Extracting prog: 2h21m25.928561916s
Minimizing prog: 8m24.621935606s
Simplifying prog options: 5m7.350516298s
Extracting C: 2m59.94403865s
Simplifying C: 0s


extracting reproducer from 38 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_settime$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-ioctl$sock_SIOCGIFINDEX-close_range$auto-mmap$auto-io_uring_setup$auto-mmap$auto-socket-openat$auto_tracing_stats_fops_trace-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-mmap$auto-openat$auto_vmwgfx_driver_fops_vmwgfx_drv-io_uring_setup$auto-read$auto_kernfs_file_fops_kernfs_internal-openat$auto_sg_fops_sg-socket-socket$nl_generic-socket-mmap$auto-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL-getsockopt$auto-mmap$auto-shmat$auto-io_uring_register$auto-socket-bind$auto
detailed listing:
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program did not crash
single: failed to extract reproducer
bisect: bisecting 38 programs with base timeout 30s
testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 27, 15, 30, 19, 15, 15, 13, 30, 30, 16, 30, 30, 30, 9, 25, 30, 30, 29, 17, 18, 5, 20, 1, 30, 30, 24, 23, 20, 3, 18, 25, 25, 30, 16, 30, 30, 17]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socketpair$auto(0x1e, 0x0, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x800, 0x5, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
r0 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r0, 0x0, 0x6, 0x0, 0x0)
modify_ldt$auto(0x2, 0x0, 0x80)
socket(0xa, 0x5, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/group\x00', 0x20c800, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x4}, 0x7, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffb8, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(0x3, 0x0, 0xffd8)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2f212abd780000002900f500af08860a5c815035c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce4000000000000000000"], 0x40}}, 0x4000000)
pipe2$auto(&(0x7f0000000040)=r0, 0xffffffff)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)="4a67d2", 0x14}, 0x6, &(0x7f0000000180), 0x5, 0x1001}, 0x5}, 0x2, 0x100)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r3 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0xfffffffffffffffd, 0x0, 0x10000000000e0, 0xfffffffffffffffe, 0x401, 0x100000000008000)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xffe0}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x71d)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0x2}, 0x52)
shutdown$auto(0x200000003, 0x2)
socket(0x2, 0x3, 0x1)
socket(0x2a, 0x2, 0x0)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/fail_io_timeout/space\x00', 0x400040, 0x0)
syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000180), r3)
close_range$auto(0x2, 0x8, 0x0)
executing program 1:
openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/uid_map\x00', 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x8, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000000)="2ff0a2bfbf6af25fbd9f64b5", 0x10, &(0x7f00000000c0)={0x0, 0x1a001}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
shutdown$auto(0x200000003, 0x2)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x401, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
executing program 1:
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
sysfs$auto(0x2, 0x4f, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x4e, 0x1d, 0xc, 0x6, 0x5f02, 0x82, 0x9, 0x877, 0x6}, 0x0)
socket(0x1, 0x2, 0x4)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55)
recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x1008, 0x0, 0x0, 0x0, 0x2, 0x100}, 0x803}, 0x908, 0x6, 0x0)
r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd11/hctx0/tags_bitmap\x00', 0x8080, 0x0)
pread64$auto(r1, 0x0, 0x800, 0x4)
statmount$auto(0x0, &(0x7f0000000380)={0x6, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], "90c510ff7b12f5e8969f78aed83645fe3ad144a1f58f8d6cad229bb8f065937e043b7631ed28549752472aeeab56855b0baaaee21bcf89f9c839d5eda84b966dbc987c40decc0be8fb0fa47a64f99d08901104a891490669028665d809d9dfd0fb0054b2b8b7cd5b0c6d510e46a2c10f29ea879fbe3f2470f9502b03f7c5ff00a1825a22b29b79e9355e6d48d7aa2c7ff1c5ae4327f7cd3277c0024977ae6304da"}, 0x1fe, 0x81)
mprotect$auto(0xffff, 0x8000000000000001, 0x400)
socket(0x10, 0x2, 0x0)
mlockall$auto(0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2)
r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto(r2, 0xfffffff7, 0x10000008)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
r3 = socket(0x1d, 0x2, 0x7)
getsockopt$auto(r3, 0x6b, 0x3, 0xfffffffffffffffe, 0x0)
read$auto(0x3, 0x0, 0x9)
executing program 1:
socket(0x11, 0x800, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async)
socket(0xa, 0x2, 0x88) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x801, 0x84) (async)
syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0xfffffffc, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=r0, 0x1, @old_prog_fd=r0}, 0x7) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
ioctl$auto(r1, 0xc018620b, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/power/wakeup_expire_count\x00', 0x2000, 0x0) (async)
r2 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bdi/43:192/stats\x00', 0x700, 0x0)
pread64$auto(r2, &(0x7f0000000080)='(![', 0x80, 0x2)
executing program 1:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
brk$auto(0x7) (fail_nth: 1)
executing program 32:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
brk$auto(0x7) (fail_nth: 1)
executing program 3:
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
