8f3a634c25e7fffaadeda96254b83ba0d7c1256bb14a59752ab761aee9ca44977f46507960f5c4120a4eaa24958fcabfdcf8a8cfa26ee87181e16ba0a43f64d31ab1db8d286a8d138b2870c4e5283b3ce0d2c4dd336b14d840dfce79d5a377f1e779f3ecad46b5a57e1b5f479f5063532145b778c71fcbc640f223159f2595c5b9feb598eddf40057e348dc533a560e70248d58dbfb77f2b61f963d4496d9cedae4142283f8602bb8ec6637191b86feb99ef294a21d01db333ea0e5a39ef92d3d8ee8744859c919d64cdd7d16e0d310dba5e1574ea104e8abf4309cc07845d47af03a1850ce3e1dc70660d7355311ac0c189c94486453b155ccf4e4586db353787004568b5dff511a1c3d673f65c9f6dbce7c9435641c9e4b359800d033dbdd7b7edb66a287f88386d06793a6983c24aa08b212278acc97c1d0f12db642033115faf743a57937a24f11e9e08773088ec32cad210863f87cbdec0ad7e4f75d0755ca20893c4ef3ed02914c0f6fd7e076c2d91842b32db9aba548f0c431b38edede2b65a276a462480e97ea0bc4c65fb21f3b04043335bf765bcd2f89d24b74f0796fc948239b119cf094cee27788a91aad45926dbb6ea47e52b46c82a854366ab04d3219b4236bcf352cd1f4b5aa8b7ccd6076b2b50f5094b85d64f7f6634bf7d419f91a1e84bcee6f803299e8fc683a6079894ce52c61172dac991520172b2465659a8570e2ed1255773e44495dcef5dd22e7fe8661ac019b3bbe2ced68b8b57a4584ae1c1e5d41d66fa1c7b6bb0b93068a23d91a48c3a91b43cd902d1dba2cfec6ba96875a6be2f41d34016e5a16b3330e9acc949009a59ad4cfebc4c654d1816a6170808763a25a98822f2268b26a836720dc9de1e6469979ab3bac1421576b27e1af510f6ed9508fea391c2e5e8bae69b85fc8642b7b662452f44fba13905e3cf4d68bdb06f829e3da7ddc56fe43fda6bd9d7ed5e896aaed7c6c3daf07c8914d835c4226c8fc5f08a8e577ae8a697e0bc5be8ab0dfd0df575d2be70f06e71cb9ba058fa90fa777003ab8324c72bc1c6272d4169676720e06be7630c2ca431f759c0c4546571a0393e3b231a716e4c357f93ca371be2151f55ce2e3428a0c84c5963057507a824d79b9d40cc078935b5c9cd35021070936060b623ffb90858441a273a859658baf7c1a02e33fcac7449a5a03fadb0bc1aee9018d6f22ae8e243865252a94e123c2d73c0e518dbc309ffefe96d49c26aed7f3995363fe462ee85fcec36496646c16000d52d3e838cb5f1d3a08391ea630a941bda17c1f5f7485a6ac5dd900077a8c5005d9685748d7bd0b5efd3a8358c4e4"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x5}, @NCSI_ATTR_MULTI_FLAG={0x4}]}, 0xc38}, 0x1, 0x0, 0x0, 0x8054}, 0xc80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = socket(0x10, 0x2, 0xc) r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r9, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xc00}}, 0x14}}, 0x10004010) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x1000088) recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0) r10 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd6\x00', 0x8001, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) ioctl$auto_PAGEMAP_SCAN(r10, 0xc0606610, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r10, 0x0, 0x9a6, 0x0) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) executing program 1: sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf250300000008000100feffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000d4) sched_setaffinity$auto(0x1, 0x1, &(0x7f0000000000)=0x1200000000008a) socket(0x10, 0x2, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0xfffffffd) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c000180"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) futex_waitv$auto(&(0x7f0000000040)={0xf, 0x105d93, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62b9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = fanotify_init$auto(0x401, 0x1) close_range$auto(r1, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x3}}, 0x6a) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x1002, 0x100000000000ffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pwrite64$auto(r2, &(0x7f0000000080)='\vX\xb5\"\xa5p\xe6\x1eRN8\x90\x86\xd9e\x1cJ\x99\x00\x11:\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xd7\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xc0\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6c\xc6\xb2Jg\x01JZ\xbb\xff\xff\xff\xff0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1e;8\xed\xf6L\x05\xe8X\xaf\xe2\xe3\xd3\xc5:\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]\xff\xff\v\xff\xff\xff\xff\xff\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1', 0x7, 0x0) r3 = socket(0x2, 0x1, 0x84) setsockopt$auto(r3, 0x84, 0x17, 0x0, 0x27) write$auto(r0, 0x0, 0x100082) executing program 5: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7500000000000000) write$auto(r0, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x3, 0xfffffffffffffffe, 0x12, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) socket(0x2c, 0x5, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000180)) ioctl$auto_SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f00000001c0)="1ab7") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x80) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = semctl$auto_SEM_INFO(0x3, 0xfffffff9, 0x13, 0x8) prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, r3, 0xcd8, 0x100) madvise$auto(0x0, 0x20499e, 0x9) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x40046205, 0x9) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) executing program 1: mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getrandom$auto(0x0, 0x6000000, 0x3) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000980)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/machinecheck/machinecheck0/monarch_timeout\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)="33aa0d7191af", 0x6) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800) r2 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r2, 0x7) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) executing program 1: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0xffffffffffffffff) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) prctl$auto_PR_PPC_GET_DEXCR(0x48, 0x6, r0, 0x3, 0x9ed) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1000, 0x6) pselect6$auto(0x8000, &(0x7f0000000080)={[0x800, 0x7f1, 0xb, 0xb9, 0x7, 0x7, 0x28, 0x2, 0x100, 0x4, 0x7, 0xffffffffffff6ee4, 0x80, 0x47, 0x3, 0x40]}, &(0x7f0000000100)={[0xfffffffffffffffc, 0xffff, 0x101, 0x4, 0xb, 0x0, 0x3f8b, 0xc, 0x2, 0x2, 0x7, 0x20000000007f, 0x0, 0x0, 0x7fffffffffffffff, 0x6]}, &(0x7f0000000180)={[0x5d58, 0x7, 0xa5, 0x7f, 0xffffffffffffff63, 0x6, 0xfffffffffffffffd, 0x2001, 0x4, 0x7, 0x3, 0x8000, 0xa, 0x101, 0x4, 0x9]}, &(0x7f0000000200)={0x6, 0xac}, &(0x7f0000000240)="84564c8c26b8144fd4d3e1ecb7942bbed10faff85baff45164fe66cd970aa99ce6e0b82e3f049231ba73698898fcd2a65389893a8ce8b267d7aa4f5258122e0b18ac67ffde635cac8164af89d15c5b3222a32a0e03b46c0b57abb954eb9a7ba2e851d345c9e7319f0334e91d93a1a639c9a157cbd953f98a055c6326e49c3691aa27e73928cfc94b6ca85e02c62ac8fc9925f5c6481c62e36169492d6741aa7e32fbc03e9391f9b9b275e7e9551b938d5b80bafbdc1dd37bfb2772dbc29cf87b41fa609e535de02906ee62739ad3f141062547") madvise$auto(0x0, 0x200007, 0x19) ioperm$auto(0x7, 0x6, 0x1) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) executing program 5: mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) (fail_nth: 6) executing program 5: r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x59, 0x7) ioctl$auto_SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000040)) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="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", 0xfe04) executing program 1: mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x30, 0x0, 0x56b) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0xd}, @ILA_ATTR_LOCATOR_MATCH={0xc}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x5}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x5}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/initstate\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x5, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x10]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x11, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) getpeername$auto(r3, 0x0, 0x0) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) execveat$auto(0x6, &(0x7f0000000000)='[[]$)%*++{#\x00', 0x0, 0x0, 0x1000) r7 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x2881, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r7, &(0x7f0000000080)="390d00a741ee", 0x6) getpid() executing program 5: mmap$auto(0x8, 0xf88, 0xdf, 0x20009b72, 0xffffffffffffffff, 0x100000001) r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/sockcreate\x00', 0x6400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r3, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf255100000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_NET_GET(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$auto(0x9, &(0x7f0000000000)=@bpf_attr_11={0xffff, 0x1, 0x9, 0x6, 0x3ff, 0xa7, 0xb, r0}, 0x9) r8 = socket(0x1f, 0x5, 0x0) mmap$auto(0x1, 0x85, 0x40e5, 0xebd, 0x405, 0x7ffd) r9 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ubifs/chk_general\x00', 0x10800, 0x0) read$auto_dfs_global_fops_debug(r9, &(0x7f00000001c0)=""/187, 0xbb) getcwd$auto(0x0, 0xffffffffffffffff) r10 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/v4l-subdev7\x00', 0x102f03, 0x0) poll$auto(&(0x7f0000000480)={r10, 0xffff, 0x29}, 0x6, 0x8) bind$auto(r8, &(0x7f0000000280)=@sco={0x1f, @none}, 0x6a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) iopl$auto(0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x80000, 0x8b) socket(0xa, 0x2, 0x0) executing program 8: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r1 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x56a, 0xb275, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r2, 0x40085503, &(0x7f0000000600)={0xd, 0x0, 0x3}) preadv$auto(r2, &(0x7f0000000100)={0x0, 0x20000dd}, 0x1, 0x2, 0x5) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffd, 0xeb1, 0xffff7ffffffffffa, 0x8) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty2\x00', 0x20500, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, 0x0) sendmsg$auto_TIPC_NL_KEY_FLUSH(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000000c0)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) executing program 8: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) epoll_create$auto(0x3e) write$auto(r0, &(0x7f0000000000)='/dev/nullb0\x00', 0xb2) close_range$auto(0x2, r0, 0x0) executing program 8: ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x9, 0xffffffffffffffff}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebd, r0, 0x8000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x4, 0x8) (async) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x2, 0x0) (async) io_uring_setup$auto(0x59, 0x0) executing program 8: ioctl$auto(0xffffffffffffffff, 0x80045439, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) readv$auto(r0, 0x0, 0x3) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x2, 0x8, 0x0) (fail_nth: 1) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) executing program 5: request_key$auto_KEY_SPEC_REQUESTOR_KEYRING(0x0, 0x0, 0x0, 0xfffffffffffffff8) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/mem_used_max\x00', 0xa081, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) setrlimit$auto(0xb, 0x0) mincore$auto(0xff7, 0x8001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio28\x00', 0x101100, 0x0) mmap$auto(0x0, 0x9, 0x9cad, 0x8012, 0x3, 0x8000) read$auto(r1, &(0x7f0000000000)='+-\x00', 0x5) r2 = gettid() ioctl$auto_EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=0x8) rt_tgsigqueueinfo$auto(0x0, r2, 0x21, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) readv$auto(r3, 0x0, 0x4) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) executing program 5: openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x9, 0x20008, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4038ae7a, r0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) executing program 8: r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYBLOB='h\x005'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x620081, 0x0) write$auto_ctl_device_fops_user(r1, &(0x7f0000000340)="a504ff4c280e43904055ceb3bc98cf2af453126b06d1f8b678ad4700b35e33bf24e0c6269dd4fcfeafaacd781a02e63a0f9cf51e53d742c6cd3e1a4531a69c151e3714d2418d3a55d79a114e8309e48778a229eef16577bd021ce7b48a29a4e1c32f5f0c3393287d", 0x68) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev bisect: bisecting 59 programs bisect: split chunks (needed=false): <58> bisect: split chunk #0 of len 58 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m49s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 21, 4, 1, 4, 26, 30, 30, 30, 19, 30, 10, 3, 22, 22, 4, 6, 30, 13, 1, 19, 27, 2, 30, 30, 13, 16, 3, 7, 30, 30, 10, 4, 9, 13, 24, 12, 5, 38] detailed listing: executing program 34: mmap$auto(0x1000000006, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) syz_clone(0x800800, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000, 0x5, 0x0, 0x8, 0x2) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) write$auto(r1, 0x0, 0x800f) sendmmsg$auto(0x3, 0x0, 0x9aa, 0x7000002) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) mmap$auto(0x6, 0x100, 0x4000001000df, 0x18, r0, 0x4008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd13/queue/max_segment_size\x00', 0x400000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x80000000020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc1}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x7, 0x8) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram2/integrity/read_verify\x00', 0x7095c2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x10, r2, 0x5) dup2$auto(r2, r0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) executing program 6: r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/loop2/poll_stat\x00', 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) userfaultfd$auto(0x816) mlockall$auto(0x7) mprotect$auto(0x0, 0x8000000000000001, 0x6) r1 = clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0xffc, 0x100000004, 0x100000002, 0x0, 0x7ff, 0x5) setuid$auto(0xe) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r3}, 0xa3) socket(0xa, 0x3, 0xff) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r5, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7ffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r8 = prctl$auto_PR_SET_MDWE(0x41, 0x2, r1, 0x2, 0x9) bpf$auto(0x3, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex=r7, r3, 0x8, 0x5, r8, @relative_fd=r4, 0xb4}, 0x8) pread64$auto(r0, 0x0, 0x1000f429, 0x100) executing program 6: open(0x0, 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) fcntl$auto(0x3, 0x400, 0x2) ioperm$auto(0x90d5, 0xc, 0x2) executing program 6: mmap$auto(0x0, 0x8, 0xffb, 0x8000000008011, 0x3, 0x0) executing program 6: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) executing program 6: r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/sub1/status\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_options\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x80001, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) ioctl$auto_NVRAM_SETCKS(r2, 0x7041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) geteuid() socket(0x28, 0x1, 0x0) r3 = getsockopt$auto_SO_SNDBUF(r0, 0x5c5, 0x7, &(0x7f0000000040)='/proc/thread-self/net/can/rcvlist_eff\x00', &(0x7f0000000080)=0x8) ioctl$auto_RTC_AIE_OFF(r3, 0x7002, 0x0) pread64$auto(r0, 0x0, 0x594c, 0x9fffffffd) executing program 6: r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x600, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xdc) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x3, 0x9) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$auto(r1, 0x5502, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000000c0)=""/215, 0xd7) socket(0x28, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyw1\x00', 0x20000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20940, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0xffffffff80000000, 0xffffffffffffffff, 0x300000000000000, 0x80000003, 0x8, 0x0, 0x5, 0x10001]}, 0x0) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x80000000c, 0x4000000000df, 0x44eb2, r1, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) write$auto_proc_loginuid_operations_base(r0, 0x0, 0x0) executing program 35: r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x600, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xdc) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x3, 0x9) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$auto(r1, 0x5502, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000000c0)=""/215, 0xd7) socket(0x28, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyw1\x00', 0x20000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20940, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0xffffffff80000000, 0xffffffffffffffff, 0x300000000000000, 0x80000003, 0x8, 0x0, 0x5, 0x10001]}, 0x0) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x80000000c, 0x4000000000df, 