ioctl$auto(r0, 0xc0046209, 0x9)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x2, 0x5, 0x7181, 0xc54, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x4000080000001, 0xb4, 0x3, 0x7, 0x10007, 0x80, 0x2a2, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x1, 0x2, 0x800000000, 0x2, 0x0, 0x2000, 0x0, 0x0, 0x70624ce7, 0x1, 0xfffffffffffffffd, 0x4, 0x6, 0x0, 0x6, 0x100000001, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x1, 0xfffffffffffffe00, 0x0, 0x0, 0x9, 0x400000000005b8, 0xffff, 0x0, 0x7429, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x8, 0x3, 0xfffffffffffffffc, 0x9, 0x1, 0x7, 0xc567]}, 0x1fe, 0xd)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0))
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0)
socket(0x18, 0x5, 0x2)
bind$auto(0x3, &(0x7f0000000000), 0x6b)
close_range$auto(0x2, 0x8, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8000)
executing program 3:
r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x331200, 0x0)
sendmmsg$auto(r0, &(0x7f0000002180)={{&(0x7f0000000040)="de50d4ea621a5dd4ffe4a039ef8022b2d32eb4f2a0047f19825916aa1fc6e993d7d217da5788e9e9feeb1d1025164d79b5a55c6332d4f81cf665783290de4a8ddf79370eca872ec64c7368fa480c163a47e6012569ea74cea448e65492cf46d3c0b3af3962d62d4e28c7f51e6e921b3a742228c6b457c7f72e3f489ffb3e1996aebe79db42e73f892f7f62ac1a77a84a18f93ce8287a32571c27898f023f8ed3913cdf9e5187b7636a645f18d130af7353f731d61b6114847af33dffcaefa3fec821dc75c0b32933fd61406635994b9bae8ed1eebf4b2737d373d5520e92ce8a45ddb09a2afd99040a0aedcc2a6159e3f98bbd4a52593036b4be93b4abaade4633587ba9f435b2ae9170769b1dcd2dd48cc3f58e4a3d12bfea766bb16393cf72cea64ed9c398d48a1559588294d6cff7df3e9f7ce0beab826918ac58ff8fc4d761ed37fc638a7ab0d1b11f9df59491ca0d9d8373d2ecb242d03fbde87980618ab1eaf55c25c1eabf31db96329ecfab569d802f5e1c96a7500d5dcc199838eefb934be85118cff78d596bcef901cb98a3ed75de64de13a4a7c486cce5fbc727dedef807b4684db02a416b574490fa218b1a5be227beea6f0021277231aae2995ccf73c396d1ee79d8d938678ed037e1cc1ade6cb79bed903d0fa0f06416dd040c9df6539cf03d0eea8b205f4661f407ff7f244614a8f393515896f4b95ac582e9eb9b7990d05c6c6c6039e49d40f4669c9beb7facd37583a370b240a4191a603411ef52e73327186d74ec32ffcf0a8cd130474d929e169bfa306fe582e338bc325f6ad106b982b6ca8786b131070091afb2752fb4f3318cb8f6ab81c0df1296701be187e68d2fc1b2277078ac699b3335b865dd9560a5da6c184785b6f887638228b45a87e70580a53c2b6df22fe6b1a3a0f0af1a2611eceef2d19e5ed74c58781c2583a8ec0cdaf01b2d8014f212016ec4df1e709edd1b557328bfea13d6cee23fca9444fdec3897c71745e1c3c51d0d7ff83a77ee98e5a81722d863cde9ce908b93baae9fdb77c0bd714d0adbbf271d06dade7b1623942a1115af6185f0c7983b5ec2989c6057fdb5b8aec5ea0939d5e01d7294f2e4e0e75f9d39af8ce3f32fbd7761405ffca88004b018753e65b50ec2e2de12335b5eece04a3e41919e95d1aee1e2778f381ba5041e3c0fe43d1cb6bd1cb42460e9b96b881b3a5ddce647c4082d1f23eaa5e01d286c469e8d0de723331070d124a0eeab289221dc3f380e01db073fa12e342fefc671ca1a8dc77f42c1c8303b459288eabee9846d82f4bd1291d7ec12a4a0c1bd9f126f94f268176515a09855959e4faa2fd816f995549cb259b93b4331899c4d300a5a5db9bf2c6b626f29b0dba43c46f59430de19b2c1b059674a5346e6263e14e51bd92f668cbb056af898c243833c46895749d1029d06160d8e46c9c74dd69569593f5ca77ce2f31d8581820b60782428e959a883660949a4b344836cbcba1fc72c09e66eb00e0e292ffd2ef03ab721f5152f5342725304157fce4f4145ea0c3f90a036989d14f6f5f58a6b2289743cf9d796d56626085137ad8480cc5619a56cb87b524382e2b087d9f2986d4851cf691160b8ee42f81385f8a3f93d0d63985b91f1e6cc0a3e492999ddb7c92f605eacf3ae5249f9dead93cfeabdfc5c10706f1b8b6d13a46f88c18ce0443158b86921d24fa789d832479c8725845650761ba8858094c8895518364f9ce80cf6b595b6c053e51d425520bcf610b65c4a7872638660c4cb5661a00881706433d51910b343f32687dea9e08913e5a59c339f6ac69e4a5bd37161e5347e2d24e51cc0fe54536d162b89bbac8861836dbaa3278f6a0aad1fc590e501831ba2dc6915d3dcf72bfaf3b4ff3ba1c8d8ced9a5b0f7296efff1ee7b60782de39195f1e46c57ffbba11691fe31d872b98d92ebc21f3f2ceabfc2a00f3b0725c4cc9f6961b3b6b7de1c455e46733f5a11c839ee41ed4d02e8df50c66efc04daf1972cfe5829eeadd69c238f7c9eb91f2ba02816d36f347f9bbcd8ec6fffb7fb61b72fd47767e52babcdf772b4d8ac9da7e47686244e8125b0bf605d8eac0c42b76eabc6730279083d85c5b8a3ca655c57d77ed018fbbc2660d04d1a6560041e51f73ca23e460861f6d0095582dee7398d1a261126f1742b7f47365b3dedf44978dea883f447637880c0349ef885ca1a2178b0b6c0324dca59b20d2d4397eb2ad5383d28a90198bbbf492360e075e94d4cd6628803a829b9f7d15a607f7004a69a619b115de2f78181b7d1f38b817686bc2a5a5d3eba01c159fbfebd0de024f5f83a0f9d4b3b446816436745071884abd9084f0c251bd37de3e802b30e548169890ff62928f90f421717329338c2011a59bfe76e4442352e3e77d3bb2d9094ae15b60c4a9f47ab2d5732913e127751efa8e537fb2a910c52e326203bf4978834779a7de4cf761eeb3611784e9f86bf913a5b67e8d3d79ad49a2e6c91c3e1138ef5358f4800795a691a0e239714430d97ed3bb538ff4fb7787c823d1df9f167a8c66d5e586ade5a96fecfeebf346f3491d09e63ffd46a620cfd0155fc274d9d016abd61bcad76c7038bac982a6f99b7a820e5ef99732173fc42200eefb64116f1cfbd3b955d1cb8dcfdebf8e23f28518db97f063845fc4cbe20cb13a465ec66ab04e94e3f7affb95614c7122947c88dad567ba7ca4173caae72c4632dd5ed1a08c67be5b921f9f8cba9dddcb7b24af6494157e89cda20227d420806adf3b0f0e4abefb1cbda9b41f1cf5408d1ec05034d3ba7a1cf6adf7396ed19d2a17a199d15bb484e99afe049eb6e298566ae33f19afcb089bed11c7806ca86d7e74ba461b029675ac011c2847171bdbee82f7c013e2f1d4b62b734f8f525f2fb9296cc3f6e4e1c0f2d9fe47a624674f4f2f5a58f0e8d3cf383a6eb030a565f2c7c6c40b2ecff7b65d7014e739f91c2baf8c68da9f5d8e88e7ab86a9d27d3d8c7fd8a74b7089f5d882ee07c8369cc4c7590cd9e7ba30cf6ce6186d2473824334635cf3372ca6c6203fb7fa974cd7e54690b2a2f078824b5a00e71c7ca130822f455c032f362e694a451cbda2f8af7962443a3bf3a67df2904e8614ab2f09c043e5c28b7f090abdc69467ed1a1a43513fc912e6a37ad0e054df086dc5c9aedce1215b111fafb874b45ec0aae488ada555ed9b9fec5761e0b5474b4835e2cd370dd93ba2f9c7aaaf3dab2b8e05f901efd1910aa4dbeba7010d59e0247f0c2e84479eb78c42a17f53b68ebaa63624f27b7310d0ae7bbe754861839beac365e8866afe8897ed906a90b20c2fac5d73a1bcfadcb032bd2ed48676438ae9c220ecefe547ddada1b9f2a68308ff313d3b736f66fdc41970ba4445595887d97f5ffec0a696e82344641106b4e383fe169460713f37ba504c44369cf61d866e2b672ced3509159c830724685724e8439cb55bfa14c64ee78da1448d52d17733fd671aa0585da85b9b109241abf62041927afdb95e67d847945aa10b215af42cb90c16f48b8627e95163c965d45c7f040327161fff85ade3fbf51772f15865fd45dbb4e3d8234c7d4078cf203c4756dac4e070ab02890deb079ded2938fb4d2db5ea19824aa0dc09a326aaa22dbaf3a4338c017f11566f17b1166be960bd3cb1dfa4f68fa58ab27a7fd772fa220c7190797a5870ecc5e1c7a19d6b732caf2df72cca1c0f3b7f96f64dcfb54a22775fb320d94cc8de684f9db184abd76cbe8c3eb08f8aa318906a880065ac05382356df7f93b73e0fc5f141143d47e03eff52442ebbfa533905fbc58f1c4bfcea66326da81483588cc171e03be095bd4ff2ab822619e2e879ed7d8a6817a71d1030d93f6a8a2be1f965378005cbdfff27b46354c524ce321cab6b0f743b10c14ad9458b7980e15d954e391861e3af1376bb68fba533b935655b98cd1a2a5e51c80e1608f5e5551738025f3013be6b5f6ec25c0209ceb0c490c5047cf4124bb3bd90e86737f93b595b6d977f7484170f712628b97de258e2a07c778eb7799b10383168113a8d4a4c6d412aaec1e1c828317d44b77346b1564a1878eb9f5c3c991e482d33e02eb9fda0361462e1f4d0c2a402abdebf5f6d945795f4824f30e862561754c263b30b0db3f93ee64685ae1d88d41e1a45582a123c986dded18ece09fc6e9bafb7c078e53fe938b8e45392c230754ff49e84f468905a6f139a2e8718b63f33d8bd997959e63e06fe44ac5d0065a80a488f594ad288e1887bf426d294e2aba279e925960d79d70bb753aac816eec14770f2967e2666baeacc2f864c06485f0f05a1013dce0bb443167e5ea7a1333f3203600095bd74e06dfa40b5f007459f13fe8d07880f3c691c98d7a52d7d0ea1cd91635efdc6df7346f8d34df9eb5bf02a2be0840258684e506373defc9c78ae3eadfcef71227fa9be6b178102047f98481997f3f1b3df480370798c8565846b65d32df9b0f49e7c3fc7899c970e8d97b6ef5ab0de7efac6adb5a8ab1a491f82c924675a32b0887663becdb97fc01a0a7497849dd906e81e501f6c4cf1faa91a55c869d3dfa454c6ef8688a9adb549902870cdeb4dc2d0eff820a845f5e3c7427de468484c91ea40b60753e0a19523bc7789ec46975aa87a22acb94c07019434ffd135d378cf03759c8ac3af97b27d113eef8575eefae7d89b16acc5339c08e3e1251f93e9a7bb794eab2e256bc7d21c7eac9d9bf29f22ac6063c620b527cbb8e3d9134b3994baa77880d3e8666846543d372254bc8315189bb8dc82516096c4ebdf6f99c977a4011b7a8dc230b49a9ea724935206a934dee9d22982e070c6db9a51e858b88278e3c50792c53032f67cd2adcc69431c6235fbb44b909c1824a65124c1b3937eeb7245652f33cb528a77a403b1b1a6a001a315359085e1b14d6eb1f7de45f4132f50f9ff6b98d61032c65e35f713c18fda7929d18b696c41c7e56ed7d03b7fa568c562475180a85c0b2c04d1977346008b29370c8cf1fe3a6931c6cce20658d3e30649043b874603703fd4b7a1aeb8a8b84c3e80ee6661d827cd15cd6489de8f5556fc353523edf9db3ccc9ece88edcfe5b26783477b25c17fec650e05e87e7b70ab18649a98c597d37e22cd0eb948b37bb65ecc3babff45298dc52fdd908b133dffd4cb3f289899cfa5ca9cd09d67d52bf71799c9356363e3dc921735390f7b8992c92a98299a360fdada17596057f4eb857c9cacb0324ee4c41e45fcca30229fb92edf02357be8085ec231b8d40c0bcd4be5b9342bc04400b925a0f322d42659b01e3cc6929a6149857859ebdff9d36b32d1737be10e5a7ba8a97c3fa818600c1a30a36e2267f9e98ec4c988aeaa6a6c067b0ae27bd9c7ded4407c3bda33ce76fed7f4b60cb20834edd95b5abb1d40e24315b5412d71ef1dd5f84e8b81531d7fa7d2b72a9c2bab68403de3a8b25caf6f5d77947b3b17b54c492134d70b2ad810abb9cb63f910598de76641449d3316e5a357c1b0a1aa59ccc34f689077785c290841226bc35e7c66687d5a95cc9b72fbd906818072b4918db0dada30ba45135e6a9245bf350d457062792fb327c82217fa068f5b4d4155eee3b3fd529305129c54065085132888a3220b309ab94d453b2b620b5153a612acf42e31db824bb00cd8b6637b64d06ad2b7ddc8f2f9dc08f5339247cfa713513cd3e760a2a45262b7303a6438ac2404d75e4675d572c47a95f7de7c43fa3a9c904aa3967d2c2d95dcb16baa4ebdde543f82d8022de27a35719c34688aa", 0x3, &(0x7f0000001140)={&(0x7f0000001040)="c91ec32815e174da4b57c0bef625d012d8699795e2096ddf390d7181e1f2867b574d194d925238722d1412ac8b82d1ba5f157a846bd6233799b54a44857ad71261d3ea78358f6a51a89a17af1175920309857993f88cdab76398c25e1d4745be0c9e80e4bb56e6c8fde5a4f99632e8a2ac5c5ede9c0e5067d31d5607f18319348dd206e911810e524c411b0b2a6ab4680d8eb2041fc845842166841e8d125cc8b451ff6a123e9fd75c877910ecf335767a724628fa8eed8c44764df02f2026565abce6e2a6159ed133c06fb30d0fa994df833dce7247afb18c8e594433005a55433c4c", 0x5d}, 0x6, &(0x7f0000001180)="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", 0x3, 0xffffffff}, 0xe}, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$auto_fops_atomic_t_ro_(0xffffffffffffffff, &(0x7f00000021c0)="34ded20042823a4855597c746ca6cf60254065eec561b0ec3bf71bdf85eaaa69042f1fc9ef6288e3d3f3b256a8b1b0ac9b00fb271e53", 0x36)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002240), r1)
r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000002280)='/dev/mixer\x00', 0x88440, 0x0)
msgctl$auto(0x10001, 0x10001, &(0x7f0000002340)={{0x5, <r4=>0x0, 0xffffffffffffffff, 0x9, 0x400, 0x0, 0x7}, &(0x7f00000022c0), &(0x7f0000002300)=0x6, 0x5, 0x5, 0x9, 0x5200, 0xc, 0x101, 0x0, 0xfffc, @raw=0x3, @raw=0x65f})
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000035c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003580)={&(0x7f00000023c0)={0x11a0, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x852, 0x75, 0x0, 0x1, [@nested={0xc7, 0xcc, 0x0, 0x1, [@generic="cfcadcca6c3138113a5b2ea3dd1e361a480f644a052ff8d4e29c62414a9c5cdd25dd7d8dbedcef07beb7ae9f36f840487aadf8b257b4cfedceed8545ad8757f494e02cfc694bf5c3ed693ee3e2038cfd67fbe6663c6289c09cdf85584f9310a4df891e00f92453544c57885563a1f4", @generic="ad804651fb6021637ac91dac5e1fa3d587785d0a13c85279", @generic="62c994f9c74bfa6f276a05db817991e0a03161938031448730aa1b84ad7dadd2984bcda512902a690db73b00981089f2127606b3", @typed={0x8, 0x145, 0x0, 0x0, @fd=r3}]}, @nested={0x112, 0x3d, 0x0, 0x1, [@nested={0x4, 0x77}, @nested={0x4, 