0x44eb2, r1, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) write$auto_proc_loginuid_operations_base(r0, 0x0, 0x0) executing program 7: prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="210026bd7000fadbdf25010000000800088004004080"], 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x80) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, &(0x7f0000000100)="0537af53ed9030cd811d944ea9fa540bcc2e935093eb0a8bf7a36a7a49241f82525a20d768f76bd71f261e20c4f095dac74a15a83e4bc7292aa6b0f487f3c7136462e3e943aadf737f432b53eda491d572d3358a8aa6596c8581a929526e22cb0505fbb9780a2a47af540f7909743b") write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x100, 0x2091ce, 0x0, 0x0, 0x6, 0x2) prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, 0x0, 0xcd8, 0x100) close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x40000080) prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0) socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x10, 0x401, 0x300000000000) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x82, 0x0) clock_adjtime$auto(0x6a, &(0x7f00000002c0)={0xc, 0x0, 0x1fffc0, 0x7, 0x0, 0xffff, 0x51, 0x0, 0x7, 0x9, 0x1, {0xf3e, 0x6}, 0x2, 0x5, 0x100000001, 0x4, 0x0, 0x9d98, 0x4, 0x0, 0x0, 0x8}) r2 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\b\x1a\x1e`0x0}) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NFC_CMD_GET_SE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}]}, 0x1c}}, 0x24000000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$auto(r4, 0x400454ca, 0x38) ioctl$auto_TCFLSH2(r3, 0x8926, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3b3da7541f6379a90e400200000008000300", @ANYRES32=r2, @ANYBLOB="0a000900aaaaaaaaaa11000008000b00ffffffff"], 0x30}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) executing program 36: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NFC_CMD_GET_SE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}]}, 0x1c}}, 0x24000000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$auto(r4, 0x400454ca, 0x38) ioctl$auto_TCFLSH2(r3, 0x8926, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3b3da7541f6379a90e400200000008000300", @ANYRES32=r2, @ANYBLOB="0a000900aaaaaaaaaa11000008000b00ffffffff"], 0x30}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) executing program 2: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x7, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) executing program 2: openat$auto_transaction_log_fops_(0xffffffffffffff9c, 0x0, 0x2800, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a000100000000000000000006000600050000000800", @ANYRES32=0x0, @ANYBLOB="0800040003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f20000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000280), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x29, 0x5, 0x0) executing program 2: syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/x86/tlb_single_page_flush_ceiling\x00', 0x1, 0x0) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x2d) r2 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r3 = socket(0xa, 0x3, 0xff) connect$auto(r3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) r4 = getpgid$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x11, 0x0, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000001900)={0x14bc, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1496, 0x3, 0x0, 0x1, [@generic="0ae556ea96b6aac20a2df353bb08ecd46a7f933d1b2db8ce9af498e5ff3a90bfe88cc0b1e2e58b0f02ef589c88720e1e867e4da84e9bd27e4e7c2e138ed9b259006d0495ac1d03abe76afce408df49a9a4d2c79e8416718b6ea62d96bfe4d485b5898da01e69d213069313429fe114911f46d2480f", @nested={0x1111, 0x43, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @pid}, @nested={0x4, 0x5e}, @generic="1b6180a9a251a5f7309b5b6b8af06ed32ba9a6c9b4845494259b2eee6bf6aceccc80f3c1ac1e002fbb719b8a15e2fe551c7c038ef05802e35f6c3566675751865ee538b9e57ac3c3ac0668a4b3929be439d1ef4cdd24c7415036f9d02f18333fe5fccf1ccb5a61d1e047fa29c9119ab9bbea68f91fc936910e843c7c568c765383c07ce45c309fbf64924e2567db900905537a8003e022f7a044", @typed={0x12, 0x14b, 0x0, 0x0, @str='/dev/snapshot\x00'}, @generic="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", @generic="627d93aa42f40ad39e72806204876c62645d32e22db38cf26b22937449b0acd596f82d21bbab5d200dbe014bca9443d8ef194821a06d9151f0027a098a56ce0fe0fb799d8437668b53f1752dcb19744e1fc8cd"]}, @nested={0x5e, 0x57, 0x0, 0x1, [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x14, 0xa3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x53}, @generic="0baa9962d832bfc7a1598f73f290676159d5d963f0ef3f3694e8c4769e09a76a5681c9ac27bac98715719137d62e"]}, @generic="5b4616330f58eec7166fdb5686acea5e1073d07a6eb7b91e3eb3ad97fb23c2aa1e37e9c9253c0115d7c961fed3edb90a3043132ec20bdf79be7ae10344c3f520acf5783d0eb3c0e11c56c454f6919da28e35da492fd3bd376918d0d1db7541fe3db6ce2b222834198cbee80a7b8b144af6a3fea938b06a01046b00b17c01cfd123", @generic="0a8c25de9c6f31e39a6bcfad2f409551b2465a4c1003d3a46dc8740e9d4e1794644249f256fb7ba7b4475e04825ebcdadeb3d0824157cddbcb471d53880652048b58569b6e4c33ce64cb48ab36673752d6980118e2b398045597a158fb9fcc22e5ba4cdb205e8980f4ca5620bc9270655998e15fd4623e70d35bb1c3c2d4386f44f98217d65dc1b99d0995bb4e2f", @generic="1eecf67e42a1d61f4e23ea7292fa8f0b334f8861a5905219476eac17430e2a6298df7834dd39fea33d5140246b3c8cede37cc5d84006fce1b686f9aa64fbd490f5bdb6e8810fecef991664c54e804cd59dc1e3ce75bb3e4f7e12a5b3c9a7022868b3de8ec536b30525e4728d360702f8d5b0e5ddfdaefc630b8e9dcec51b6492186a79401903db258e75a34ca1c0f85639b3bdb06d35b5d220556679c0e28bdd", @generic="894e299d6260a47e11406008a472f6a9725b9fef7c39d86f448a815b8fe227", @nested={0x2c, 0x12, 0x0, 0x1, [@generic="dc641df00c5037ab80751ccffa98cf32a2937c8ff7aa7c751f859c9c5dba646cfa7737c23e800600"]}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r4}, @generic="81b8b1fc1c32599be89ba74119c806ea27f3aa5e9c5679a312270e7e81db4890806dea78fbeef252fe7f1b53f45998db15af37e140c0980a2d7fbcd426c4d79699daf726d795c9ee038fbb00977b0cb662122831dd9d93cd3f297d8ba7f0c40aa0be2f15b6a064c90ed84f6e5fbe01f3bf592c3a924602291753fa87cf056ef96dc23104d826ebf0cb14701dd5813e112b131f931c47eb04b4122e7add7159a42977ab9a220fea"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x14bc}}, 0x4c0a4) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) setgroups$auto(0xe32, 0x0) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) r1 = gettid() kill$auto(r1, 0x7) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x2, 0x2, r1, 0xf39, 0x7) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'netdevsim0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000) sendmsg$auto_TIPC_NL_KEY_FLUSH(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fd557453", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 2: readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) executing program 2: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/if_inet6\x00', 0x40100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000080)=""/104, 0x68) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r2, 0x301, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvmsg$auto(r1, 0x0, 0x4) ioctl$auto(0x3, 0x80045500, 0x38) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r0, 0x3b8a, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x40103d0b, 0x0) executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYRES8, @ANYRES8], 0x18}}, 0x200080c0) r2 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SEND_CMD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x41) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0xfffffffffffffff8, 0x6, 0x1, 0x613, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x8000000000000000, 0x4, 0xef8d, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x4, 0x9, 0x9}, 0x7f) msgctl$auto_MSG_STAT_ANY(0x773, 0xd, &(0x7f0000000340)={{0x6, 0x0, 0xee00, 0x8f46, 0x1, 0x6, 0x10}, &(0x7f0000000280)=0xb6, &(0x7f0000000300), 0x8, 0x9, 0x2, 0x0, 0x2, 0x2, 0x5, 0x67, @raw=0x1, @inferred=0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'dummy0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x24, r7, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r0, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001040)={&(0x7f0000000400)={0xc38, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_LIST={0x1c9, 0x2, 0x0, 0x1, [@typed={0xc, 0x43, 0x0, 0x0, @u64=0x10001}, @typed={0x8, 0xdb, 0x0, 0x0, @u32=0xffff}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x1000}, @typed={0x8, 0x8e, 0x0, 0x0, @u32=0x8001}, @nested={0x103, 0xaa, 0x0, 0x1, [@typed={0x4, 0xbc}, @nested={0x4, 0xe}, @typed={0x8, 0xdd, 0x0, 0x0, @uid=r3}, @generic="65807136fcf094f1f9d64a9b3911c73d77f2635c60a24ec449248f4b955cf9511aac7a8218083c7590b6102e1c1ce44063d3a8b85e0b856c255f3fc751ecfb61283af5bfaa090ce300ebbd8c454e807a25bef8a5b0d86ab8f1f67148f0f636fd232c88db9d5033632ecfab17578d108ce5ee95a74afc95e09b57310de21fa0e28a08689214d000bc47f5c25e6577f7ea8f50546734f12b2966ae2f35cad208bf3e118a71ad955d9b3abbfd6873508ec876c9a28092559c9439522a92fb2c4c932fb8c1cec8d6268d2c0666", @nested={0x4, 0x74}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0xec6}, @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x6, 0xf, 0x0, 0x0, @str=':\x00'}, @generic="ab4f661677ac7b90fc42457042c37c978877e49fd78f8dc5b58736d097e9099971c275c56295d352c65b0be44d529e6df1888dfe9fbad1ad38cb8ce2e1cc668ae40add7921bd20d98673a34075b95ca952f1686e1b4884eddbd65965d4206b358f81fc04ef5e5bda9534de6088c9027b3dc0329de976384e0c59cc1600187eed3b", @typed={0x8, 0xd0, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x36, 0x0, 0x0, @uid=r4}]}, @NCSI_ATTR_CHANNEL_ID={0x8}, @NCSI_ATTR_DATA={0x413, 0x5, "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"}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r5}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_DATA={0x620, 0x5, "371a7277025b3039c15a2f6e380aede2ccfcaa1103f8705ba8b7b61c956fc10dae881d0ff2b5214bf56ce7df3b649fb13a49be7164f7e094a8dfee6f26d3c488305962e0c4525ad86d6dce2a562f2c9502118dbb9473c24e2e7be68d6ee8fe09ee0dfd3b0a36c0d31c7bd16eacc48ef8f9d995f91731aae3f949dd3b1641c938c69e88556e1b4a37a613b3396019a8553b20ddc10500c91a87c3b1bc9c350f69072c8d92eaef8823eae7934f2514565186663d1ce18b383b20342542aa7ffcc3314f9427dc4d5ecad1609943874b935c73f14ee888b95dee976f7b00b2d0f878544990e9a2391109abd08a778a56c81a372b7735e927c2789680de7e74b79789f35d73afa5c0035cea88ae668aae45e28163e5b6fb0589ed00a1bd1f4b8bb9263a0d8f5ac0705f544ccbe4ddee7dbb1c8ca9a07f6090bead20f3bd3a7fb04c4313f8ab346afc27b9187f11b4c7f8cac9cc69c59776fb01044f9171d4ecb3584fd8a90a83a2fb135cee7abd3bb50d3f138739853e43bba1a27562e4404bf00e0e3d3a99d8a9f85146ff17f14b5132dae9936c6c59c3df6419d9a7e2825b764b41f6f73a996affa4bacbc01524fedeae4c39431340df6aad5999ebab1d27fb7f1c713b1be3b19493271f804ece59f89354d006ec83a022e8ca41c6f6ca9f87181a784d6b24c33e5338c6351aea87d43d694c3bf0f48bff9811cddb93d810e593b449e2d713b95882e8db9989bfa421724f6405604189a976f930d54e014a20a2ee852852ec8469b63188e8f92437246c2fb5ebd8b7290ea5feb3a53cb098bcfd28997722f0d91bb2e37532e1155d5b641040a4d3b001f9a0d451ea8f6df785bd02e43fe0c8f3a634c25e7fffaadeda96254b83ba0d7c1256bb14a59752ab761aee9ca44977f46507960f5c4120a4eaa24958fcabfdcf8a8cfa26ee87181e16ba0a43f64d31ab1db8d286a8d138b2870c4e5283b3ce0d2c4dd336b14d840dfce79d5a377f1e779f3ecad46b5a57e1b5f479f5063532145b778c71fcbc640f223159f2595c5b9feb598eddf40057e348dc533a560e70248d58dbfb77f2b61f963d4496d9cedae4142283f8602bb8ec6637191b86feb99ef294a21d01db333ea0e5a39ef92d3d8ee8744859c919d64cdd7d16e0d310dba5e1574ea104e8abf4309cc07845d47af03a1850ce3e1dc70660d7355311ac0c189c94486453b155ccf4e4586db353787004568b5dff511a1c3d673f65c9f6dbce7c9435641c9e4b359800d033dbdd7b7edb66a287f88386d06793a6983c24aa08b212278acc97c1d0f12db642033115faf743a57937a24f11e9e08773088ec32cad210863f87cbdec0ad7e4f75d0755ca20893c4ef3ed02914c0f6fd7e076c2d91842b32db9aba548f0c431b38edede2b65a276a462480e97ea0bc4c65fb21f3b04043335bf765bcd2f89d24b74f0796fc948239b119cf094cee27788a91aad45926dbb6ea47e52b46c82a854366ab04d3219b4236bcf352cd1f4b5aa8b7ccd6076b2b50f5094b85d64f7f6634bf7d419f91a1e84bcee6f803299e8fc683a6079894ce52c61172dac991520172b2465659a8570e2ed1255773e44495dcef5dd22e7fe8661ac019b3bbe2ced68b8b57a4584ae1c1e5d41d66fa1c7b6bb0b93068a23d91a48c3a91b43cd902d1dba2cfec6ba96875a6be2f41d34016e5a16b3330e9acc949009a59ad4cfebc4c654d1816a6170808763a25a98822f2268b26a836720dc9de1e6469979ab3bac1421576b27e1af510f6ed9508fea391c2e5e8bae69b85fc8642b7b662452f44fba13905e3cf4d68bdb06f829e3da7ddc56fe43fda6bd9d7ed5e896aaed7c6c3daf07c8914d835c4226c8fc5f08a8e577ae8a697e0bc5be8ab0dfd0df575d2be70f06e71cb9ba058fa90fa777003ab8324c72bc1c6272d4169676720e06be7630c2ca431f759c0c4546571a0393e3b231a716e4c357f93ca371be2151f55ce2e3428a0c84c5963057507a824d79b9d40cc078935b5c9cd35021070936060b623ffb90858441a273a859658baf7c1a02e33fcac7449a5a03fadb0bc1aee9018d6f22ae8e243865252a94e123c2d73c0e518dbc309ffefe96d49c26aed7f3995363fe462ee85fcec36496646c16000d52d3e838cb5f1d3a08391ea630a941bda17c1f5f7485a6ac5dd900077a8c5005d9685748d7bd0b5efd3a8358c4e4"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x5}, @NCSI_ATTR_MULTI_FLAG={0x4}]}, 0xc38}, 0x1, 0x0, 0x0, 0x8054}, 0xc80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = socket(0x10, 0x2, 0xc) r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r9, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xc00}}, 0x14}}, 0x10004010) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x1000088) recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0) r10 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd6\x00', 0x8001, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) ioctl$auto_PAGEMAP_SCAN(r10, 0xc0606610, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r10, 0x0, 0x9a6, 0x0) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) executing program 1: sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf250300000008000100feffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000d4) sched_setaffinity$auto(0x1, 0x1, &(0x7f0000000000)=0x1200000000008a) socket(0x10, 0x2, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0xfffffffd) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c000180"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) futex_waitv$auto(&(0x7f0000000040)={0xf, 0x105d93, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62b9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = fanotify_init$auto(0x401, 0x1) close_range$auto(r1, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x3}}, 0x6a) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x1002, 0x100000000000ffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pwrite64$auto(r2, &(0x7f0000000080)='\vX\xb5\"\xa5p\xe6\x1eRN8\x90\x86\xd9e\x1cJ\x99\x00\x11:\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xd7\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xc0\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6c\xc6\xb2Jg\x01JZ\xbb\xff\xff\xff\xff0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1e;8\xed\xf6L\x05\xe8X\xaf\xe2\xe3\xd3\xc5:\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]\xff\xff\v\xff\xff\xff\xff\xff\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1', 0x7, 0x0) r3 = socket(0x2, 0x1, 0x84) setsockopt$auto(r3, 0x84, 0x17, 0x0, 0x27) write$auto(r0, 0x0, 0x100082) executing program 5: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7500000000000000) write$auto(r0, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x3, 0xfffffffffffffffe, 0x12, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) socket(0x2c, 0x5, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000180)) ioctl$auto_SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f00000001c0)="1ab7") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x80) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = semctl$auto_SEM_INFO(0x3, 0xfffffff9, 0x13, 0x8) prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, r3, 0xcd8, 0x100) madvise$auto(0x0, 0x20499e, 0x9) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x40046205, 0x9) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) executing program 1: mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getrandom$auto(0x0, 0x6000000, 0x3) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000980)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/machinecheck/machinecheck0/monarch_timeout\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)="33aa0d7191af", 0x6) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800) r2 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r2, 0x7) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) executing program 1: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0xffffffffffffffff) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) prctl$auto_PR_PPC_GET_DEXCR(0x48, 0x6, r0, 0x3, 0x9ed) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1000, 0x6) pselect6$auto(0x8000, &(0x7f0000000080)={[0x800, 0x7f1, 0xb, 0xb9, 0x7, 0x7, 0x28, 0x2, 0x100, 0x4, 0x7, 0xffffffffffff6ee4, 0x80, 0x47, 0x3, 0x40]}, &(0x7f0000000100)={[0xfffffffffffffffc, 0xffff, 0x101, 0x4, 0xb, 0x0, 0x3f8b, 0xc, 0x2, 0x2, 0x7, 0x20000000007f, 0x0, 0x0, 0x7fffffffffffffff, 0x6]}, &(0x7f0000000180)={[0x5d58, 0x7, 0xa5, 0x7f, 0xffffffffffffff63, 0x6, 0xfffffffffffffffd, 0x2001, 0x4, 0x7, 0x3, 0x8000, 0xa, 0x101, 0x4, 0x9]}, &(0x7f0000000200)={0x6, 0xac}, &(0x7f0000000240)="84564c8c26b8144fd4d3e1ecb7942bbed10faff85baff45164fe66cd970aa99ce6e0b82e3f049231ba73698898fcd2a65389893a8ce8b267d7aa4f5258122e0b18ac67ffde635cac8164af89d15c5b3222a32a0e03b46c0b57abb954eb9a7ba2e851d345c9e7319f0334e91d93a1a639c9a157cbd953f98a055c6326e49c3691aa27e73928cfc94b6ca85e02c62ac8fc9925f5c6481c62e36169492d6741aa7e32fbc03e9391f9b9b275e7e9551b938d5b80bafbdc1dd37bfb2772dbc29cf87b41fa609e535de02906ee62739ad3f141062547") madvise$auto(0x0, 0x200007, 0x19) ioperm$auto(0x7, 0x6, 0x1) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) executing program 5: mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) (fail_nth: 6) executing program 5: r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x59, 0x7) ioctl$auto_SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000040)) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1aea8974a9e22d77cb94cae6c89e239bacfe656d9b0948de480ce2ba3b4dbcb180089d5eb0f8f481e02f7d4628e9134b6e52881572a398e4edd6f01f90983826d721dddc7d4ba3f293288ba54f696fa25cc2f8721c3e380dd04bf05801f90019498601fcbcea6aa6a2d7983e6823f480185ef9c3b4ed19c4f94c108067c89d69bc4e0da0112280ecd0caff8a454fb3e6655dc6a35cdd053aef882e403458754f5e84bd2210f18a61106af8c5a2c18dc48ff87cfda6d545014009a167570f0550e5121d0bdf4b20a1177b708e5515ee33db3baf29633440999ddd36eb0299a1efcd8934ab60c1a88d9db6fa0d2b3f0bf12e87630e0dc5eddca8f291ad85141391e6f9fe56ee4ddb39a1ac7a573cb69ec14f012ea0b721df3ea40747d1130a61802e859519ae1bc5a3673105fa87485f88b8981a3a208a3576848c2df152a023f5e573c867b43b10247336b110956eb28e5288d7aa19219e8324857cdf6d17530385720afd5a1ffd23aa1bd061b73caafa05afdd1441040989d081814635347f1d55669b1c38be4698e3a085e2010e35d2747b4e39ef4920f58d6b4585d737c13221a44ad5543099bb0ab228722ef9cbc0d621178012495837d6a220eeaaf498ccc01", 0xfe04) executing program 1: mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x30, 0x0, 0x56b) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0xd}, @ILA_ATTR_LOCATOR_MATCH={0xc}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x5}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x5}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/initstate\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x5, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x10]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x11, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) getpeername$auto(r3, 0x0, 0x0) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) execveat$auto(0x6, &(0x7f0000000000)='[[]$)%*++{#\x00', 0x0, 0x0, 0x1000) r7 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x2881, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r7, &(0x7f0000000080)="390d00a741ee", 0x6) getpid() executing program 5: mmap$auto(0x8, 0xf88, 0xdf, 0x20009b72, 0xffffffffffffffff, 0x100000001) r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/sockcreate\x00', 0x6400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r3, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf255100000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_NET_GET(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$auto(0x9, &(0x7f0000000000)=@bpf_attr_11={0xffff, 0x1, 0x9, 0x6, 0x3ff, 0xa7, 0xb, r0}, 0x9) r8 = socket(0x1f, 0x5, 0x0) mmap$auto(0x1, 0x85, 0x40e5, 0xebd, 0x405, 0x7ffd) r9 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ubifs/chk_general\x00', 0x10800, 0x0) read$auto_dfs_global_fops_debug(r9, &(0x7f00000001c0)=""/187, 0xbb) getcwd$auto(0x0, 0xffffffffffffffff) r10 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/v4l-subdev7\x00', 0x102f03, 0x0) poll$auto(&(0x7f0000000480)={r10, 0xffff, 0x29}, 0x6, 0x8) bind$auto(r8, &(0x7f0000000280)=@sco={0x1f, @none}, 0x6a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) iopl$auto(0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x80000, 0x8b) socket(0xa, 0x2, 0x0) executing program 8: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r1 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x56a, 0xb275, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r2, 0x40085503, &(0x7f0000000600)={0xd, 0x0, 0x3}) preadv$auto(r2, &(0x7f0000000100)={0x0, 0x20000dd}, 0x1, 0x2, 0x5) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffd, 0xeb1, 0xffff7ffffffffffa, 0x8) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty2\x00', 0x20500, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, 0x0) sendmsg$auto_TIPC_NL_KEY_FLUSH(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000000c0)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) executing program 8: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) epoll_create$auto(0x3e) write$auto(r0, &(0x7f0000000000)='/dev/nullb0\x00', 0xb2) close_range$auto(0x2, r0, 0x0) executing program 8: ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x9, 0xffffffffffffffff}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebd, r0, 0x8000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x4, 0x8) (async) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x2, 0x0) (async) io_uring_setup$auto(0x59, 0x0) executing program 8: ioctl$auto(0xffffffffffffffff, 0x80045439, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) readv$auto(r0, 0x0, 0x3) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x2, 0x8, 0x0) (fail_nth: 1) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) executing program 5: request_key$auto_KEY_SPEC_REQUESTOR_KEYRING(0x0, 0x0, 0x0, 0xfffffffffffffff8) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/mem_used_max\x00', 0xa081, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) setrlimit$auto(0xb, 0x0) mincore$auto(0xff7, 0x8001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio28\x00', 0x101100, 0x0) mmap$auto(0x0, 0x9, 0x9cad, 0x8012, 0x3, 0x8000) read$auto(r1, &(0x7f0000000000)='+-\x00', 0x5) r2 = gettid() ioctl$auto_EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=0x8) rt_tgsigqueueinfo$auto(0x0, r2, 0x21, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) readv$auto(r3, 0x0, 0x4) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) executing program 5: openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x9, 0x20008, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4038ae7a, r0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) executing program 8: r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYBLOB='h\x005'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x620081, 0x0) write$auto_ctl_device_fops_user(r1, &(0x7f0000000340)="a504ff4c280e43904055ceb3bc98cf2af453126b06d1f8b678ad4700b35e33bf24e0c6269dd4fcfeafaacd781a02e63a0f9cf51e53d742c6cd3e1a4531a69c151e3714d2418d3a55d79a114e8309e48778a229eef16577bd021ce7b48a29a4e1c32f5f0c3393287d", 0x68) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=1m49s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 12, 30, 12, 24, 14, 14, 21, 27, 12, 8, 30, 8, 8, 12, 22, 21, 30, 29, 30, 19, 27, 2, 30, 30, 13, 16, 3, 7, 30, 30, 10, 4, 9, 13, 24, 12, 5, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000f0ffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) mlockall$auto(0x7) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000fc000000000000c0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vimc.0/video4linux/video4/name\x00', 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x3}, 0x20000007}, 0x3, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x81}, 0x1, 0x0, 0x0, 0x8) (async) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mlock$auto(0x1000, 0x6) (async) mlockall$auto(0x800000000000005) (async) pselect6$auto(0x8000, &(0x7f0000000080)={[0x800, 0x3, 0xb, 0xb9, 0x7, 0x7, 0x28, 0x4, 0x100, 0x9, 0x3, 0xffffffffffff6ee4, 0x80, 0x47, 0x3, 0x40]}, &(0x7f0000000640)={[0xfffffffffffffffc, 0x8, 0x101, 0x4, 0xb, 0x0, 0x3f8b, 0xc, 0x2, 0x2, 0x7, 0x7f, 0x0, 0x800, 0x7fffffffffffffff, 0x6]}, &(0x7f00000006c0)={[0x5d58, 0x7, 0xa5, 0x7f, 0xffffffffffffff63, 0x6, 0xfffffffffffffffa, 0x2001, 0x4, 0x7, 0x6, 0x8000, 0xc, 0x101, 0x4, 0x9]}, &(0x7f0000000200)={0x6, 0xac}, &(0x7f0000000740)="84564c8c26b8144fd4d3e1ecb7942bbed10faff85baff45164fe66cd970aa99ce6e0b82e3f049231ba73698898fcd2a65389893a8ce8b267d7aa4f5258122e0b18ac67ffde635cac8164af89d15c5b3222a32a0e03b46c0b57abb954eb9a7ba2e851d345c9e7319f0334e91d93a1a639c9a157cbd953f98a055c6326e49c3691aa27e73928cfc94b6ca85e02c62ac8fc9925f5c6481c62e36169492d6741aa7e32fbc03e9391f9b9b275e7e9551b938d5b80bafbdc1dd37bfb2772dbc29cf87b41fa609e535de02906ee62739ad3f141062547") (async) madvise$auto(0x0, 0x200007, 0x19) (async) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) madvise$auto(0xb, 0x0, 0x3) (async) madvise$auto(0x7, 0x4, 0x2) (async) r2 = socket(0xa, 0x5, 0x13c) getsockopt$auto(r2, 0x20000028, 0x6, 0x0, 0x0) msync$auto(0x7, 0xfe, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x7) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f009effffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mbind$auto(0x10, 0x0, 0x80, &(0x7f0000000040)=0x4, 0x2be4, 0x1000) executing program 0: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) executing program 32: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) executing program 3: mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) writev$auto(r1, &(0x7f0000000280)={0x0, 0x45}, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="080061000100000008006200fcff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_setup$auto(0x59, 0x0) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRES8=r4, @ANYRES32], 0x18}}, 0x80) executing program 3: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/class\x00', 0x800, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x5, 0x0) msgctl$auto(0x26, 0x400, 0x0) rseq$auto(0x0, 0xfffffff4, 0x0, 0x7) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/mtd\x00', 0x80000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r0, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) write$auto_console_fops_tty_io(r1, &(0x7f0000000040)="0152f1ccbaf0a250747d8adb", 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) setsockopt$auto(0x1, 0x1, 0x46, &(0x7f0000000000)='\x00', 0xbb) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_NVRAM_INIT(0xffffffffffffffff, 0x7040, 0x0) socket(0x21, 0x2, 0xa) select$auto(0xb, &(0x7f00000000c0)={[0x40, 0xfffffffffffffffb, 0x0, 0x3, 0xffffffffffff4fc9, 0x9, 0x6, 0x0, 0x3b73, 0x5, 0x7, 0x8, 0x10001, 0x2, 0x6, 0xade]}, &(0x7f00000001c0)={[0xfffffffffffffff9, 0x3, 0x100, 0x51b, 0xb, 0x0, 0xc, 0x2, 0x31, 0x9, 0xff, 0x1, 0xb, 0x4, 0x101, 0x5]}, &(0x7f0000000240)={[0x3, 0x3ff, 0x70f, 0x200, 0x913, 0x9, 0x5, 0x8000000000000001, 0x77, 0x7, 0x7ff, 0x3e95, 0x6, 0x4, 0x6, 0x10]}, &(0x7f0000000140)={0x101, 0x9}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x5608, r3) executing program 3: mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8040) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1a) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r1, 0x0, 0x20000000001, 0x7fff) executing program 3: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) tgkill$auto(0x0, 0x1, 0x1) mkdir$auto(0x0, 0x8) socket(0x22, 0x2, 0x7) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r0, 0x5408, 0x0) executing program 3: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x18, 0xa, 0x1) r1 = socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) quotactl_fd$auto(r4, 0x4, 0xffffffffffffffff, 0x0) shmctl$auto_SHM_LOCK(0x10001, 0xb, &(0x7f0000000440)={{0xfffffff7, 0xffffffffffffffff, 0x0, 0x1, 0x7ca2, 0x3, 0x6}, 0x4, 0x1, 0xb7, 0x8, @inferred=0xffffffffffffffff, @inferred, 0x9, 0x0, &(0x7f0000000340)="c00f87773c44b8b6cbb6c50dd42957f448855f3876a33d06df799f0536f433e46520f1c8fa1a9f1546f6f356e75612bdd0353e293c24a990cd9e716aa5f0e9f3", &(0x7f0000000380)="a1937b45e771290c616e3c402dec57ecca600893cf1f4849977d9fae8284674b03acc3f1d5c386d6b14792ee9eab958e39a3e504a8bb2420159cc381ddc6213b96c769f3a07b33e0aaa522b5237af57f4cf89209654b44caf89ab73dfc865e011db686e789993baf8cf436ebd8cb50062131503109c72569d5d2f88599716c595a15b89d93a6398b689fc755dd5e0b5b0d57cfc128270d18ceaf45b3c306ed35d08e3a3f1365033849594b705b926f5fdb7de37d5ee96165"}) sendmsg$auto_IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000001900)={0x1680, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x145e, 0x3, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @pid}, @generic="8b8bd25fece342c432878ac66463fec7b55c680b601bb7b3aa9a775e34f77decf4c1828704441f1df271bf59112a60ff2324e639ae5ed4b94d6d0e35b882404c8d36804d45bb6bd89bfcd043d1fe471d3ec57e6d54655478aec001113799d408f8468b02bc30e5077718f6916e9c6d4404a40e1809eca74f0161ef843ecc6a4b46e6", @nested={0xea, 0x144, 0x0, 0x1, [@nested={0x4, 0x47}, @nested={0x4, 0xdb}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0xda27}, @nested={0x4, 0x128}, @typed={0x8, 0x14, 0x0, 0x0, @fd=r4}, @generic="6ca420c5ae223ead8f4be36f25b2c0718b444b98088dce7df68e3e81808a506e59c51d3e74f18bf91c09b351155a8b6c859bd07765e18122c19746bcde429cf675ef057aca852ade921f813313b9e655d80624c9af129345631a22428badb0a820c3286eeef1dad5ae5eb66e0480dd92fb20a5d888cbc6b720fbd70fd4c1d2a5e4fe7e7bff704dc196ee2b449cf44f2fa08138685e3078a116d23700b4ae7072c5a558cab708bf8f039756cce3911f8c5b841ef4669ce15834c1a77140cb71fc3891", @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="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", @nested={0x11e, 0xe, 0x0, 0x1, [@nested={0x4, 0x64}, @nested={0x4, 0xba}, @generic="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", @typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@loopback}]}, @generic, @nested={0x14a, 0x13, 0x0, 0x1, [@generic="8d9dfa3bd02f355a96eb6109995c0b2f70c0b0cff7f96677fcd201dfe1cb6d2baebd03d5c1e74d408150564ec7d0ee2c22882eb9de2db00a3943eb5771c18fd37fa5312996ed81bb2a70544cb3371ffb3a61596a51c13695f41d3c8579edac899c459929523c675701818842730d0b7c96d1bac5192419", @typed={0x8, 0x123, 0x0, 0x0, @uid=r5}, @generic="cf9ac7b7ab2f2b25c00021efa8cc7722ec5e23e21260d3c47669861eb5afd3fb013bc74be10b27a6257fcb79b12dd8c061986982ee37d4233873c381003c91e12057e4fe4de339f3608fe5067073cea3028dc3d858a4003128226a5d4a862d2167a0e61524c21c8c44a3d7c85a170850c755106d2138b5a9863f11570dd805e7a28ed71b72a1a2f6f44f4af7596c3ecfbb97a2f6d9b3514a2ada101d1f882559d74aba2440c7692005b145da398e53d526d20ce2a86fb7521add3dfe702ec422c1c8b0", @nested={0x4, 0xb3}]}, @nested={0x78, 0xf6, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x4, 0x64}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x6}, @generic="596ca0b1488ea6a0c345fc15b88d5a2b6ffa7b0ade5ba46aa9c1d39a8193aa05508f53", @nested={0x4, 0x10}, @nested={0x4, 0x4c}, @typed={0x8, 0x21, 0x0, 0x0, @ipv4=@local}, @generic="22cde702cc2e4febfd7454751a4bb134dd2a79ca08900f6fb6f736f693b53fcfb281a0178a", @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x3, 0x0}}, @nested={0x4, 0x88}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc2f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @fd=r0}]}, @IPVS_CMD_ATTR_DAEMON={0x1f5, 0x3, 0x0, 0x1, [@typed={0xa0, 0x5, 0x0, 0x0, @binary="1bc4525b65adb4ac8bfa5b05591ad86be9172955e7fa6cb16e32cdba316f5559366898317edac346b74b8c49f90c7303ce934d6617c9c4946a4c7eb811944eef7bee65a5ec787d6d2a48c24172a9cd27180c1da011ce56210065fa631bd23338037604ce2a6a42bbd212695e03c1efc5790e161cf7f732d525b2b75b008cb9b6c18e1accecf85293929ef2aa68059891312bf4bc959eadfb5a74acfd"}, @generic="203b4e5cdc6863d3e6207e55ac42883bd0ed48ebf8957ad1c816f7c28cf9d4ffdec1ab123e61e15ab720605d27a5fbadc99209cb17dffef6cfd04d6565aeaef0b38434266b8cdf7c068016f761d7772d47b20a4d761010ec53568f4bab0c650ebcf4e93fb6356d167ccd15b97d04a20267e0328120564f82efaa50507444aab8d2c1f7ded32003b95da8ca4e8edd7f9040e3eba21b8ab0d7513d8fd4450156a3b91f72fa72344bbd665bf510047cb39eb02d56f14853a81b05199800ccc315d62cae1922c2550e10f04702508fa651e7fb4d880b", @generic="2371be940a082411c16f59f902c743a350d015be173c571446494218505c75ecff3fa3f3f7ab385576270a7422f9d96b54f0b7dcf1e8899084a7bbbde107e2b9f327615c80c9cd24d4a38de009aba6148c78095e52f2abb4c56ef296e0bb7ceef6665ea66eba8fca1d7bb095d6f966cbfc6a244668b017e28c1b2d4f3c"]}]}, 0x1680}, 0x1, 0x0, 0x0, 0x41880}, 0x48000) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20006, 0x3, 0xe72, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x4, 0x7ff) wait4$auto(r6, 0x0, 0x80000000, 0x0) rt_sigqueueinfo$auto(r6, 