0xa0}, @generic="3283f070fdcdb976cc646ca916932ea9725068be828b2d733cc498d9fe9b9e76b3e1b8a56bbd9d193df4f9bca6aef0d7c94e4ca3a45fb4923f5ca1611655d64d6033bdce750be1a3893fd5e4cce451ce8fa1e067c0fb8573db009704c20da314c47b52db444098bb787163a9b5f013f48a85ebd1d2", @typed={0x8, 0xb0, 0x0, 0x0, @uid=r4}, @generic="455c466a3b63f07237e02f9f4bc5bbc563efa3f6815e4640b3aa75329c9c4e9672614befc6a17b51639db713ba0417dc644a29157fa546590fbec98f22e139d21a33a9287ed659bbe0a8990b675ae2a1b0b77d4e1195e7bc30fd9a98e23d19b4c49a0487a90287e8d8b044b1c52b7d48be9df9460da900f1ea59cf68021c87c337281148ece8543c04"]}, @nested={0xf1, 0xf1, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @ipv4=@loopback}, @generic="26425dbf", @nested={0x4, 0x117}, @generic="e2bec6cc088dce4b2bf387caa61cd0559513455ca7bac93cc2cd87bda50140e40947248bc29b5dbcf15ead54fbf83c5bd36803675d747f5e67154e200cdcc3d0e2e1d99348533cdbdd5ce7e4c11e408786090b3fc955b90d8add6dcf5c4ed9f72573440920ccc1a7ca90eee3ffca8a5e9267c055ad562fe1a264558805998db6f954602393adc4bbb1a3e4e2d844bc3b83c49cc6318b5da6b6fc8b38263db79139d047c2c63197b3f05960375987c76aada0fa685159097e206eb197b65374d750", @nested={0x4, 0xd}, @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x6}, @typed={0xc, 0x12c, 0x0, 0x0, @u64=0x401}]}, @nested={0x8, 0x128, 0x0, 0x1, [@nested={0x4, 0x3e}]}, @nested={0x1c4, 0x65, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xb2}, @generic="a756b612997fd00a5b506f2354fa2a4cd7252abf418f153b28dff978adf0420e3f32d7da53a062c0d9243b20626a740da5f5231a7d66c2b122b44b9538d8d553146ba76b3c578556c6a42b17ff550d6a05e2c3", @generic="921a75e8ed5e471584b553067424e8926ad79324b3b79724e3c80315a203fd66c69b16b0ef726870938781f6faa2944fe195a0c77b1422d39705a0ef7cdf6c5d783831a5d87508aaeed3f715cd8c0aad1b3a2bdd6c9f741ee66e3fee74b0661c4d96927f924a22b33e9e1b5e33386fe2b15789827e6fb0eeaef4494318978315397b64ba8f9582d8b5d5ea8a240bcb98", @nested={0x4, 0x5a}, @generic="1d955f32d7ab8824eb0f17d45a51ed901411dae1617c0c0ea8b56f1050ff79a62684f74cb9109ed03cc9b4ba1272b4a574587065eac1b83f7af8cfdd8a5dcb611d477e912fba4f66bf122ed7e2b7f1a23a0cc3f207be92b9c49a70b0d15c051991537e922277941a66b281e9634ad805519d6fde46cace38da5ed7f12fe4d10bcd5388171aabbcc2d7ed3881109f8070ccc314750ed563b672915f4929c08a91774eac20ff59e2d57880ee358291e035f46311c5e89f2dd62b3e9b98b2c77071ec", @typed={0x9, 0x136, 0x0, 0x0, @str='(!\x8b#\x00'}]}, @generic="3c381ff32f1e6a183f08fdc76386481acb8df03c0a25c851b8ee3e2c6bbda7607ddefab87999c46f2d227d6943313681565811d460535e6724cc9a544ce68d53b6d7275377d3d8c5d744c30ccf8c091e0357ae30f7378d7aaa0b1a29e4c402994b358f0cfd7fbb46debcd51d393274d8fce225e77021353a701c4d3c06008a8fde15b8a86a185c5e1742c766e3f685e99bafce0145cc8e45b389a714228c671b8cc64ed7be78", @generic, @nested={0x6f, 0xc0, 0x0, 0x1, [@generic="3b0d2736e4922ea42b1ce6327ee5c9c0a30e3b8cc5a6caf094fde216cd15504c165837e2e386d1f838c371c80fd8f9b347e6435ae191a20dd7b003dbc41985ab1df8551e0353876de9a2d7013a593b3d9621d3", @nested={0x4, 0x1d}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@local}]}, @generic="b213d0b625af040bb9756bc29ba8bc6657eeb8abde6c11f219a94d8418e9d8a31f82079d063f2acd8cbbc93eab3f5aa6c228c187b92087dba352a1429a68113dc5790f425094963f35af5d5d372205990ce0a6c16aca431385fa5009382ebad170940c455244779f2a97149c69bf7735b479c111cd2793c7e0891c09e1e868df9f160958f96d9b19c9c801c08bf2b0108ffdf2b64ac62768956a55b8ec1f5c67a2a1cd3a65bc74e596ce57f2f570ec87535dd2d6fd767727f6ae8e36946037c8e031bfe964cde91b", @nested={0x1d3, 0x5d, 0x0, 0x1, [@generic="d3c186dee37d5764db343068e0cf4257846427ee596f9a15b06711a04d946584b62426bb035a2a265ddc597cdccb72f05361", @generic="c447d219e5d1f5893e0e52be62cc7c2a62f122920f1c979329071ea952b6635448900f660e9106b067810d3b0e795a24620676cb328ac42d40008fb7e7eb62ec6d6dd08aa51c638ecbc7318ec001fcdc10da3b31da7f33d150d3e3e8338645bc7ca76249031a24cffc3111ed98c385b7eacb739113ef088d3e985590346354e9a820618f1860162d91b36314977fdecb624cf51bffae8f4b44d07320e3619b0943519a1207cc88d8dc3e56b2f87ae6205e3508ad1857a0afbbe918c4dd5b1d7b972ae563617d946f7672730be10ca83959a1d586c4de3b40faaa3e3c", @generic="4f510b84112e6f3e8f17b4d585298f43d48cee80de700a1fdcd95a0b4fa7b9239d19283f76a9f2b2b4bfaef9c24b9a4ccca4d420cccc2db838e420a0f4cb3a7c8006260aa83d2d15edb22c5ba6173b593b5682e94aa3a4b3dad5d47c726b805d369e9ee276653adcb72f5fe087318ebb46adc06a0252582f3345f076359a7976689eab83f898326deb7d2f40f5da4d2f924094913aec229d2b6c02713cbb257f4ff5960ace37d617c915f8b9dd6cd7b5f52c438873ccdeda256fe147f9", @nested={0x4, 0x13b}]}]}, @NL80211_ATTR_EMA_RNR_ELEMS={0x170, 0x145, 0x0, 0x1, [@nested={0x16c, 0xfc, 0x0, 0x1, [@generic="2e82cd512211fabdc8f580e2cdd161c18811ac8bbde53a8579124e420193", @generic="e00f25aad5a9f9e594859654dc2ef7457166a5323513073e2ae079d1110bc97c70496bbf5e9bc7815e6d66c368f1b2d6d082769d67b2d4ad88773e8a24729d247be2de1dd961dbdcc13f8f4ead7ada16f3617aa91dfad76a013ed8a50de53009b0bfcd0595c8d56b32505b44f2473f59", @nested={0x4, 0xda}, @generic="a82a20b242108c6b808e7fd950d448e16e4297afd90217", @generic="c13d921530c596f39bd892ab3ea178234ffa9fccf3d305ad793e80b61549e1556b613d58fc0358caa5b0a0c8cfc32363fccd2e90306da5eda17008fb50a83f1664cb497ae7dddf09f096cf3c7925d89375c4836f08465ec630", @nested={0x4, 0x120}, @generic="10fa1719450fdfa78d5ae6082baf592e25502b84778f047538f6ef009333269f20fe6a6655c8403b7864a25032ad01aaed49202e69c451e0bcd1d02f77c4067323dbcb9badde9418ffdcb911eaf4d3fa9ae4112f5def86563202", @nested={0x4, 0x6}, @nested={0x4, 0xa4}]}]}, @NL80211_ATTR_PROBE_RESP={0x509, 