0x5, &(0x7f0000000240)={@_si_pad}) write$auto(0xffffffffffffffff, &(0x7f0000000080)='#-*,+\\}\x00', 0x8) unshare$auto(0x40000080) executing program 3: mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) executing program 33: mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) executing program 4: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f000000000000030000c0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 4: r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0x0, 0x9, 0xc8e6}, 0x27, 0x101) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r2 = socket(0x1d, 0x3, 0x1) getsockname$auto(r2, 0x0, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000180)={0x4, 0x1ff, 0x4, 0x5, 0x4800000, 0xffffffff, "b8556e95fd689b52ae05aa60209708fe", 0x6, 0x8, 0x17, 0xa7, 0x1, 0xfc, 0x81}) r3 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) read$auto_debugfs_devm_entry_ops_file(r3, &(0x7f0000000940)=""/46, 0x2e) fcntl$auto(r1, 0x400, 0x1) read$auto_tracing_stats_fops_trace(r1, &(0x7f0000000000)=""/250, 0xfa) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0xa2400, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0x0, 0x9, 0xc8e6}, 0x27, 0x101) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async) socket(0x1d, 0x3, 0x1) (async) getsockname$auto(r2, 0x0, 0x0) (async) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000180)={0x4, 0x1ff, 0x4, 0x5, 0x4800000, 0xffffffff, "b8556e95fd689b52ae05aa60209708fe", 0x6, 0x8, 0x17, 0xa7, 0x1, 0xfc, 0x81}) (async) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) (async) read$auto_debugfs_devm_entry_ops_file(r3, &(0x7f0000000940)=""/46, 0x2e) (async) fcntl$auto(r1, 0x400, 0x1) (async) read$auto_tracing_stats_fops_trace(r1, &(0x7f0000000000)=""/250, 0xfa) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0xa2400, 0x0) (async) executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x167c0, 0x152) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setpgid$auto(0x7, 0xffffffdffffffff4) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000), 0xa) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r1, 0x40044145, 0x0) ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, &(0x7f0000000100)="36f088b87bfe468f324f00fc60a01a18f9d1e34d813d4b558061677ca920738feb61791ce8f7af4d754895925e7ba736b3c9e9c5ba570bd5491ea83dcd05db74774669a4ca194e5136eb04bb2c01e3fee9a0505620603d150052f5e8b19bd1db7ed1bf086360c5b80f619b77c4331dab395b88ada34a84904a7ba805e191b31c1092dec0c3b434c4132787f9c85c70bbdb5bcfd902da8fc52c8496d4f6f57680ec19a285b5a593587c273682d32829b8df1e269f28c074ddc9ac0d5c611ac89add24fbcf2236ba4a8d45d7c2b2f83568c6594739c837e71490d0a38e7adb") openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) mmap$auto(0x3, 0x2060009, 0x7fffffffffffffff, 0x7fffffff, r0, 0x8004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) io_pgetevents$auto(0x7fff, 0xd47, 0x3, 0x0, &(0x7f0000000040)={0x100000000000000, 0x2}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) r3 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) futimesat$auto(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xb, 0x100000001}) pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) splice$auto(r4, 0x0, r0, 0x0, 0x768, 0x9) close_range$auto(0x2, 0x8, 0x0) executing program 4: mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000480), r3) shmctl$auto(0x3a9, 0x16d, &(0x7f0000000580)={{0x6, 0xee00, 0xffffffffffffffff, 0x100, 0x8000, 0x5, 0x4}, 0x40, 0x4, 0xb, 0x6, @inferred, @raw=0x10, 0xde4, 0x0, &(0x7f00000004c0)="ecea", &(0x7f0000000500)="29d4c45d90eddee334bc10951a649c51a2f426b4505d85262b04da444efd83b0ed5cff471f9485e3ecd0fa9206913dccb1e5b9d5ee13c034ddc269d153fca7e14697a286435808a946458c06cae902afb62e1a2fb76e77f588a48e647be62868fec031"}) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000001180)={0x14ec, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0xf2, 0x3, 0x0, 0x1, [@typed={0x8, 0xb5, 0x0, 0x0, @uid=r5}, @generic="c2184e10db349177ab61c22ec1433da73ff5ff97266360a76d3e5d5b2e306e60a388444ffdc3593a98d8014a1cee702732f826d32204986afcbf1648a8a483981c17a0655abe7921a12cda0a1169f56f4736ee546b2727e1ed79d9af41f5b927ef42c0d3aa33080b8482f59410ecbe1a4518f425b5442fda68b78ea734fd16647a7be84a91bc8abf0ed23fe6fb3d2813296a1b948fc9951aaa672ffc0bb33cb6f1d6ca03", @generic="cd74f188c91081813ab0db7288642bc28a8891084818a048c3673a15b28e5d151d2b38b8cd8ed75cb3eac8df6c897ef3a224785e06979dc289ce920d312faebd8a90"]}, @IPVS_CMD_ATTR_DAEMON={0x1b7, 0x3, 0x0, 0x1, [@typed={0x4, 0x12a}, @generic, @nested={0xe3, 0x2d, 0x0, 0x1, [@nested={0x4, 0x63}, @typed={0xc, 0xd8, 0x0, 0x0, @u64=0x81}, @generic="bb1087eadb1c6963b3be40cb94eeb2388bd85c29b634195cdc989a5654e787937807647a166c23ce3176d6f958975c74b796323cb16b63e66e3921c2e43f15d8eca214f578ccbef1f7ded18481b3182db0a22eb4c4ac9b9214b0b76349536b5f2886421a8789bc1b38655cd7b0605b3197dd115c8c03881d9c61c523b985f2923278324e3e0b670efc9f17a33474eef89cb38705d629f538bd50d097d780d1a27f8cc2c003d710914d6e01a42c86b73c47b7c52fe84d5d9754f0f82c2d4c91a31ed9af", @typed={0x8, 0xc4, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x96}]}, @generic="ed583b14c8cdd5bfe22511137d2b16279d9a7c519f90931af1f12be1894aa3b3440ea05d3c2be1d341e99549ff698f942161f6697ea8427a4b1ccd674246d31f3fd9a8c1577fc3be53a8b96eb2a727c72e11e5e67f86b12eea0e07d57ac5f37fee12a3db6ed0482545e6831749fd4325e72d61793b2ecf48dbeeb005b2ec4ba335d4ce8b3a84d968e1bd671f3ecfeabf0b22d932d8cbb7952981fd5e72e722c58172d0548ab6314ae066e00b0c277343f7335651bc72c1d73c80737b924798f295443a50b17685dc065b3a"]}, @IPVS_CMD_ATTR_DEST={0x1173, 0x2, 0x0, 0x1, [@generic="0d36b99361b746c60f879dc06c116186026f8588f5c3673b0b4ed6bb940f2a234056be9f21d726f7736feadb9dad09902f3633058230f3bdd0fea271c213b0c0752a7a5c32d500514acc4bb9ee83518545310b19110e9416a33f8fe24176cedd336a6e5a8f90cc7a73874804b3d74ff233239b6f83938d26c905e70827800f52781367738cd11f0650fff5", @generic="eda9e53dcdc6bda0f6a93fb8f92c3fb77bfbd11660cb9a1808a2939f34d95f8f4ae020b906c2bdfb14798961dba37fbc92b0662691d9c0ef75356e84b9e656e2d9534f09d2234ef2", @generic="90ae998d2968e109764c9b7060b953831f01a03f01e92a342241f475ef693115a9470c448e2758eb0715bfd8476684c19c28bb817a3574f16a0d69f3bde8dea320e329c4f42ffee8c7933e0de85599b33d9c14c6fb1d27c257f9f2140fcfc2aafa75c10593e6c6e0ffce0b8653d3734992bfa648d3a5fe2e77cfa7e3e91247080ffb33074b1ba5763d5d3966a2b1b2ef53216256", @generic="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", @nested={0x8, 0x118, 0x0, 0x1, [@nested={0x4, 0xe2}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_SERVICE={0xa8, 0x1, 0x0, 0x1, [@nested={0xa3, 0x105, 0x0, 0x1, [@typed={0xc, 0x6b, 0x0, 0x0, @u64=0x1ff}, @generic="c539d7f79fe3f1c7bcd9598b47d4bc11553d9eb1394accc89fb914f089a72c5ff4aa4878481ad79305e6b4176bc871e7ec768fe7a4fdfda52f6da4bda73e88b86d89bb0f438cd8ffe51263f96a5b2bc8c930494b19684196a7b93bfa06f02444efe6c7bd6b18853b4aeea8ee565d8c35053c73d7141134fe0c861a", @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0xdf}]}]}]}, 0x14ec}, 0x1, 0x0, 0x0, 0x8001}, 0x1) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x2, 0xcd5f, 0x1, @_kill={0x0, 0xffffffffffffffff}}}, 0x7, &(0x7f0000000140)={{0x5, 0x23}, {0x7, 0x8001}, 0x1, 0x3, 0x3, 0x1, 0x0, 0x7ff, 0x6, 0x1, 0x6, 0x7, 0x691, 0xa9, 0x0, 0x7}) adjtimex$auto(&(0x7f00000002c0)={0x2, 0x0, 0xcb, 0xcd, 0x3, 0x8000, 0x3, 0x0, 0x80, 0x4000, 0xfffffffffffffe01, {0x6, 0x10001}, 0x4, 0x2, 0x7, 0x7, 0x0, 0x64873d63, 0x7, 0x8, 0xffff, 0xa, 0x3ff}) sendmsg$auto_OVS_DP_CMD_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_NAME={0x6, 0x1, '*\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8040) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, 0x0, 0x1a) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/module/ib_iser/parameters/max_sectors\x00', 0x20a42, 0x0) sendfile$auto(r7, r7, 0x0, 0x4f64a1d2) adjtimex$auto(0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x10eb1, 0xfffffffffffffffd, 0x8000) socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) executing program 4: open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptya3\x00', 0x82e343, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/shmem_fallback\x00', 0x101700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) socket(0x25, 0x6, 0x0) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000001080)={"f2b0e77c15814ccbd31cbfc1be00641bdbc5590fa669dd00000100000000004bbe432f9f1498df37b37b5682b4a45de81ed08d2421f6d4dd6277f0cbf348d3b6d6d237ddee104e8bdd3134c07c645c9e1058f625c2250683796a35edbe0dc9a99f436e05c010101fda81b336aa520d52594a7366f205857c7c4f08af2874e4835f0088b46db869b0de065b53d4470ba071c622eb6d174c6b8afcfed6e66c011ee02367a79b51bfc45a9d624b0533400f784075094246f86a42fc2183ebab9eaf7f0101d2b1555b3d2c1213c9cec2d78dd57a1d628d93f379a7b9e65d4ec3a7ab8b7ccd5db4670f000061c8316fbe84aa6f2900", 0x3, 0xf}) mmap$auto(0x0, 0x20009, 0x20004000000000db, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x8208ae63, r3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x133e02, 0x0) bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x630, 0x57d, 0x9, 0x8}, 0xa3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) executing program 4: mmap$auto(0x1000000006, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) syz_clone(0x800800, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000, 0x5, 0x0, 0x8, 0x2) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) write$auto(r1, 0x0, 0x800f) sendmmsg$auto(0x3, 0x0, 0x9aa, 0x7000002) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) mmap$auto(0x6, 0x100, 0x4000001000df, 0x18, r0, 0x4008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd13/queue/max_segment_size\x00', 0x400000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x80000000020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc1}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x7, 0x8) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram2/integrity/read_verify\x00', 0x7095c2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x10, r2, 0x5) dup2$auto(r2, r0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) executing program 2: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/if_inet6\x00', 0x40100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000080)=""/104, 0x68) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r2, 0x301, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvmsg$auto(r1, 0x0, 0x4) ioctl$auto(0x3, 0x80045500, 0x38) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r0, 0x3b8a, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x40103d0b, 0x0) executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYRES8, @ANYRES8], 0x18}}, 0x200080c0) r2 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SEND_CMD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x41) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0xfffffffffffffff8, 0x6, 0x1, 0x613, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x8000000000000000, 0x4, 0xef8d, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x4, 0x9, 0x9}, 0x7f) msgctl$auto_MSG_STAT_ANY(0x773, 0xd, &(0x7f0000000340)={{0x6, 0x0, 0xee00, 0x8f46, 0x1, 0x6, 0x10}, &(0x7f0000000280)=0xb6, &(0x7f0000000300), 0x8, 0x9, 0x2, 0x0, 0x2, 0x2, 0x5, 0x67, @raw=0x1, @inferred=0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'dummy0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x24, r7, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r0, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001040)={&(0x7f0000000400)={0xc38, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_LIST={0x1c9, 0x2, 0x0, 0x1, [@typed={0xc, 0x43, 0x0, 0x0, @u64=0x10001}, @typed={0x8, 0xdb, 0x0, 0x0, @u32=0xffff}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x1000}, @typed={0x8, 0x8e, 0x0, 0x0, @u32=0x8001}, @nested={0x103, 0xaa, 0x0, 0x1, [@typed={0x4, 0xbc}, @nested={0x4, 0xe}, @typed={0x8, 0xdd, 0x0, 0x0, @uid=r3}, @generic="65807136fcf094f1f9d64a9b3911c73d77f2635c60a24ec449248f4b955cf9511aac7a8218083c7590b6102e1c1ce44063d3a8b85e0b856c255f3fc751ecfb61283af5bfaa090ce300ebbd8c454e807a25bef8a5b0d86ab8f1f67148f0f636fd232c88db9d5033632ecfab17578d108ce5ee95a74afc95e09b57310de21fa0e28a08689214d000bc47f5c25e6577f7ea8f50546734f12b2966ae2f35cad208bf3e118a71ad955d9b3abbfd6873508ec876c9a28092559c9439522a92fb2c4c932fb8c1cec8d6268d2c0666", @nested={0x4, 0x74}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0xec6}, @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x6, 0xf, 0x0, 0x0, @str=':\x00'}, @generic="ab4f661677ac7b90fc42457042c37c978877e49fd78f8dc5b58736d097e9099971c275c56295d352c65b0be44d529e6df1888dfe9fbad1ad38cb8ce2e1cc668ae40add7921bd20d98673a34075b95ca952f1686e1b4884eddbd65965d4206b358f81fc04ef5e5bda9534de6088c9027b3dc0329de976384e0c59cc1600187eed3b", @typed={0x8, 0xd0, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x36, 0x0, 0x0, @uid=r4}]}, @NCSI_ATTR_CHANNEL_ID={0x8}, @NCSI_ATTR_DATA={0x413, 0x5, "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"}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r5}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_DATA={0x620, 0x5, "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"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x5}, @NCSI_ATTR_MULTI_FLAG={0x4}]}, 0xc38}, 0x1, 0x0, 0x0, 0x8054}, 0xc80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = socket(0x10, 0x2, 0xc) r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r9, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xc00}}, 0x14}}, 0x10004010) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x1000088) recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0) r10 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd6\x00', 0x8001, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) ioctl$auto_PAGEMAP_SCAN(r10, 0xc0606610, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r10, 0x0, 0x9a6, 0x0) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) executing program 1: sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf250300000008000100feffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000d4) sched_setaffinity$auto(0x1, 0x1, &(0x7f0000000000)=0x1200000000008a) socket(0x10, 0x2, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0xfffffffd) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c000180"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) futex_waitv$auto(&(0x7f0000000040)={0xf, 0x105d93, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62b9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = fanotify_init$auto(0x401, 0x1) close_range$auto(r1, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x3}}, 0x6a) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x1002, 0x100000000000ffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pwrite64$auto(r2, &(0x7f0000000080)='\vX\xb5\"\xa5p\xe6\x1eRN8\x90\x86\xd9e\x1cJ\x99\x00\x11:\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xd7\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xc0\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6c\xc6\xb2Jg\x01JZ\xbb\xff\xff\xff\xff0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1e;8\xed\xf6L\x05\xe8X\xaf\xe2\xe3\xd3\xc5:\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]\xff\xff\v\xff\xff\xff\xff\xff\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1', 0x7, 0x0) r3 = socket(0x2, 0x1, 0x84) setsockopt$auto(r3, 0x84, 0x17, 0x0, 0x27) write$auto(r0, 0x0, 0x100082) executing program 5: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7500000000000000) write$auto(r0, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x3, 0xfffffffffffffffe, 0x12, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) socket(0x2c, 0x5, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000180)) ioctl$auto_SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f00000001c0)="1ab7") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x80) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = semctl$auto_SEM_INFO(0x3, 0xfffffff9, 0x13, 0x8) prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, r3, 0xcd8, 0x100) madvise$auto(0x0, 0x20499e, 0x9) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x40046205, 0x9) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) executing program 1: mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getrandom$auto(0x0, 0x6000000, 0x3) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000980)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/machinecheck/machinecheck0/monarch_timeout\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)="33aa0d7191af", 0x6) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800) r2 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r2, 0x7) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) executing program 1: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0xffffffffffffffff) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) prctl$auto_PR_PPC_GET_DEXCR(0x48, 0x6, r0, 0x3, 0x9ed) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1000, 0x6) pselect6$auto(0x8000, &(0x7f0000000080)={[0x800, 0x7f1, 0xb, 0xb9, 0x7, 0x7, 0x28, 0x2, 0x100, 0x4, 0x7, 0xffffffffffff6ee4, 0x80, 0x47, 0x3, 0x40]}, &(0x7f0000000100)={[0xfffffffffffffffc, 0xffff, 0x101, 0x4, 0xb, 0x0, 0x3f8b, 0xc, 0x2, 0x2, 0x7, 0x20000000007f, 0x0, 0x0, 0x7fffffffffffffff, 0x6]}, &(0x7f0000000180)={[0x5d58, 0x7, 0xa5, 0x7f, 0xffffffffffffff63, 0x6, 0xfffffffffffffffd, 0x2001, 0x4, 0x7, 0x3, 0x8000, 0xa, 0x101, 0x4, 0x9]}, &(0x7f0000000200)={0x6, 0xac}, &(0x7f0000000240)="84564c8c26b8144fd4d3e1ecb7942bbed10faff85baff45164fe66cd970aa99ce6e0b82e3f049231ba73698898fcd2a65389893a8ce8b267d7aa4f5258122e0b18ac67ffde635cac8164af89d15c5b3222a32a0e03b46c0b57abb954eb9a7ba2e851d345c9e7319f0334e91d93a1a639c9a157cbd953f98a055c6326e49c3691aa27e73928cfc94b6ca85e02c62ac8fc9925f5c6481c62e36169492d6741aa7e32fbc03e9391f9b9b275e7e9551b938d5b80bafbdc1dd37bfb2772dbc29cf87b41fa609e535de02906ee62739ad3f141062547") madvise$auto(0x0, 0x200007, 0x19) ioperm$auto(0x7, 0x6, 0x1) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) executing program 5: mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) (fail_nth: 6) executing program 5: r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x59, 0x7) ioctl$auto_SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000040)) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="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", 0xfe04) executing program 1: mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x30, 0x0, 0x56b) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0xd}, @ILA_ATTR_LOCATOR_MATCH={0xc}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x5}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x5}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/initstate\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x5, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x10]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x11, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) getpeername$auto(r3, 0x0, 0x0) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) execveat$auto(0x6, &(0x7f0000000000)='[[]$)%*++{#\x00', 0x0, 0x0, 0x1000) r7 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x2881, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r7, &(0x7f0000000080)="390d00a741ee", 0x6) getpid() executing program 5: mmap$auto(0x8, 0xf88, 0xdf, 0x20009b72, 0xffffffffffffffff, 0x100000001) r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/sockcreate\x00', 0x6400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r3, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf255100000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_NET_GET(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$auto(0x9, &(0x7f0000000000)=@bpf_attr_11={0xffff, 0x1, 0x9, 0x6, 0x3ff, 0xa7, 0xb, r0}, 0x9) r8 = socket(0x1f, 0x5, 0x0) mmap$auto(0x1, 0x85, 0x40e5, 0xebd, 0x405, 0x7ffd) r9 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ubifs/chk_general\x00', 0x10800, 0x0) read$auto_dfs_global_fops_debug(r9, &(0x7f00000001c0)=""/187, 0xbb) getcwd$auto(0x0, 0xffffffffffffffff) r10 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/v4l-subdev7\x00', 0x102f03, 0x0) poll$auto(&(0x7f0000000480)={r10, 0xffff, 0x29}, 0x6, 0x8) bind$auto(r8, &(0x7f0000000280)=@sco={0x1f, @none}, 0x6a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) iopl$auto(0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x80000, 0x8b) socket(0xa, 0x2, 0x0) executing program 8: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r1 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x56a, 0xb275, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r2, 0x40085503, &(0x7f0000000600)={0xd, 0x0, 0x3}) preadv$auto(r2, &(0x7f0000000100)={0x0, 0x20000dd}, 0x1, 0x2, 0x5) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffd, 0xeb1, 0xffff7ffffffffffa, 0x8) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty2\x00', 0x20500, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, 0x0) sendmsg$auto_TIPC_NL_KEY_FLUSH(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000000c0)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) executing program 8: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) epoll_create$auto(0x3e) write$auto(r0, &(0x7f0000000000)='/dev/nullb0\x00', 0xb2) close_range$auto(0x2, r0, 0x0) executing program 8: ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x9, 0xffffffffffffffff}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebd, r0, 0x8000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x4, 0x8) (async) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x2, 0x0) (async) io_uring_setup$auto(0x59, 0x0) executing program 8: ioctl$auto(0xffffffffffffffff, 0x80045439, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) readv$auto(r0, 0x0, 0x3) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x2, 0x8, 0x0) (fail_nth: 1) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) executing program 5: request_key$auto_KEY_SPEC_REQUESTOR_KEYRING(0x0, 0x0, 0x0, 0xfffffffffffffff8) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/mem_used_max\x00', 0xa081, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) setrlimit$auto(0xb, 0x0) mincore$auto(0xff7, 0x8001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio28\x00', 0x101100, 0x0) mmap$auto(0x0, 0x9, 0x9cad, 0x8012, 0x3, 0x8000) read$auto(r1, &(0x7f0000000000)='+-\x00', 0x5) r2 = gettid() ioctl$auto_EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=0x8) rt_tgsigqueueinfo$auto(0x0, r2, 0x21, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) readv$auto(r3, 0x0, 0x4) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) executing program 5: openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x9, 0x20008, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4038ae7a, r0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) executing program 8: r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYBLOB='h\x005'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x620081, 0x0) write$auto_ctl_device_fops_user(r1, &(0x7f0000000340)="a504ff4c280e43904055ceb3bc98cf2af453126b06d1f8b678ad4700b35e33bf24e0c6269dd4fcfeafaacd781a02e63a0f9cf51e53d742c6cd3e1a4531a69c151e3714d2418d3a55d79a114e8309e48778a229eef16577bd021ce7b48a29a4e1c32f5f0c3393287d", 0x68) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 12, 30, 12, 24, 14, 14, 21, 27, 12, 8, 30, 8, 8, 12, 22, 21, 30, 29, 30, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000f0ffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) mlockall$auto(0x7) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000fc000000000000c0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vimc.0/video4linux/video4/name\x00', 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x3}, 0x20000007}, 0x3, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x81}, 0x1, 0x0, 0x0, 0x8) (async) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mlock$auto(0x1000, 0x6) (async) mlockall$auto(0x800000000000005) (async) pselect6$auto(0x8000, &(0x7f0000000080)={[0x800, 0x3, 0xb, 0xb9, 0x7, 0x7, 0x28, 0x4, 0x100, 0x9, 0x3, 0xffffffffffff6ee4, 0x80, 0x47, 0x3, 0x40]}, &(0x7f0000000640)={[0xfffffffffffffffc, 0x8, 0x101, 0x4, 0xb, 0x0, 0x3f8b, 0xc, 0x2, 0x2, 0x7, 0x7f, 0x0, 0x800, 0x7fffffffffffffff, 0x6]}, &(0x7f00000006c0)={[0x5d58, 0x7, 0xa5, 0x7f, 0xffffffffffffff63, 0x6, 0xfffffffffffffffa, 0x2001, 0x4, 0x7, 0x6, 0x8000, 0xc, 0x101, 0x4, 0x9]}, &(0x7f0000000200)={0x6, 0xac}, &(0x7f0000000740)="84564c8c26b8144fd4d3e1ecb7942bbed10faff85baff45164fe66cd970aa99ce6e0b82e3f049231ba73698898fcd2a65389893a8ce8b267d7aa4f5258122e0b18ac67ffde635cac8164af89d15c5b3222a32a0e03b46c0b57abb954eb9a7ba2e851d345c9e7319f0334e91d93a1a639c9a157cbd953f98a055c6326e49c3691aa27e73928cfc94b6ca85e02c62ac8fc9925f5c6481c62e36169492d6741aa7e32fbc03e9391f9b9b275e7e9551b938d5b80bafbdc1dd37bfb2772dbc29cf87b41fa609e535de02906ee62739ad3f141062547") (async) madvise$auto(0x0, 0x200007, 0x19) (async) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) madvise$auto(0xb, 0x0, 0x3) (async) madvise$auto(0x7, 0x4, 0x2) (async) r2 = socket(0xa, 0x5, 0x13c) getsockopt$auto(r2, 0x20000028, 0x6, 0x0, 0x0) msync$auto(0x7, 0xfe, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x7) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f009effffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mbind$auto(0x10, 0x0, 0x80, &(0x7f0000000040)=0x4, 0x2be4, 0x1000) executing program 0: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) executing program 32: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) executing program 3: mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) writev$auto(r1, &(0x7f0000000280)={0x0, 0x45}, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="080061000100000008006200fcff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_setup$auto(0x59, 0x0) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRES8=r4, @ANYRES32], 0x18}}, 0x80) executing program 3: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/class\x00', 0x800, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x5, 0x0) msgctl$auto(0x26, 0x400, 0x0) rseq$auto(0x0, 0xfffffff4, 0x0, 0x7) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/mtd\x00', 0x80000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r0, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) write$auto_console_fops_tty_io(r1, &(0x7f0000000040)="0152f1ccbaf0a250747d8adb", 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) setsockopt$auto(0x1, 0x1, 0x46, &(0x7f0000000000)='\x00', 0xbb) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_NVRAM_INIT(0xffffffffffffffff, 0x7040, 0x0) socket(0x21, 0x2, 0xa) select$auto(0xb, &(0x7f00000000c0)={[0x40, 0xfffffffffffffffb, 0x0, 0x3, 0xffffffffffff4fc9, 0x9, 0x6, 0x0, 0x3b73, 0x5, 0x7, 0x8, 0x10001, 0x2, 0x6, 0xade]}, &(0x7f00000001c0)={[0xfffffffffffffff9, 0x3, 0x100, 0x51b, 0xb, 0x0, 0xc, 0x2, 0x31, 0x9, 0xff, 0x1, 0xb, 0x4, 0x101, 0x5]}, &(0x7f0000000240)={[0x3, 0x3ff, 0x70f, 0x200, 0x913, 0x9, 0x5, 0x8000000000000001, 0x77, 0x7, 0x7ff, 0x3e95, 0x6, 0x4, 0x6, 0x10]}, &(0x7f0000000140)={0x101, 0x9}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x5608, r3) executing program 3: mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8040) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1a) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r1, 0x0, 0x20000000001, 0x7fff) executing program 3: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) tgkill$auto(0x0, 0x1, 0x1) mkdir$auto(0x0, 0x8) socket(0x22, 0x2, 0x7) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r0, 0x5408, 0x0) executing program 3: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x18, 0xa, 0x1) r1 = socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) quotactl_fd$auto(r4, 0x4, 0xffffffffffffffff, 0x0) shmctl$auto_SHM_LOCK(0x10001, 0xb, &(0x7f0000000440)={{0xfffffff7, 0xffffffffffffffff, 0x0, 0x1, 0x7ca2, 0x3, 0x6}, 0x4, 0x1, 0xb7, 0x8, @inferred=0xffffffffffffffff, @inferred, 0x9, 0x0, &(0x7f0000000340)="c00f87773c44b8b6cbb6c50dd42957f448855f3876a33d06df799f0536f433e46520f1c8fa1a9f1546f6f356e75612bdd0353e293c24a990cd9e716aa5f0e9f3", &(0x7f0000000380)="a1937b45e771290c616e3c402dec57ecca600893cf1f4849977d9fae8284674b03acc3f1d5c386d6b14792ee9eab958e39a3e504a8bb2420159cc381ddc6213b96c769f3a07b33e0aaa522b5237af57f4cf89209654b44caf89ab73dfc865e011db686e789993baf8cf436ebd8cb50062131503109c72569d5d2f88599716c595a15b89d93a6398b689fc755dd5e0b5b0d57cfc128270d18ceaf45b3c306ed35d08e3a3f1365033849594b705b926f5fdb7de37d5ee96165"}) sendmsg$auto_IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000001900)={0x1680, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x145e, 0x3, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @pid}, @generic="8b8bd25fece342c432878ac66463fec7b55c680b601bb7b3aa9a775e34f77decf4c1828704441f1df271bf59112a60ff2324e639ae5ed4b94d6d0e35b882404c8d36804d45bb6bd89bfcd043d1fe471d3ec57e6d54655478aec001113799d408f8468b02bc30e5077718f6916e9c6d4404a40e1809eca74f0161ef843ecc6a4b46e6", @nested={0xea, 0x144, 0x0, 0x1, [@nested={0x4, 0x47}, @nested={0x4, 0xdb}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0xda27}, @nested={0x4, 0x128}, @typed={0x8, 0x14, 0x0, 0x0, @fd=r4}, @generic="6ca420c5ae223ead8f4be36f25b2c0718b444b98088dce7df68e3e81808a506e59c51d3e74f18bf91c09b351155a8b6c859bd07765e18122c19746bcde429cf675ef057aca852ade921f813313b9e655d80624c9af129345631a22428badb0a820c3286eeef1dad5ae5eb66e0480dd92fb20a5d888cbc6b720fbd70fd4c1d2a5e4fe7e7bff704dc196ee2b449cf44f2fa08138685e3078a116d23700b4ae7072c5a558cab708bf8f039756cce3911f8c5b841ef4669ce15834c1a77140cb71fc3891", @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="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", @nested={0x11e, 0xe, 0x0, 0x1, [@nested={0x4, 0x64}, @nested={0x4, 0xba}, @generic="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", @typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@loopback}]}, @generic, @nested={0x14a, 0x13, 0x0, 0x1, [@generic="8d9dfa3bd02f355a96eb6109995c0b2f70c0b0cff7f96677fcd201dfe1cb6d2baebd03d5c1e74d408150564ec7d0ee2c22882eb9de2db00a3943eb5771c18fd37fa5312996ed81bb2a70544cb3371ffb3a61596a51c13695f41d3c8579edac899c459929523c675701818842730d0b7c96d1bac5192419", @typed={0x8, 0x123, 0x0, 0x0, @uid=r5}, @generic="cf9ac7b7ab2f2b25c00021efa8cc7722ec5e23e21260d3c47669861eb5afd3fb013bc74be10b27a6257fcb79b12dd8c061986982ee37d4233873c381003c91e12057e4fe4de339f3608fe5067073cea3028dc3d858a4003128226a5d4a862d2167a0e61524c21c8c44a3d7c85a170850c755106d2138b5a9863f11570dd805e7a28ed71b72a1a2f6f44f4af7596c3ecfbb97a2f6d9b3514a2ada101d1f882559d74aba2440c7692005b145da398e53d526d20ce2a86fb7521add3dfe702ec422c1c8b0", @nested={0x4, 0xb3}]}, @nested={0x78, 0xf6, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x4, 0x64}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x6}, @generic="596ca0b1488ea6a0c345fc15b88d5a2b6ffa7b0ade5ba46aa9c1d39a8193aa05508f53", @nested={0x4, 0x10}, @nested={0x4, 0x4c}, @typed={0x8, 0x21, 0x0, 0x0, @ipv4=@local}, @generic="22cde702cc2e4febfd7454751a4bb134dd2a79ca08900f6fb6f736f693b53fcfb281a0178a", @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x3, 0x0}}, @nested={0x4, 0x88}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc2f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @fd=r0}]}, @IPVS_CMD_ATTR_DAEMON={0x1f5, 0x3, 0x0, 0x1, [@typed={0xa0, 0x5, 0x0, 0x0, @binary="1bc4525b65adb4ac8bfa5b05591ad86be9172955e7fa6cb16e32cdba316f5559366898317edac346b74b8c49f90c7303ce934d6617c9c4946a4c7eb811944eef7bee65a5ec787d6d2a48c24172a9cd27180c1da011ce56210065fa631bd23338037604ce2a6a42bbd212695e03c1efc5790e161cf7f732d525b2b75b008cb9b6c18e1accecf85293929ef2aa68059891312bf4bc959eadfb5a74acfd"}, @generic="203b4e5cdc6863d3e6207e55ac42883bd0ed48ebf8957ad1c816f7c28cf9d4ffdec1ab123e61e15ab720605d27a5fbadc99209cb17dffef6cfd04d6565aeaef0b38434266b8cdf7c068016f761d7772d47b20a4d761010ec53568f4bab0c650ebcf4e93fb6356d167ccd15b97d04a20267e0328120564f82efaa50507444aab8d2c1f7ded32003b95da8ca4e8edd7f9040e3eba21b8ab0d7513d8fd4450156a3b91f72fa72344bbd665bf510047cb39eb02d56f14853a81b05199800ccc315d62cae1922c2550e10f04702508fa651e7fb4d880b", @generic="2371be940a082411c16f59f902c743a350d015be173c571446494218505c75ecff3fa3f3f7ab385576270a7422f9d96b54f0b7dcf1e8899084a7bbbde107e2b9f327615c80c9cd24d4a38de009aba6148c78095e52f2abb4c56ef296e0bb7ceef6665ea66eba8fca1d7bb095d6f966cbfc6a244668b017e28c1b2d4f3c"]}]}, 0x1680}, 0x1, 0x0, 0x0, 0x41880}, 0x48000) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20006, 0x3, 0xe72, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x4, 0x7ff) wait4$auto(r6, 0x0, 0x80000000, 0x0) rt_sigqueueinfo$auto(r6, 0x5, &(0x7f0000000240)={@_si_pad}) write$auto(0xffffffffffffffff, &(0x7f0000000080)='#-*,+\\}\x00', 0x8) unshare$auto(0x40000080) executing program 3: mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) executing program 33: mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) executing program 4: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f000000000000030000c0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 4: r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0x0, 0x9, 0xc8e6}, 0x27, 0x101) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r2 = socket(0x1d, 0x3, 0x1) getsockname$auto(r2, 0x0, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000180)={0x4, 0x1ff, 0x4, 0x5, 0x4800000, 0xffffffff, "b8556e95fd689b52ae05aa60209708fe", 0x6, 0x8, 0x17, 0xa7, 0x1, 0xfc, 0x81}) r3 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) read$auto_debugfs_devm_entry_ops_file(r3, &(0x7f0000000940)=""/46, 