0x91, "7b21cba14ba8315abcc49de09f3ba5b18296d75623e2fddc5c590f54af4ba67d8d81c58fe38b7a137f97aaff64697bbf2a1d77c34e41f0ce0479f7fb0c9a9e447fcea9d929eca900134be77f38e1c77835b433b7aa2ce12f831571e3cdff2086c063b29664d60a8272b847eb9a5c647be8d35a0e49e5711c6c0c656c24b0b1a50c33b360376cd7411027cf93d0ff92de87b47008b3f4861cc5d5d3d0e359d50a897f9e069825d844bf3f9ed265eab59fc25cacce9a209abe242c4ef3e4f733a90e97c81cccee808bd64c9d84c6501245956835acec77276bc3ce9e78ef0854ec8870c20ac5205507c52f4f179736f9dafafa86ed967ff9c2614c01ad303cf501bf22ffa00a4ffa99adaca1a315c3b167c36dd4a271ce1fcfc26f984b68177a30d5f434fbd206c01ab5be35eb15efdbf52b075bdc8244062430796e1500a34121cd104d80730d0ff564cd4f632d5df6e336c60e0263ca85d084cbacac7bf7b1a98fddde5369ec3c6e9a03a4f0bd1ed368682ea64a453dd921264b1209292c7194407ec6f5e7dc91afbee42fb567c47ca57912e12c9fb823ec8af17c3bf40d588ee2df7e15b853bc55e0e839d09e12e905772f6c3f76a02129edfe56029eaf659d7ca2659c65695d14e3fdc0c4b767673cf06c5df838e87f5766d311cedfcfc0fd9fa5624cc532860712512984811ab8ad1badc1ee8f3cb0597dfd253f182a6a1f791af9f054eb4739fed9b0a3fe62e9f7acac6c1fcf73144b796a7d72d28d88b7dbe7489f3e1facb3e8c14b525c530c4d2b70d9452b2ff54671e8c1e54e9b0da783d32c743013703f1da07eca9130515856f1aa53104d5c20cf8684a5aed1b87104026859ab9525429422ab4ce721a934406734013667c999c8aa57533c649b60e92dbd89d6c05058b9d04a7672a4ec9cb2b8411437d7ab9629b6df3b500608fc7422eb0a1949b836387271b51dbc868d43159629429a833f6a51cb07cfbe98a9692ac5d016812393e134e9f05e032a4d70d6b1af82d686ca20496ae574680c7470a3cd95650f29907e3566e2cd71ae47b210ae15404b4f4bdde6220ddd5724412cb9b4591468816f991bcf8b2acdc92c7c25e99311eeaa6b664dcc949b320cf88e74c9390e4fffea9717ef44c2e5d21d1f10943517668a6f82863a3a5bb03f95bded7b9e668036ba76c000581c487507a20ac1c3f329d6d18b1e4eaf078732117a5692b5a20ae70acd71299a685f387cdfd8a5da27cb64e7b12d6d136361517f2974620608f7817f57fd966d421859c768450a40cedce581d128e64b19b4c6baac0039b52146cd0f64781a0d9846e93fc282254fd59f193d01e51eedadcf65166b216900157f091d430f428925a32600d80f740b0df0a349def33d131dd0976bcc36cc988b138645af4fffd1aaf10e868651d06c4d88fcb481fb715bf025ff902630266769fca02f3416b6c01fc75d9c7099f92bf935916e6ef01d6e3a8f6a46cfe2c24efd6f028d69271184fc026efd64ec6c01228da665bda9e5ce1383e372c3825c59679e6d9cc0ac0abb55135e5a437edc0bdb16dab4b89c0018828667ee229bfb15af3a63d4ab3cc24c12f17edebee6766128b65660744be3fc28f01713642778e3f9d37f4ca9fd7fca6670ae7cef02ba8e35fd3ef26719e3e4084fc0dd9a95ba3a543e1c022150f3777b6b0d1dab575349037e679c95e81dc8df51b8ed422bdcd0e4fbe2ae5fac31050e5704a67d9f239f67de18d1c89b627fedc104102e96994acc5e485c1a296ab0b70a6c4a230e4a037036a9affb8f8b4fd7b2ed82a8715ceab6"}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_CSA_IES={0x1b8, 0xb9, 0x0, 0x1, [@nested={0xfe, 0x5, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @fd=r0}, @typed={0x3e, 0xb3, 0x0, 0x0, @binary="23d7d30c85ed0976dea03282d1114b1e259b238bb33fc1ca958272979ca5b6ea4b83e2bae8137a558b14f7d8f1735c8673cf88272ae64cb3e414"}, @generic="c92277d15e7f1ee90d53872084b028a1ed77638fa6e1fa0e3724f85d8f49834301d2e338da7ba6056c6a6ba0210e6cb8b4b36871ff2d7d5762e75b58ad632a10a8217000faffae7c87733e0cf553ea88340ebf83862818ce97c6e705039c49e394dbcdc0956660d62d1ae0a62b96e95d70ce5e08a49846886c5638d76727b1df1a84007484647dc4194a5dc46c4a3d460d27159d2496c1f2b004cdc0328ad044c01a44df5e5f", @typed={0x5, 0xd2, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x107}]}, @generic="09d0a911e8191d57abc9e972d6a5b676fb8ffd2f719fd05a0d009f210d7e7cd83f52f1c6a8d9009846e61e623aa2d9b07016c5240e23d22605caf463edf661b9519282c6d75b2c7c06e70ff0", @nested={0x66, 0xf4, 0x0, 0x1, [@generic="975d32a329c46dd2b98052c52db72003aedd9f8dedd90048eb47767b38e9207050b381f485946c79fde27008e8c6ffbce5e4bd12eb7e8d3a6ee99f35aca94bfd7ff1bbab77402c33bf3ecbfed71b968d915a97270515dcc62fd56edb29d5", @typed={0x4, 0x82}]}]}, @NL80211_ATTR_REG_ALPHA2={0xf3, 0x21, "729a70709da6c7ebb1dadcf645de7c764faf34dbe09ea52d6c7ea46d4c4aeeb563230abf88ae254e00ddd21a7d4476042fb6e7df70850ed649ac82d1d1902209b853f4b75cec8954015bc578fe267d69647d376e8b5b55d718432692d29c96f28c82f8af2011dcedd452681e80c121922136ddfb8d1ed0efef796d4c446968c6962caf02571b80b0b62abee3fdb9e8d6d7ccbc817c91998e307d2a8223107164f45aef45511cf77c1702a3e668c6b2074264153fc338ead8be5ceff878dd6740387981862cef74618f902133b6423c31d58be0c28f6e505e4d97c3610e989ca68677502b1dcd15821a1d6971ca3512"}]}, 0x11a0}, 0x1, 0x0, 0x0, 0x40c0}, 0x4)
statmount$auto(&(0x7f0000003600)={0xc39, @inferred=r1, 0x7, 0xfffffffffffffffc, 0x4}, &(0x7f0000003640)={0xffff7fff, 0x8, 0x24b, 0xffff8001, 0x401, 0x1ff, 0x4, 0x17, 0x6, 0x7, 0x3, 0x8, 0xffffffffffffd9aa, 0x8b2, 0xffff, 0xe, 0x7, 0x5, 0x1, 0x8000000000, 0x8, 0x4e, 0xffff6db9, 0x3, 0x6a, 0x6, [0x0, 0x9, 0x8, 0x800, 0x3, 0x10001, 0x7, 0x4, 0x9, 0x200, 0x8, 0x5, 0xd, 0x7, 0xf3e, 0xd, 0xf51, 0x7, 0x1000, 0x3ff, 0x4, 0x29, 0xd, 0xffffffff, 0x5, 0x3, 0x3, 0x7ff, 0x4, 0x1, 0x1dc8, 0x6, 0x5, 0x0, 0xfffffffffffffffd, 0x800, 0x299f, 0x3, 0x0, 0x3, 0x7, 0x1, 0x3ff, 0x4a06, 0x6, 0xfff], "061d94619c438889762304ebb56270d497917633af9640a9fb3f8a90cb54e59faad49759fc04164133854e6811ff054557a12de582bd9674620821a507837f0e185a7bf609a50232e45fb225162e52300516b6bb039e83ed765e13cf4604340dc35f6650e39231c69223edc3574b532117306f7e7c4be4dc63c4362f77a788fd6bae34820d69f7669f118c3ac0d17472f3cccabf11a4c481fc60d773ed0f5cea1b24f14972848f0ad588bfa57aa0f60fe3c163efec2cf8db6b3835"}, 0x8000000000000001, 0x4)
writev$auto(r0, &(0x7f0000003940)={&(0x7f0000003900)="ddf463accf48ddc2fc53fe31758c66af73ee7573d123fca28a6971fa900e4ddb53b78a5300554a", 0x7f}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = open(&(0x7f0000003980)='./file0\x00', 0x40, 0x172)
r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000039c0)='/proc/thread-self/pagemap\x00', 0x90001, 0x0)
mmap$auto(0x57db, 0x8, 0x15, 0x10011, r7, 0x1)
read$auto(r6, &(0x7f0000003a00)='/dev/mixer\x00', 0x4c)
sysfs$auto(0x8, 0x7, 0x6a)
r8 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000003a40), 0x100, 0x0)