0x2e) fcntl$auto(r1, 0x400, 0x1) read$auto_tracing_stats_fops_trace(r1, &(0x7f0000000000)=""/250, 0xfa) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0xa2400, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0x0, 0x9, 0xc8e6}, 0x27, 0x101) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async) socket(0x1d, 0x3, 0x1) (async) getsockname$auto(r2, 0x0, 0x0) (async) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000180)={0x4, 0x1ff, 0x4, 0x5, 0x4800000, 0xffffffff, "b8556e95fd689b52ae05aa60209708fe", 0x6, 0x8, 0x17, 0xa7, 0x1, 0xfc, 0x81}) (async) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) (async) read$auto_debugfs_devm_entry_ops_file(r3, &(0x7f0000000940)=""/46, 0x2e) (async) fcntl$auto(r1, 0x400, 0x1) (async) read$auto_tracing_stats_fops_trace(r1, &(0x7f0000000000)=""/250, 0xfa) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0xa2400, 0x0) (async) executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x167c0, 0x152) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setpgid$auto(0x7, 0xffffffdffffffff4) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000), 0xa) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r1, 0x40044145, 0x0) ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, &(0x7f0000000100)="36f088b87bfe468f324f00fc60a01a18f9d1e34d813d4b558061677ca920738feb61791ce8f7af4d754895925e7ba736b3c9e9c5ba570bd5491ea83dcd05db74774669a4ca194e5136eb04bb2c01e3fee9a0505620603d150052f5e8b19bd1db7ed1bf086360c5b80f619b77c4331dab395b88ada34a84904a7ba805e191b31c1092dec0c3b434c4132787f9c85c70bbdb5bcfd902da8fc52c8496d4f6f57680ec19a285b5a593587c273682d32829b8df1e269f28c074ddc9ac0d5c611ac89add24fbcf2236ba4a8d45d7c2b2f83568c6594739c837e71490d0a38e7adb") openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) mmap$auto(0x3, 0x2060009, 0x7fffffffffffffff, 0x7fffffff, r0, 0x8004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) io_pgetevents$auto(0x7fff, 0xd47, 0x3, 0x0, &(0x7f0000000040)={0x100000000000000, 0x2}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) r3 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) futimesat$auto(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xb, 0x100000001}) pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) splice$auto(r4, 0x0, r0, 0x0, 0x768, 0x9) close_range$auto(0x2, 0x8, 0x0) executing program 4: mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000480), r3) shmctl$auto(0x3a9, 0x16d, &(0x7f0000000580)={{0x6, 0xee00, 0xffffffffffffffff, 0x100, 0x8000, 0x5, 0x4}, 0x40, 0x4, 0xb, 0x6, @inferred, @raw=0x10, 0xde4, 0x0, &(0x7f00000004c0)="ecea", &(0x7f0000000500)="29d4c45d90eddee334bc10951a649c51a2f426b4505d85262b04da444efd83b0ed5cff471f9485e3ecd0fa9206913dccb1e5b9d5ee13c034ddc269d153fca7e14697a286435808a946458c06cae902afb62e1a2fb76e77f588a48e647be62868fec031"}) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000001180)={0x14ec, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0xf2, 0x3, 0x0, 0x1, [@typed={0x8, 0xb5, 0x0, 0x0, @uid=r5}, @generic="c2184e10db349177ab61c22ec1433da73ff5ff97266360a76d3e5d5b2e306e60a388444ffdc3593a98d8014a1cee702732f826d32204986afcbf1648a8a483981c17a0655abe7921a12cda0a1169f56f4736ee546b2727e1ed79d9af41f5b927ef42c0d3aa33080b8482f59410ecbe1a4518f425b5442fda68b78ea734fd16647a7be84a91bc8abf0ed23fe6fb3d2813296a1b948fc9951aaa672ffc0bb33cb6f1d6ca03", @generic="cd74f188c91081813ab0db7288642bc28a8891084818a048c3673a15b28e5d151d2b38b8cd8ed75cb3eac8df6c897ef3a224785e06979dc289ce920d312faebd8a90"]}, @IPVS_CMD_ATTR_DAEMON={0x1b7, 0x3, 0x0, 0x1, [@typed={0x4, 0x12a}, @generic, @nested={0xe3, 0x2d, 0x0, 0x1, [@nested={0x4, 0x63}, @typed={0xc, 0xd8, 0x0, 0x0, @u64=0x81}, @generic="bb1087eadb1c6963b3be40cb94eeb2388bd85c29b634195cdc989a5654e787937807647a166c23ce3176d6f958975c74b796323cb16b63e66e3921c2e43f15d8eca214f578ccbef1f7ded18481b3182db0a22eb4c4ac9b9214b0b76349536b5f2886421a8789bc1b38655cd7b0605b3197dd115c8c03881d9c61c523b985f2923278324e3e0b670efc9f17a33474eef89cb38705d629f538bd50d097d780d1a27f8cc2c003d710914d6e01a42c86b73c47b7c52fe84d5d9754f0f82c2d4c91a31ed9af", @typed={0x8, 0xc4, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x96}]}, @generic="ed583b14c8cdd5bfe22511137d2b16279d9a7c519f90931af1f12be1894aa3b3440ea05d3c2be1d341e99549ff698f942161f6697ea8427a4b1ccd674246d31f3fd9a8c1577fc3be53a8b96eb2a727c72e11e5e67f86b12eea0e07d57ac5f37fee12a3db6ed0482545e6831749fd4325e72d61793b2ecf48dbeeb005b2ec4ba335d4ce8b3a84d968e1bd671f3ecfeabf0b22d932d8cbb7952981fd5e72e722c58172d0548ab6314ae066e00b0c277343f7335651bc72c1d73c80737b924798f295443a50b17685dc065b3a"]}, @IPVS_CMD_ATTR_DEST={0x1173, 0x2, 0x0, 0x1, [@generic="0d36b99361b746c60f879dc06c116186026f8588f5c3673b0b4ed6bb940f2a234056be9f21d726f7736feadb9dad09902f3633058230f3bdd0fea271c213b0c0752a7a5c32d500514acc4bb9ee83518545310b19110e9416a33f8fe24176cedd336a6e5a8f90cc7a73874804b3d74ff233239b6f83938d26c905e70827800f52781367738cd11f0650fff5", @generic="eda9e53dcdc6bda0f6a93fb8f92c3fb77bfbd11660cb9a1808a2939f34d95f8f4ae020b906c2bdfb14798961dba37fbc92b0662691d9c0ef75356e84b9e656e2d9534f09d2234ef2", @generic="90ae998d2968e109764c9b7060b953831f01a03f01e92a342241f475ef693115a9470c448e2758eb0715bfd8476684c19c28bb817a3574f16a0d69f3bde8dea320e329c4f42ffee8c7933e0de85599b33d9c14c6fb1d27c257f9f2140fcfc2aafa75c10593e6c6e0ffce0b8653d3734992bfa648d3a5fe2e77cfa7e3e91247080ffb33074b1ba5763d5d3966a2b1b2ef53216256", @generic="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", @nested={0x8, 0x118, 0x0, 0x1, [@nested={0x4, 0xe2}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_SERVICE={0xa8, 0x1, 0x0, 0x1, [@nested={0xa3, 0x105, 0x0, 0x1, [@typed={0xc, 0x6b, 0x0, 0x0, @u64=0x1ff}, @generic="c539d7f79fe3f1c7bcd9598b47d4bc11553d9eb1394accc89fb914f089a72c5ff4aa4878481ad79305e6b4176bc871e7ec768fe7a4fdfda52f6da4bda73e88b86d89bb0f438cd8ffe51263f96a5b2bc8c930494b19684196a7b93bfa06f02444efe6c7bd6b18853b4aeea8ee565d8c35053c73d7141134fe0c861a", @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0xdf}]}]}]}, 0x14ec}, 0x1, 0x0, 0x0, 0x8001}, 0x1) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x2, 0xcd5f, 0x1, @_kill={0x0, 0xffffffffffffffff}}}, 0x7, &(0x7f0000000140)={{0x5, 0x23}, {0x7, 0x8001}, 0x1, 0x3, 0x3, 0x1, 0x0, 0x7ff, 0x6, 0x1, 0x6, 0x7, 0x691, 0xa9, 0x0, 0x7}) adjtimex$auto(&(0x7f00000002c0)={0x2, 0x0, 0xcb, 0xcd, 0x3, 0x8000, 0x3, 0x0, 0x80, 0x4000, 0xfffffffffffffe01, {0x6, 0x10001}, 0x4, 0x2, 0x7, 0x7, 0x0, 0x64873d63, 0x7, 0x8, 0xffff, 0xa, 0x3ff}) sendmsg$auto_OVS_DP_CMD_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_NAME={0x6, 0x1, '*\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8040) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, 0x0, 0x1a) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/module/ib_iser/parameters/max_sectors\x00', 0x20a42, 0x0) sendfile$auto(r7, r7, 0x0, 0x4f64a1d2) adjtimex$auto(0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x10eb1, 0xfffffffffffffffd, 0x8000) socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) executing program 4: open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptya3\x00', 0x82e343, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/shmem_fallback\x00', 0x101700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) socket(0x25, 0x6, 0x0) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000001080)={"f2b0e77c15814ccbd31cbfc1be00641bdbc5590fa669dd00000100000000004bbe432f9f1498df37b37b5682b4a45de81ed08d2421f6d4dd6277f0cbf348d3b6d6d237ddee104e8bdd3134c07c645c9e1058f625c2250683796a35edbe0dc9a99f436e05c010101fda81b336aa520d52594a7366f205857c7c4f08af2874e4835f0088b46db869b0de065b53d4470ba071c622eb6d174c6b8afcfed6e66c011ee02367a79b51bfc45a9d624b0533400f784075094246f86a42fc2183ebab9eaf7f0101d2b1555b3d2c1213c9cec2d78dd57a1d628d93f379a7b9e65d4ec3a7ab8b7ccd5db4670f000061c8316fbe84aa6f2900", 0x3, 0xf}) mmap$auto(0x0, 0x20009, 0x20004000000000db, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x8208ae63, r3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x133e02, 0x0) bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x630, 0x57d, 0x9, 0x8}, 0xa3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) executing program 4: mmap$auto(0x1000000006, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) syz_clone(0x800800, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000, 0x5, 0x0, 0x8, 0x2) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) write$auto(r1, 0x0, 0x800f) sendmmsg$auto(0x3, 0x0, 0x9aa, 0x7000002) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) mmap$auto(0x6, 0x100, 0x4000001000df, 0x18, r0, 0x4008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd13/queue/max_segment_size\x00', 0x400000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x80000000020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc1}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x7, 0x8) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram2/integrity/read_verify\x00', 0x7095c2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x10, r2, 0x5) dup2$auto(r2, r0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev bisect: the chunk can be dropped bisect: split chunks (needed=true): <20> bisect: split chunk #0 of len 20 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 30, 8, 8, 12, 22, 21, 30, 29, 30, 38] detailed listing: executing program 3: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) tgkill$auto(0x0, 0x1, 0x1) mkdir$auto(0x0, 0x8) socket(0x22, 0x2, 0x7) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r0, 0x5408, 0x0) executing program 3: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x18, 0xa, 0x1) r1 = socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) quotactl_fd$auto(r4, 0x4, 0xffffffffffffffff, 0x0) shmctl$auto_SHM_LOCK(0x10001, 0xb, &(0x7f0000000440)={{0xfffffff7, 0xffffffffffffffff, 0x0, 0x1, 0x7ca2, 0x3, 0x6}, 0x4, 0x1, 0xb7, 0x8, @inferred=0xffffffffffffffff, @inferred, 0x9, 0x0, &(0x7f0000000340)="c00f87773c44b8b6cbb6c50dd42957f448855f3876a33d06df799f0536f433e46520f1c8fa1a9f1546f6f356e75612bdd0353e293c24a990cd9e716aa5f0e9f3", &(0x7f0000000380)="a1937b45e771290c616e3c402dec57ecca600893cf1f4849977d9fae8284674b03acc3f1d5c386d6b14792ee9eab958e39a3e504a8bb2420159cc381ddc6213b96c769f3a07b33e0aaa522b5237af57f4cf89209654b44caf89ab73dfc865e011db686e789993baf8cf436ebd8cb50062131503109c72569d5d2f88599716c595a15b89d93a6398b689fc755dd5e0b5b0d57cfc128270d18ceaf45b3c306ed35d08e3a3f1365033849594b705b926f5fdb7de37d5ee96165"}) sendmsg$auto_IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000001900)={0x1680, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x145e, 0x3, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @pid}, @generic="8b8bd25fece342c432878ac66463fec7b55c680b601bb7b3aa9a775e34f77decf4c1828704441f1df271bf59112a60ff2324e639ae5ed4b94d6d0e35b882404c8d36804d45bb6bd89bfcd043d1fe471d3ec57e6d54655478aec001113799d408f8468b02bc30e5077718f6916e9c6d4404a40e1809eca74f0161ef843ecc6a4b46e6", @nested={0xea, 0x144, 0x0, 0x1, [@nested={0x4, 0x47}, @nested={0x4, 0xdb}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0xda27}, @nested={0x4, 0x128}, @typed={0x8, 0x14, 0x0, 0x0, @fd=r4}, @generic="6ca420c5ae223ead8f4be36f25b2c0718b444b98088dce7df68e3e81808a506e59c51d3e74f18bf91c09b351155a8b6c859bd07765e18122c19746bcde429cf675ef057aca852ade921f813313b9e655d80624c9af129345631a22428badb0a820c3286eeef1dad5ae5eb66e0480dd92fb20a5d888cbc6b720fbd70fd4c1d2a5e4fe7e7bff704dc196ee2b449cf44f2fa08138685e3078a116d23700b4ae7072c5a558cab708bf8f039756cce3911f8c5b841ef4669ce15834c1a77140cb71fc3891", @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="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", @nested={0x11e, 0xe, 0x0, 0x1, [@nested={0x4, 0x64}, @nested={0x4, 0xba}, @generic="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", @typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@loopback}]}, @generic, @nested={0x14a, 0x13, 0x0, 0x1, [@generic="8d9dfa3bd02f355a96eb6109995c0b2f70c0b0cff7f96677fcd201dfe1cb6d2baebd03d5c1e74d408150564ec7d0ee2c22882eb9de2db00a3943eb5771c18fd37fa5312996ed81bb2a70544cb3371ffb3a61596a51c13695f41d3c8579edac899c459929523c675701818842730d0b7c96d1bac5192419", @typed={0x8, 0x123, 0x0, 0x0, @uid=r5}, @generic="cf9ac7b7ab2f2b25c00021efa8cc7722ec5e23e21260d3c47669861eb5afd3fb013bc74be10b27a6257fcb79b12dd8c061986982ee37d4233873c381003c91e12057e4fe4de339f3608fe5067073cea3028dc3d858a4003128226a5d4a862d2167a0e61524c21c8c44a3d7c85a170850c755106d2138b5a9863f11570dd805e7a28ed71b72a1a2f6f44f4af7596c3ecfbb97a2f6d9b3514a2ada101d1f882559d74aba2440c7692005b145da398e53d526d20ce2a86fb7521add3dfe702ec422c1c8b0", @nested={0x4, 0xb3}]}, @nested={0x78, 0xf6, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x4, 0x64}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x6}, @generic="596ca0b1488ea6a0c345fc15b88d5a2b6ffa7b0ade5ba46aa9c1d39a8193aa05508f53", @nested={0x4, 0x10}, @nested={0x4, 0x4c}, @typed={0x8, 0x21, 0x0, 0x0, @ipv4=@local}, @generic="22cde702cc2e4febfd7454751a4bb134dd2a79ca08900f6fb6f736f693b53fcfb281a0178a", @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x3, 0x0}}, @nested={0x4, 0x88}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc2f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @fd=r0}]}, @IPVS_CMD_ATTR_DAEMON={0x1f5, 0x3, 0x0, 0x1, [@typed={0xa0, 0x5, 0x0, 0x0, @binary="1bc4525b65adb4ac8bfa5b05591ad86be9172955e7fa6cb16e32cdba316f5559366898317edac346b74b8c49f90c7303ce934d6617c9c4946a4c7eb811944eef7bee65a5ec787d6d2a48c24172a9cd27180c1da011ce56210065fa631bd23338037604ce2a6a42bbd212695e03c1efc5790e161cf7f732d525b2b75b008cb9b6c18e1accecf85293929ef2aa68059891312bf4bc959eadfb5a74acfd"}, @generic="203b4e5cdc6863d3e6207e55ac42883bd0ed48ebf8957ad1c816f7c28cf9d4ffdec1ab123e61e15ab720605d27a5fbadc99209cb17dffef6cfd04d6565aeaef0b38434266b8cdf7c068016f761d7772d47b20a4d761010ec53568f4bab0c650ebcf4e93fb6356d167ccd15b97d04a20267e0328120564f82efaa50507444aab8d2c1f7ded32003b95da8ca4e8edd7f9040e3eba21b8ab0d7513d8fd4450156a3b91f72fa72344bbd665bf510047cb39eb02d56f14853a81b05199800ccc315d62cae1922c2550e10f04702508fa651e7fb4d880b", @generic="2371be940a082411c16f59f902c743a350d015be173c571446494218505c75ecff3fa3f3f7ab385576270a7422f9d96b54f0b7dcf1e8899084a7bbbde107e2b9f327615c80c9cd24d4a38de009aba6148c78095e52f2abb4c56ef296e0bb7ceef6665ea66eba8fca1d7bb095d6f966cbfc6a244668b017e28c1b2d4f3c"]}]}, 0x1680}, 0x1, 0x0, 0x0, 0x41880}, 0x48000) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20006, 0x3, 0xe72, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x4, 0x7ff) wait4$auto(r6, 0x0, 0x80000000, 0x0) rt_sigqueueinfo$auto(r6, 0x5, &(0x7f0000000240)={@_si_pad}) write$auto(0xffffffffffffffff, &(0x7f0000000080)='#-*,+\\}\x00', 0x8) unshare$auto(0x40000080) executing program 3: mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) executing program 33: mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) executing program 4: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f000000000000030000c0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 4: r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0x0, 0x9, 0xc8e6}, 0x27, 0x101) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r2 = socket(0x1d, 0x3, 0x1) getsockname$auto(r2, 0x0, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000180)={0x4, 0x1ff, 0x4, 0x5, 0x4800000, 0xffffffff, "b8556e95fd689b52ae05aa60209708fe", 0x6, 0x8, 0x17, 0xa7, 0x1, 0xfc, 0x81}) r3 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) read$auto_debugfs_devm_entry_ops_file(r3, &(0x7f0000000940)=""/46, 0x2e) fcntl$auto(r1, 0x400, 0x1) read$auto_tracing_stats_fops_trace(r1, &(0x7f0000000000)=""/250, 0xfa) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0xa2400, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0x0, 0x9, 0xc8e6}, 0x27, 0x101) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async) socket(0x1d, 0x3, 0x1) (async) getsockname$auto(r2, 0x0, 0x0) (async) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000180)={0x4, 0x1ff, 0x4, 0x5, 0x4800000, 0xffffffff, "b8556e95fd689b52ae05aa60209708fe", 0x6, 0x8, 0x17, 0xa7, 0x1, 0xfc, 0x81}) (async) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) (async) read$auto_debugfs_devm_entry_ops_file(r3, &(0x7f0000000940)=""/46, 0x2e) (async) fcntl$auto(r1, 0x400, 0x1) (async) read$auto_tracing_stats_fops_trace(r1, &(0x7f0000000000)=""/250, 0xfa) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0xa2400, 0x0) (async) executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x167c0, 0x152) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setpgid$auto(0x7, 0xffffffdffffffff4) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000), 0xa) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r1, 0x40044145, 0x0) ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, &(0x7f0000000100)="36f088b87bfe468f324f00fc60a01a18f9d1e34d813d4b558061677ca920738feb61791ce8f7af4d754895925e7ba736b3c9e9c5ba570bd5491ea83dcd05db74774669a4ca194e5136eb04bb2c01e3fee9a0505620603d150052f5e8b19bd1db7ed1bf086360c5b80f619b77c4331dab395b88ada34a84904a7ba805e191b31c1092dec0c3b434c4132787f9c85c70bbdb5bcfd902da8fc52c8496d4f6f57680ec19a285b5a593587c273682d32829b8df1e269f28c074ddc9ac0d5c611ac89add24fbcf2236ba4a8d45d7c2b2f83568c6594739c837e71490d0a38e7adb") openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) mmap$auto(0x3, 0x2060009, 0x7fffffffffffffff, 0x7fffffff, r0, 0x8004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) io_pgetevents$auto(0x7fff, 0xd47, 0x3, 0x0, &(0x7f0000000040)={0x100000000000000, 0x2}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) r3 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) futimesat$auto(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xb, 0x100000001}) pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) splice$auto(r4, 0x0, r0, 0x0, 0x768, 0x9) close_range$auto(0x2, 0x8, 0x0) executing program 4: mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000480), r3) shmctl$auto(0x3a9, 0x16d, &(0x7f0000000580)={{0x6, 0xee00, 0xffffffffffffffff, 0x100, 0x8000, 0x5, 0x4}, 0x40, 0x4, 0xb, 0x6, @inferred, @raw=0x10, 0xde4, 0x0, &(0x7f00000004c0)="ecea", &(0x7f0000000500)="29d4c45d90eddee334bc10951a649c51a2f426b4505d85262b04da444efd83b0ed5cff471f9485e3ecd0fa9206913dccb1e5b9d5ee13c034ddc269d153fca7e14697a286435808a946458c06cae902afb62e1a2fb76e77f588a48e647be62868fec031"}) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000001180)={0x14ec, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0xf2, 0x3, 0x0, 0x1, [@typed={0x8, 0xb5, 0x0, 0x0, @uid=r5}, @generic="c2184e10db349177ab61c22ec1433da73ff5ff97266360a76d3e5d5b2e306e60a388444ffdc3593a98d8014a1cee702732f826d32204986afcbf1648a8a483981c17a0655abe7921a12cda0a1169f56f4736ee546b2727e1ed79d9af41f5b927ef42c0d3aa33080b8482f59410ecbe1a4518f425b5442fda68b78ea734fd16647a7be84a91bc8abf0ed23fe6fb3d2813296a1b948fc9951aaa672ffc0bb33cb6f1d6ca03", @generic="cd74f188c91081813ab0db7288642bc28a8891084818a048c3673a15b28e5d151d2b38b8cd8ed75cb3eac8df6c897ef3a224785e06979dc289ce920d312faebd8a90"]}, @IPVS_CMD_ATTR_DAEMON={0x1b7, 0x3, 0x0, 0x1, [@typed={0x4, 0x12a}, @generic, @nested={0xe3, 0x2d, 0x0, 0x1, [@nested={0x4, 0x63}, @typed={0xc, 0xd8, 0x0, 0x0, @u64=0x81}, @generic="bb1087eadb1c6963b3be40cb94eeb2388bd85c29b634195cdc989a5654e787937807647a166c23ce3176d6f958975c74b796323cb16b63e66e3921c2e43f15d8eca214f578ccbef1f7ded18481b3182db0a22eb4c4ac9b9214b0b76349536b5f2886421a8789bc1b38655cd7b0605b3197dd115c8c03881d9c61c523b985f2923278324e3e0b670efc9f17a33474eef89cb38705d629f538bd50d097d780d1a27f8cc2c003d710914d6e01a42c86b73c47b7c52fe84d5d9754f0f82c2d4c91a31ed9af", @typed={0x8, 0xc4, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x96}]}, @generic="ed583b14c8cdd5bfe22511137d2b16279d9a7c519f90931af1f12be1894aa3b3440ea05d3c2be1d341e99549ff698f942161f6697ea8427a4b1ccd674246d31f3fd9a8c1577fc3be53a8b96eb2a727c72e11e5e67f86b12eea0e07d57ac5f37fee12a3db6ed0482545e6831749fd4325e72d61793b2ecf48dbeeb005b2ec4ba335d4ce8b3a84d968e1bd671f3ecfeabf0b22d932d8cbb7952981fd5e72e722c58172d0548ab6314ae066e00b0c277343f7335651bc72c1d73c80737b924798f295443a50b17685dc065b3a"]}, @IPVS_CMD_ATTR_DEST={0x1173, 0x2, 0x0, 0x1, [@generic="0d36b99361b746c60f879dc06c116186026f8588f5c3673b0b4ed6bb940f2a234056be9f21d726f7736feadb9dad09902f3633058230f3bdd0fea271c213b0c0752a7a5c32d500514acc4bb9ee83518545310b19110e9416a33f8fe24176cedd336a6e5a8f90cc7a73874804b3d74ff233239b6f83938d26c905e70827800f52781367738cd11f0650fff5", @generic="eda9e53dcdc6bda0f6a93fb8f92c3fb77bfbd11660cb9a1808a2939f34d95f8f4ae020b906c2bdfb14798961dba37fbc92b0662691d9c0ef75356e84b9e656e2d9534f09d2234ef2", @generic="90ae998d2968e109764c9b7060b953831f01a03f01e92a342241f475ef693115a9470c448e2758eb0715bfd8476684c19c28bb817a3574f16a0d69f3bde8dea320e329c4f42ffee8c7933e0de85599b33d9c14c6fb1d27c257f9f2140fcfc2aafa75c10593e6c6e0ffce0b8653d3734992bfa648d3a5fe2e77cfa7e3e91247080ffb33074b1ba5763d5d3966a2b1b2ef53216256", @generic="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", @nested={0x8, 0x118, 0x0, 0x1, [@nested={0x4, 0xe2}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_SERVICE={0xa8, 0x1, 0x0, 0x1, [@nested={0xa3, 0x105, 0x0, 0x1, [@typed={0xc, 0x6b, 0x0, 0x0, @u64=0x1ff}, @generic="c539d7f79fe3f1c7bcd9598b47d4bc11553d9eb1394accc89fb914f089a72c5ff4aa4878481ad79305e6b4176bc871e7ec768fe7a4fdfda52f6da4bda73e88b86d89bb0f438cd8ffe51263f96a5b2bc8c930494b19684196a7b93bfa06f02444efe6c7bd6b18853b4aeea8ee565d8c35053c73d7141134fe0c861a", @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0xdf}]}]}]}, 0x14ec}, 0x1, 0x0, 0x0, 0x8001}, 0x1) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x2, 0xcd5f, 0x1, @_kill={0x0, 0xffffffffffffffff}}}, 0x7, &(0x7f0000000140)={{0x5, 0x23}, {0x7, 0x8001}, 0x1, 0x3, 0x3, 0x1, 0x0, 0x7ff, 0x6, 0x1, 0x6, 0x7, 0x691, 0xa9, 0x0, 0x7}) adjtimex$auto(&(0x7f00000002c0)={0x2, 0x0, 0xcb, 0xcd, 0x3, 0x8000, 0x3, 0x0, 0x80, 0x4000, 0xfffffffffffffe01, {0x6, 0x10001}, 0x4, 0x2, 0x7, 0x7, 0x0, 0x64873d63, 0x7, 0x8, 0xffff, 0xa, 0x3ff}) sendmsg$auto_OVS_DP_CMD_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_NAME={0x6, 0x1, '*\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8040) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, 0x0, 0x1a) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/module/ib_iser/parameters/max_sectors\x00', 0x20a42, 0x0) sendfile$auto(r7, r7, 0x0, 0x4f64a1d2) adjtimex$auto(0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x10eb1, 0xfffffffffffffffd, 0x8000) socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) executing program 4: open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptya3\x00', 0x82e343, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/shmem_fallback\x00', 0x101700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) socket(0x25, 0x6, 0x0) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000001080)={"f2b0e77c15814ccbd31cbfc1be00641bdbc5590fa669dd00000100000000004bbe432f9f1498df37b37b5682b4a45de81ed08d2421f6d4dd6277f0cbf348d3b6d6d237ddee104e8bdd3134c07c645c9e1058f625c2250683796a35edbe0dc9a99f436e05c010101fda81b336aa520d52594a7366f205857c7c4f08af2874e4835f0088b46db869b0de065b53d4470ba071c622eb6d174c6b8afcfed6e66c011ee02367a79b51bfc45a9d624b0533400f784075094246f86a42fc2183ebab9eaf7f0101d2b1555b3d2c1213c9cec2d78dd57a1d628d93f379a7b9e65d4ec3a7ab8b7ccd5db4670f000061c8316fbe84aa6f2900", 0x3, 0xf}) mmap$auto(0x0, 0x20009, 0x20004000000000db, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x8208ae63, r3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x133e02, 0x0) bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x630, 0x57d, 0x9, 0x8}, 0xa3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) executing program 4: mmap$auto(0x1000000006, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) syz_clone(0x800800, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000, 0x5, 0x0, 0x8, 0x2) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) write$auto(r1, 0x0, 0x800f) sendmmsg$auto(0x3, 0x0, 0x9aa, 0x7000002) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) mmap$auto(0x6, 0x100, 0x4000001000df, 0x18, r0, 0x4008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd13/queue/max_segment_size\x00', 0x400000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x80000000020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc1}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x7, 0x8) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram2/integrity/read_verify\x00', 0x7095c2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x10, r2, 0x5) dup2$auto(r2, r0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine bisect: testing without sub-chunk 2/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 12, 30, 12, 24, 14, 14, 21, 27, 12, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000f0ffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) mlockall$auto(0x7) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000fc000000000000c0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vimc.0/video4linux/video4/name\x00', 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x3}, 0x20000007}, 0x3, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x81}, 0x1, 0x0, 0x0, 0x8) (async) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mlock$auto(0x1000, 0x6) (async) mlockall$auto(0x800000000000005) (async) pselect6$auto(0x8000, &(0x7f0000000080)={[0x800, 0x3, 0xb, 0xb9, 0x7, 0x7, 0x28, 0x4, 0x100, 0x9, 0x3, 0xffffffffffff6ee4, 0x80, 0x47, 0x3, 0x40]}, &(0x7f0000000640)={[0xfffffffffffffffc, 0x8, 0x101, 0x4, 0xb, 0x0, 0x3f8b, 0xc, 0x2, 0x2, 0x7, 0x7f, 0x0, 0x800, 0x7fffffffffffffff, 0x6]}, &(0x7f00000006c0)={[0x5d58, 0x7, 0xa5, 0x7f, 0xffffffffffffff63, 0x6, 0xfffffffffffffffa, 0x2001, 0x4, 0x7, 0x6, 0x8000, 0xc, 0x101, 0x4, 0x9]}, &(0x7f0000000200)={0x6, 0xac}, &(0x7f0000000740)="84564c8c26b8144fd4d3e1ecb7942bbed10faff85baff45164fe66cd970aa99ce6e0b82e3f049231ba73698898fcd2a65389893a8ce8b267d7aa4f5258122e0b18ac67ffde635cac8164af89d15c5b3222a32a0e03b46c0b57abb954eb9a7ba2e851d345c9e7319f0334e91d93a1a639c9a157cbd953f98a055c6326e49c3691aa27e73928cfc94b6ca85e02c62ac8fc9925f5c6481c62e36169492d6741aa7e32fbc03e9391f9b9b275e7e9551b938d5b80bafbdc1dd37bfb2772dbc29cf87b41fa609e535de02906ee62739ad3f141062547") (async) madvise$auto(0x0, 0x200007, 0x19) (async) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) madvise$auto(0xb, 0x0, 0x3) (async) madvise$auto(0x7, 0x4, 0x2) (async) r2 = socket(0xa, 0x5, 0x13c) getsockopt$auto(r2, 0x20000028, 0x6, 0x0, 0x0) msync$auto(0x7, 0xfe, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x7) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f009effffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mbind$auto(0x10, 0x0, 0x80, &(0x7f0000000040)=0x4, 0x2be4, 0x1000) executing program 0: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) executing program 32: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) executing program 3: mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) writev$auto(r1, &(0x7f0000000280)={0x0, 0x45}, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="080061000100000008006200fcff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_setup$auto(0x59, 0x0) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRES8=r4, @ANYRES32], 0x18}}, 0x80) executing program 3: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/class\x00', 0x800, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x5, 0x0) msgctl$auto(0x26, 0x400, 0x0) rseq$auto(0x0, 0xfffffff4, 0x0, 0x7) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/mtd\x00', 0x80000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r0, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) write$auto_console_fops_tty_io(r1, &(0x7f0000000040)="0152f1ccbaf0a250747d8adb", 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) setsockopt$auto(0x1, 0x1, 0x46, &(0x7f0000000000)='\x00', 0xbb) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_NVRAM_INIT(0xffffffffffffffff, 0x7040, 0x0) socket(0x21, 0x2, 0xa) select$auto(0xb, &(0x7f00000000c0)={[0x40, 0xfffffffffffffffb, 0x0, 0x3, 0xffffffffffff4fc9, 0x9, 0x6, 0x0, 0x3b73, 0x5, 0x7, 0x8, 0x10001, 0x2, 0x6, 0xade]}, &(0x7f00000001c0)={[0xfffffffffffffff9, 0x3, 0x100, 0x51b, 0xb, 0x0, 0xc, 0x2, 0x31, 0x9, 0xff, 0x1, 0xb, 0x4, 0x101, 0x5]}, &(0x7f0000000240)={[0x3, 0x3ff, 0x70f, 0x200, 0x913, 0x9, 0x5, 0x8000000000000001, 0x77, 0x7, 0x7ff, 0x3e95, 0x6, 0x4, 0x6, 0x10]}, &(0x7f0000000140)={0x101, 0x9}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x5608, r3) executing program 3: mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8040) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1a) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r1, 0x0, 0x20000000001, 0x7fff) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev bisect: the chunk can be dropped bisect: split chunks (needed=true): <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 14, 21, 27, 12, 38] detailed listing: executing program 0: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) executing program 32: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) executing program 3: mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) writev$auto(r1, &(0x7f0000000280)={0x0, 0x45}, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="080061000100000008006200fcff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_setup$auto(0x59, 0x0) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRES8=r4, @ANYRES32], 0x18}}, 0x80) executing program 3: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/class\x00', 0x800, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x5, 0x0) msgctl$auto(0x26, 0x400, 0x0) rseq$auto(0x0, 0xfffffff4, 0x0, 0x7) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/mtd\x00', 0x80000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r0, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) write$auto_console_fops_tty_io(r1, &(0x7f0000000040)="0152f1ccbaf0a250747d8adb", 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) setsockopt$auto(0x1, 0x1, 0x46, &(0x7f0000000000)='\x00', 0xbb) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_NVRAM_INIT(0xffffffffffffffff, 0x7040, 0x0) socket(0x21, 0x2, 0xa) select$auto(0xb, &(0x7f00000000c0)={[0x40, 0xfffffffffffffffb, 0x0, 0x3, 0xffffffffffff4fc9, 0x9, 0x6, 0x0, 0x3b73, 0x5, 0x7, 0x8, 0x10001, 0x2, 0x6, 0xade]}, &(0x7f00000001c0)={[0xfffffffffffffff9, 0x3, 0x100, 0x51b, 0xb, 0x0, 0xc, 0x2, 0x31, 0x9, 0xff, 0x1, 0xb, 0x4, 0x101, 0x5]}, &(0x7f0000000240)={[0x3, 0x3ff, 0x70f, 0x200, 0x913, 0x9, 0x5, 0x8000000000000001, 0x77, 0x7, 0x7ff, 0x3e95, 0x6, 0x4, 0x6, 0x10]}, &(0x7f0000000140)={0x101, 0x9}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x5608, r3) executing program 3: mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8040) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1a) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r1, 0x0, 0x20000000001, 0x7fff) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 12, 30, 12, 24, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000f0ffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) mlockall$auto(0x7) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000fc000000000000c0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vimc.0/video4linux/video4/name\x00', 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x3}, 0x20000007}, 0x3, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x81}, 0x1, 0x0, 0x0, 0x8) (async) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mlock$auto(0x1000, 0x6) (async) mlockall$auto(0x800000000000005) (async) pselect6$auto(0x8000, &(0x7f0000000080)={[0x800, 0x3, 0xb, 0xb9, 0x7, 0x7, 0x28, 0x4, 0x100, 0x9, 0x3, 0xffffffffffff6ee4, 0x80, 0x47, 0x3, 0x40]}, &(0x7f0000000640)={[0xfffffffffffffffc, 0x8, 0x101, 0x4, 0xb, 0x0, 0x3f8b, 0xc, 0x2, 0x2, 0x7, 0x7f, 0x0, 0x800, 0x7fffffffffffffff, 0x6]}, &(0x7f00000006c0)={[0x5d58, 0x7, 0xa5, 0x7f, 0xffffffffffffff63, 0x6, 0xfffffffffffffffa, 0x2001, 0x4, 0x7, 0x6, 0x8000, 0xc, 0x101, 0x4, 0x9]}, &(0x7f0000000200)={0x6, 0xac}, &(0x7f0000000740)="84564c8c26b8144fd4d3e1ecb7942bbed10faff85baff45164fe66cd970aa99ce6e0b82e3f049231ba73698898fcd2a65389893a8ce8b267d7aa4f5258122e0b18ac67ffde635cac8164af89d15c5b3222a32a0e03b46c0b57abb954eb9a7ba2e851d345c9e7319f0334e91d93a1a639c9a157cbd953f98a055c6326e49c3691aa27e73928cfc94b6ca85e02c62ac8fc9925f5c6481c62e36169492d6741aa7e32fbc03e9391f9b9b275e7e9551b938d5b80bafbdc1dd37bfb2772dbc29cf87b41fa609e535de02906ee62739ad3f141062547") (async) madvise$auto(0x0, 0x200007, 0x19) (async) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) madvise$auto(0xb, 0x0, 0x3) (async) madvise$auto(0x7, 0x4, 0x2) (async) r2 = socket(0xa, 0x5, 0x13c) getsockopt$auto(r2, 0x20000028, 0x6, 0x0, 0x0) msync$auto(0x7, 0xfe, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x7) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f009effffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mbind$auto(0x10, 0x0, 0x80, &(0x7f0000000040)=0x4, 0x2be4, 0x1000) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write bisect: the chunk can be dropped bisect: split chunks (needed=true): <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 24, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f009effffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mbind$auto(0x10, 0x0, 0x80, &(0x7f0000000040)=0x4, 0x2be4, 0x1000) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mbind$auto(0x10, 0x0, 0x80, &(0x7f0000000040)=0x4, 0x2be4, 