io_uring_enter$auto(r8, 0x1, 0x7, 0x3, &(0x7f0000003a80)="23f1e222a67cc903f53f3420b40d07f244b7012dda3a3cf0127fbe50e546e8bc28a8d91b5b82098ea9b00558b87a6a015aca413d730d95f298336368a5d708e8569b1694ae0434469be6b23acb732ddac6ae88cc1200178dfc64cf6ec32582bb0255a7e7e2d33b80499ca857e44d3bb65a849fd6b616a10cda8ad2d4c05685330a9747444631c23fff24f4d635892ee19a8e8a6e97ae9aa8004be96a1a6fa6ee524be5b48ef8ca20b44ffb3d91966a8ec564bc9d7ed45e16c1d9dd591251d25d5c937ac13c722378a3e53422c68390ea7e331d46b9142d458c9e19c4374b1b", 0x5)
r9 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003b80), 0x402, 0x0)
write$auto_vhost_vsock_fops_vsock(r9, &(0x7f0000003bc0)="2fdaee671b8c05fe0ae199299a6d1465bb116a3dea10e3c274d0980490994afa7441e3147358d6d7e9c8c0fe28ff475dd3e06715b66739748db67f20b93805503902c467aeec0fc3c2a8dd8499d0b369a8d55b71a2c8fafa60", 0x59)
write$auto_evm_xattr_ops_evm_secfs(r6, &(0x7f0000003c40)="93a29bc0bc079d5ade51848872a82f4d82531a0919ca73d8c4cbb8009c0048446ec8ab3e6f96ec0a6795e8347a96b7678f22092e153e309a803ce4fc1d", 0x3d)
sysfs$auto(0x0, 0x0, 0x81)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r10, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4000840)
write$auto_mtd_fops_mtdchar(r6, &(0x7f0000003d80)="1c316295ad2b200b87ec7f7f4a734cc5d9cd6f88ebc5c9", 0x17)
r11 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000003e00), r1)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000003f00)={&(0x7f0000003dc0), 0xc, &(0x7f0000003ec0)={&(0x7f0000003e40)={0x58, r11, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4eb}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xef}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c074}, 0x80)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000005000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004fc0)={&(0x7f0000003f80)={0x101c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0x1004, 0xbb, "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"}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x101c}, 0x1, 0x0, 0x0, 0x4068098}, 0x40000)
rmdir$auto(&(0x7f0000005040)='./file0\x00')
sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000005180)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005140)={&(0x7f0000005100)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
executing program 3:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 3:
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) (async)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) (async)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", @inferred=<r1=>0xffffffffffffffff})
socket(0x1a, 0x1, 0x3)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
pipe2$auto(0x0, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
ioctl$auto_evdev_fops_evdev(r4, 0x80104592, 0x0)
poll$auto(&(0x7f0000000040)={r1, 0x8, 0x400}, 0x2, 0x10001) (async)
poll$auto(&(0x7f0000000040)={<r5=>r1, 0x8, 0x400}, 0x2, 0x10001)
write$auto_ftrace_set_event_pid_fops_trace_events(r5, &(0x7f0000000100)="56ecad51ba1cdb8125235a3ba4dc7a6163217a2c55685ff9fb089ce33e98409b1541b20645ad705c0e19a16bd4a22dee63b38a43245e869dd02def08788baddcf95e7a2e064c01d6be38fa6588f52dff086aaa3c5b1c8d7a05c8d3418ff9e9109dd87c954fd847832b9fb6", 0x6b)
executing program 3:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r2, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 3:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 33:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 0:
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@broadcast}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
timerfd_create$auto(0x9, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
executing program 0:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x4, 0x80000000}, 0xb}, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r5 = syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1fc, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0xfd, 0x7, "15a617d9c8c66e78b3a0eb16baac5e9d1ff0eb65ced9eb2a8b25dd2b2ed6594310c909e479b2ec0da3aa66d5766b39b583f8f4bb1085b83593381c6bc8768625fbd5a909dcac17fdc2db9bd5837c42eddacf8594e59ad347b6ee9626efb8613ca52181a059cf7c676c111254a81c58ba9b4e4eae68bc6c271ba9b53147d04557febc8501dac3a7b368b5aefb16679584054d0f3bf68f4eaa9b9b84c0a849f93d7b8c1c97564050c4671860321c4b80b8c82058c6160970fe33ebf7d42cb99938b5c2950b414cca93c777df7f18522fb7624e97cb6b9d119542b198df0908d7db8ecd9da232cb3c3d68cc252d45a720f7f130de5da8ce735f44"}, @NLBL_UNLABEL_A_SECCTX={0xe5, 0x7, "29ad1b75c556bb5a6809c123e49104605802319e9d3e3133be6a9336c7141dc43bd373082c3edc6a8f06cf748b5263661b9023b71f82e8356557edc658e99dc65a74bcc07f8b8cd6d3d555238f4ce832fb687981480e9c3004a94d5a963f5a72b028a05227b40eded67ba6829ac14aba2c23a99c58938c1ffe6df78efbcd48e343ac83b5a51f9eb55f9991060a5ec173b8047605a7f26b7336648e91a75113876aa4e8bc57ccf6cc31817e3ffe3b7cbd5cc6852212805a73627ea3dcaf3b05752d7f42f9fc2212db00d36a19e004255ddac2ed80b032af28b76f9dde9365406299"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r7, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 0:
r0 = socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
sendmmsg$auto(r1, 0x0, 0x5, 0x20000000)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9)
poll$auto(&(0x7f0000000040)={r2, 0x1000, 0x94}, 0x4, 0xfffff800)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004)
iopl$auto(0x3)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x80000000, 0xfffffffffffffffc, 0x9b71, 0x2, 0x8)
get_mempolicy$auto(0x0, 0x0, 0x81, 0x8, 0x3)
connect$auto(0x3, &(0x7f0000000140), 0x55)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r3 = bpf$auto(0x0, 0x0, 0xfbf)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89b0, &(0x7f0000000140)={'vlan0\x00'})
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, r3, 0x8000)
write$auto(0x3, 0x0, 0x296)
sendmsg$auto_NLBL_MGMT_C_LISTDEF(r1, 0x0, 0x20048800)
pipe2$auto(&(0x7f0000000000)=r0, 0x4)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x3)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x9)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4020009, 0x6, 0xb5, 0x401, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
removexattr$auto(0x0, 0x0)
mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd)
getrandom$auto(0x0, 0x6000000, 0x3)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rxrpc/calls\x00', 0x100, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/88, 0x58)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001080)=""/4092, 0xffc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socketpair$auto(0x1000001d, 0x2, 0x7, 0x0)
open(0x0, 0x252802, 0x190)
socket(0x1, 0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0xf44, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000001c0), 0x55)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0x80000001, 0x8)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 2:
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
ioctl$auto(r0, 0x921064a6, 0x20000000020000a)
getdents$auto(0x600000000, 0xfffffffffffffffd, 0xd00)
mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x2, 0x8, 0x4000000000db, 0x44eb1, 0x4000000000000006, 0x300000000000)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
socket(0x10, 0x2, 0x4)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff)
socketpair$auto(0x1d, 0x2, 0x2, 0x0)
connect$auto(0x3, 0x0, 0x55)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
pidfd_open$auto(0xffffffffffffffff, 0xfffffff7)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x7fe, 0x8)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2200, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x3, 0x1, 0x5c5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$auto_GTP_CMD_ECHOREQ(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r2, 0x601, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0xb24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
mremap$auto(0x0, 0x3, 0x3fd6, 0x3, 0x1000000000f1)
mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0x2, 0x8000)
madvise$auto(0x741, 0x6, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x460f, 0x0)
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x20, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
executing program 2:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001580)='/dev/dsp1\x00', 0x0, 0x0)
rseq$auto(0xfffffffffffffffd, 0x80000001, 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x80000005)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0xa, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000000), 0x0)
close_range$auto(0x2, 0xa, 0x0)
open(0x0, 0xa240, 0x15e)
open(0x0, 0x161342, 0x100)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00'})
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
open(0x0, 0x22240, 0x16c)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x1004, 0x5, 0x7fffffffffffffff, 0x8000000014, 0xffffffffffffffff, 0xb4)
madvise$auto(0x0, 0x2003ec, 0x14)
msync$auto(0x0, 0x2000000005, 0x6)
executing program 5:
sysfs$auto(0x910, 0x80, 0x3b7f6eca)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0)
read$auto_dvb_dvr_fops_dmxdev(r0, &(0x7f0000001380)=""/111, 0x6f)
close_range$auto(0x2, 0x8, 0x0)
executing program 4:
mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x262400, 0xb5d1af1605322c72)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/tracing/trace_options\x00', 0x8000, 0x0)
pread64$auto(r1, &(0x7f0000000ec0)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2, 0x40)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setreuid$auto(0x15, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
sendmsg$auto_NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ioctl$auto(0x3, 0xff0a, 0x0)
executing program 5:
epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x10001, 0x0, &(0x7f0000000080)={0xffffffff}, 0x1)
executing program 5:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48811}, 0x4000804)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x101083, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0)
r1 = getuid()
r2 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRES8=r2, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace\x00', 0x80800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x180)
sendmsg$auto_NBD_CMD_CONNECT(r2, 0x0, 0x80)
lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x0, 0x100000003, 0xfb9, r1, 0x0, 0x0, 0x800002000000009, 0x6, 0x8000010008, 0x2, 0x7dffffff, 0x5, 0xfff, 0xddf9, 0xbc3, 0x1})
r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/personality\x00', 0x80000, 0x0)
read$auto(r3, &(0x7f0000000240)='\xdf\xee\x8a', 0x196d083b)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r4)
sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={0x0}}, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000003f00), 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_logitech/parameters/lg4ff_no_autoswitch\x00', 0x2080, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
r6 = socket(0x2, 0x1, 0x0)
stat$auto(0x0, &(0x7f0000000340)={0x4588, 0x9, 0x9, 0x1, 0xee01, 0x0, 0x0, 0x10, 0x3, 0x2, 0x0, 0x1, 0x81, 0x8, 0x200, 0x2, 0x7})
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
executing program 2:
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r0)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdc01, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc8a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4881)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub0/status\x00', 0x200, 0x0)