0x1000) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mbind$auto(0x10, 0x0, 0x80, &(0x7f0000000040)=0x4, 0x2be4, 0x1000) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000080), 0x6b) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: general protection fault in hci_devcd_register testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: general protection fault in hci_devcd_register testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: general protection fault in hci_devcd_register testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: general protection fault in hci_devcd_register testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 38] detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 38] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 8: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) program crashed: WARNING: ODEBUG bug in hci_release_dev minimized 24 calls -> 1 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 37] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) program crashed: general protection fault in hci_devcd_register testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 36] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 35] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) program crashed: general protection fault in hci_devcd_register testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 34] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 33] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 32] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 31] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 30] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 29] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 28] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 27] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 26] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 25] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 24] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) program crashed: general protection fault in hci_devcd_register testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 23] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 22] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 21] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 20] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 19] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 18] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 17] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 16] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 15] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 14] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 13] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 12] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 11] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 11] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0xe) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 11] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 10] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) socket(0xa, 0x801, 0x84) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 9] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 8] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 7] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) program crashed: WARNING in hci_devcd_register testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 5] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: WARNING: ODEBUG bug in hci_release_dev testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 4] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 4] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: general protection fault in hci_devcd_register testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 3] detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) executing program 0: mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: WARNING: ODEBUG bug in hci_release_dev minimized 38 calls -> 3 calls testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: WARNING: ODEBUG bug in hci_release_dev bisect: concatenation succeeded found reproducer with 4 syscalls minimizing guilty program testing program (duration=1m22.997147576s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) program did not crash testing program (duration=1m22.997147576s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-write$auto detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0xe) program did not crash testing program (duration=1m22.997147576s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program did not crash testing program (duration=1m22.997147576s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program did not crash testing program (duration=1m22.997147576s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, 0x0) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: slab-use-after-free Read in force_devcd_write testing program (duration=1m22.997147576s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, 0x0) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(r0, 0x0, 0xe) program did not crash extracting C reproducer testing compiled C program (duration=1m22.997147576s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program did not crash simplifying guilty program options testing program (duration=1m22.997147576s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, 0x0) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: slab-use-after-free Read in force_devcd_write extracting C reproducer testing compiled C program (duration=1m22.997147576s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program did not crash testing program (duration=1m22.997147576s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: rt_sigqueueinfo$auto(0x1, 0x7, 0x0) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: slab-use-after-free Read in force_devcd_write extracting C reproducer testing compiled C program (duration=1m22.997147576s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): rt_sigqueueinfo$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program did not crash reproducing took 3h11m55.230411727s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327 Read of size 8 at addr ffff88807ecc2000 by task syz.0.616/6653 CPU: 1 UID: 0 PID: 6653 Comm: syz.0.616 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:408 [inline] print_report+0xc3/0x670 mm/kasan/report.c:521 kasan_report+0xd9/0x110 mm/kasan/report.c:634 force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:398 vfs_write+0x24c/0x1150 fs/read_write.c:677 ksys_write+0x12b/0x250 fs/read_write.c:731 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f499798d169 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fffea7b6298 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f4997ba5fa0 RCX: 00007f499798d169 RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007f4997a0e2a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f4997ba5fa0 R14: 00007f4997ba5fa0 R15: 0000000000000003 Allocated by task 5949: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394 kmalloc_noprof include/linux/slab.h:901 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634 misc_open+0x35a/0x420 drivers/char/misc.c:179 chrdev_open+0x237/0x6a0 fs/char_dev.c:414 do_dentry_open+0x735/0x1c40 fs/open.c:956 vfs_open+0x82/0x3f0 fs/open.c:1086 do_open fs/namei.c:3830 [inline] path_openat+0x1e88/0x2d80 fs/namei.c:3989 do_filp_open+0x20c/0x470 fs/namei.c:4016 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428 do_sys_open fs/open.c:1443 [inline] __do_sys_openat fs/open.c:1459 [inline] __se_sys_openat fs/open.c:1454 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1454 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 5949: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2353 [inline] slab_free mm/slub.c:4609 [inline] kfree+0x2c4/0x4d0 mm/slub.c:4757 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670 __fput+0x3ff/0xb70 fs/file_table.c:464 task_work_run+0x14e/0x250 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0xad8/0x2db0 kernel/exit.c:938 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087 get_signal+0x24ed/0x26c0 kernel/signal.c:3036 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff88807ecc2000 which belongs to the cache kmalloc-1k of size 1024 The buggy address is located 0 bytes inside of freed 1024-byte region [ffff88807ecc2000, ffff88807ecc2400) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ecc0 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff88801b041dc0 ffffea0001a42c00 dead000000000002 raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000040 ffff88801b041dc0 ffffea0001a42c00 dead000000000002 head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000003 ffffea0001fb3001 ffffffffffffffff 0000000000000000 head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5503, tgid 5503 (dhcpcd), ts 60391724815, free_ts 60219730194 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551 prep_new_page mm/page_alloc.c:1559 [inline] get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4740 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270 alloc_slab_page mm/slub.c:2423 [inline] allocate_slab mm/slub.c:2587 [inline] new_slab+0x23d/0x330 mm/slub.c:2640 ___slab_alloc+0xc5d/0x1720 mm/slub.c:3826 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916 __slab_alloc_node mm/slub.c:3991 [inline] slab_alloc_node mm/slub.c:4152 [inline] __do_kmalloc_node mm/slub.c:4293 [inline] __kmalloc_noprof+0x2ec/0x510 mm/slub.c:4306 kmalloc_noprof include/linux/slab.h:905 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] neigh_alloc net/core/neighbour.c:473 [inline] ___neigh_create+0x14ee/0x28e0 net/core/neighbour.c:607 ip6_finish_output2+0x130c/0x20a0 net/ipv6/ip6_output.c:132 __ip6_finish_output net/ipv6/ip6_output.c:215 [inline] ip6_finish_output+0x3f9/0x1360 net/ipv6/ip6_output.c:226 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x1f8/0x540 net/ipv6/ip6_output.c:247 dst_output include/net/dst.h:459 [inline] ip6_local_out+0xcd/0x4a0 net/ipv6/output_core.c:155 ip6_send_skb+0x112/0x460 net/ipv6/ip6_output.c:1980 ip6_push_pending_frames+0xe0/0x110 net/ipv6/ip6_output.c:2001 rawv6_push_pending_frames net/ipv6/raw.c:588 [inline] rawv6_sendmsg+0x2f95/0x4610 net/ipv6/raw.c:927 page last free pid 5635 tgid 5635 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4115 [inline] slab_alloc_node mm/slub.c:4164 [inline] kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4171 anon_vma_chain_alloc mm/rmap.c:142 [inline] __anon_vma_prepare+0xae/0x5e0 mm/rmap.c:195 __vmf_anon_prepare+0x11c/0x240 mm/memory.c:3401 vmf_anon_prepare mm/internal.h:372 [inline] do_anonymous_page mm/memory.c:4887 [inline] do_pte_missing+0x1032/0x3e10 mm/memory.c:4057 handle_pte_fault mm/memory.c:5888 [inline] __handle_mm_fault+0x103c/0x2a40 mm/memory.c:6031 handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6200 do_user_addr_fault+0x60d/0x13f0 arch/x86/mm/fault.c:1337 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 Memory state around the buggy address: ffff88807ecc1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff88807ecc1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff88807ecc2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff88807ecc2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88807ecc2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327 Read of size 8 at addr ffff88807ecc2000 by task syz.0.616/6653 CPU: 1 UID: 0 PID: 6653 Comm: syz.0.616 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:408 [inline] print_report+0xc3/0x670 mm/kasan/report.c:521 kasan_report+0xd9/0x110 mm/kasan/report.c:634 force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:398 vfs_write+0x24c/0x1150 fs/read_write.c:677 ksys_write+0x12b/0x250 fs/read_write.c:731 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f499798d169 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fffea7b6298 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f4997ba5fa0 RCX: 00007f499798d169 RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007f4997a0e2a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f4997ba5fa0 R14: 00007f4997ba5fa0 R15: 0000000000000003 Allocated by task 5949: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394 kmalloc_noprof include/linux/slab.h:901 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634 misc_open+0x35a/0x420 drivers/char/misc.c:179 chrdev_open+0x237/0x6a0 fs/char_dev.c:414 do_dentry_open+0x735/0x1c40 fs/open.c:956 vfs_open+0x82/0x3f0 fs/open.c:1086 do_open fs/namei.c:3830 [inline] path_openat+0x1e88/0x2d80 fs/namei.c:3989 do_filp_open+0x20c/0x470 fs/namei.c:4016 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428 do_sys_open fs/open.c:1443 [inline] __do_sys_openat fs/open.c:1459 [inline] __se_sys_openat fs/open.c:1454 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1454 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 5949: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2353 [inline] slab_free mm/slub.c:4609 [inline] kfree+0x2c4/0x4d0 mm/slub.c:4757 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670 __fput+0x3ff/0xb70 fs/file_table.c:464 task_work_run+0x14e/0x250 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0xad8/0x2db0 kernel/exit.c:938 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087 get_signal+0x24ed/0x26c0 kernel/signal.c:3036 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff88807ecc2000 which belongs to the cache kmalloc-1k of size 1024 The buggy address is located 0 bytes inside of freed 1024-byte region [ffff88807ecc2000, ffff88807ecc2400) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ecc0 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff88801b041dc0 ffffea0001a42c00 dead000000000002 raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000040 ffff88801b041dc0 ffffea0001a42c00 dead000000000002 head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000003 ffffea0001fb3001 ffffffffffffffff 0000000000000000 head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5503, tgid 5503 (dhcpcd), ts 60391724815, free_ts 60219730194 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551 prep_new_page mm/page_alloc.c:1559 [inline] get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4740 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270 alloc_slab_page mm/slub.c:2423 [inline] allocate_slab mm/slub.c:2587 [inline] new_slab+0x23d/0x330 mm/slub.c:2640 ___slab_alloc+0xc5d/0x1720 mm/slub.c:3826 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916 __slab_alloc_node mm/slub.c:3991 [inline] slab_alloc_node mm/slub.c:4152 [inline] __do_kmalloc_node mm/slub.c:4293 [inline] __kmalloc_noprof+0x2ec/0x510 mm/slub.c:4306 kmalloc_noprof include/linux/slab.h:905 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] neigh_alloc net/core/neighbour.c:473 [inline] ___neigh_create+0x14ee/0x28e0 net/core/neighbour.c:607 ip6_finish_output2+0x130c/0x20a0 net/ipv6/ip6_output.c:132 __ip6_finish_output net/ipv6/ip6_output.c:215 [inline] ip6_finish_output+0x3f9/0x1360 net/ipv6/ip6_output.c:226 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x1f8/0x540 net/ipv6/ip6_output.c:247 dst_output include/net/dst.h:459 [inline] ip6_local_out+0xcd/0x4a0 net/ipv6/output_core.c:155 ip6_send_skb+0x112/0x460 net/ipv6/ip6_output.c:1980 ip6_push_pending_frames+0xe0/0x110 net/ipv6/ip6_output.c:2001 rawv6_push_pending_frames net/ipv6/raw.c:588 [inline] rawv6_sendmsg+0x2f95/0x4610 net/ipv6/raw.c:927 page last free pid 5635 tgid 5635 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4115 [inline] slab_alloc_node mm/slub.c:4164 [inline] kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4171 anon_vma_chain_alloc mm/rmap.c:142 [inline] __anon_vma_prepare+0xae/0x5e0 mm/rmap.c:195 __vmf_anon_prepare+0x11c/0x240 mm/memory.c:3401 vmf_anon_prepare mm/internal.h:372 [inline] do_anonymous_page mm/memory.c:4887 [inline] do_pte_missing+0x1032/0x3e10 mm/memory.c:4057 handle_pte_fault mm/memory.c:5888 [inline] __handle_mm_fault+0x103c/0x2a40 mm/memory.c:6031 handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6200 do_user_addr_fault+0x60d/0x13f0 arch/x86/mm/fault.c:1337 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 Memory state around the buggy address: ffff88807ecc1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff88807ecc1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff88807ecc2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff88807ecc2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88807ecc2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ==================================================================