pread64$auto(r2, 0x0, 0x100000000008, 0x8)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2000c, 0x6, 0xcb1, 0xffffffffffffffff, 0x8000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xa2803, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x1d, 0x5, 0x8000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82082, 0x0)
mprotect$auto(0x1000df96, 0x8000000000000004, 0xfffffffffffffff7)
close_range$auto(0x2, 0x8, 0x0)
socket(0x29, 0x1, 0xfffffffe)
write$auto(0x3, 0x0, 0x296)
msgrcv$auto(0x0, 0x0, 0x1000, 0xffffffffffffffff, 0xb1)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x92500, 0x0)
ioctl$auto_TIOCCBRK2(r3, 0x5428, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x28, 0x6, 0x24)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
socket(0x1f, 0x801, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0xfffffcab, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
executing program 4:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x4, 0x80000000}, 0xb}, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1fc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0xfd, 0x7, "15a617d9c8c66e78b3a0eb16baac5e9d1ff0eb65ced9eb2a8b25dd2b2ed6594310c909e479b2ec0da3aa66d5766b39b583f8f4bb1085b83593381c6bc8768625fbd5a909dcac17fdc2db9bd5837c42eddacf8594e59ad347b6ee9626efb8613ca52181a059cf7c676c111254a81c58ba9b4e4eae68bc6c271ba9b53147d04557febc8501dac3a7b368b5aefb16679584054d0f3bf68f4eaa9b9b84c0a849f93d7b8c1c97564050c4671860321c4b80b8c82058c6160970fe33ebf7d42cb99938b5c2950b414cca93c777df7f18522fb7624e97cb6b9d119542b198df0908d7db8ecd9da232cb3c3d68cc252d45a720f7f130de5da8ce735f44"}, @NLBL_UNLABEL_A_SECCTX={0xe5, 0x7, "29ad1b75c556bb5a6809c123e49104605802319e9d3e3133be6a9336c7141dc43bd373082c3edc6a8f06cf748b5263661b9023b71f82e8356557edc658e99dc65a74bcc07f8b8cd6d3d555238f4ce832fb687981480e9c3004a94d5a963f5a72b028a05227b40eded67ba6829ac14aba2c23a99c58938c1ffe6df78efbcd48e343ac83b5a51f9eb55f9991060a5ec173b8047605a7f26b7336648e91a75113876aa4e8bc57ccf6cc31817e3ffe3b7cbd5cc6852212805a73627ea3dcaf3b05752d7f42f9fc2212db00d36a19e004255ddac2ed80b032af28b76f9dde9365406299"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r6, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
setsockopt$auto(r0, 0x4d6f, 0x7fff, &(0x7f0000000000)='\x00', 0x1)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
ioctl$auto(0xc8, 0x800454e0, 0xe)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010)
close_range$auto(r0, r0, 0x20000000)
io_uring_setup$auto(0x6, 0x0)
open(0x0, 0x161342, 0x100)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9)
socket(0x1d, 0x3, 0x1)
socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mknod$auto(0x0, 0x1081, 0x9)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x1010001, 0x100000003)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x4c, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_BSSID={0x36, 0xf5, "af08860a5c815018c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce49244259f4098b7805b616c75a7"}]}, 0x4c}}, 0x4000000)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000)
r1 = pipe2$auto(&(0x7f0000000040)=r0, 0xffffffff)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x2}]}, 0x24}}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x71d)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto(r4, 0x8038550a, 0x1)
setsockopt$auto(0xffffffffffffffff, 0xfffffffd, 0x14, 0x0, 0x4)
pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffe01)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x1)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fc00df25290000001800018014000200766c616e310000000000000000000000e6ba463ae912ff4a6df592597ca822b5698d872d174d554dff78e70778a683241404ea4b1d4276e75aeaa41e05d1613692e075a7f78699e9751eac19e7f33b0b15"], 0x2c}, 0x1, 0x300, 0x0, 0x408d1}, 0x4010)
executing program 0:
unshare$auto(0x40000080)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
read$auto_dev_fops_plock(r0, &(0x7f0000000240)=""/192, 0xc0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x6})
getsockopt$auto(0xffffffffffffffff, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r4, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)
executing program 2:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x4, 0x80000000}, 0xb}, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000100), r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r6, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 4:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, 0x0, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r5 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000100), r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1fc, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0xfd, 0x7, "15a617d9c8c66e78b3a0eb16baac5e9d1ff0eb65ced9eb2a8b25dd2b2ed6594310c909e479b2ec0da3aa66d5766b39b583f8f4bb1085b83593381c6bc8768625fbd5a909dcac17fdc2db9bd5837c42eddacf8594e59ad347b6ee9626efb8613ca52181a059cf7c676c111254a81c58ba9b4e4eae68bc6c271ba9b53147d04557febc8501dac3a7b368b5aefb16679584054d0f3bf68f4eaa9b9b84c0a849f93d7b8c1c97564050c4671860321c4b80b8c82058c6160970fe33ebf7d42cb99938b5c2950b414cca93c777df7f18522fb7624e97cb6b9d119542b198df0908d7db8ecd9da232cb3c3d68cc252d45a720f7f130de5da8ce735f44"}, @NLBL_UNLABEL_A_SECCTX={0xe5, 0x7, "29ad1b75c556bb5a6809c123e49104605802319e9d3e3133be6a9336c7141dc43bd373082c3edc6a8f06cf748b5263661b9023b71f82e8356557edc658e99dc65a74bcc07f8b8cd6d3d555238f4ce832fb687981480e9c3004a94d5a963f5a72b028a05227b40eded67ba6829ac14aba2c23a99c58938c1ffe6df78efbcd48e343ac83b5a51f9eb55f9991060a5ec173b8047605a7f26b7336648e91a75113876aa4e8bc57ccf6cc31817e3ffe3b7cbd5cc6852212805a73627ea3dcaf3b05752d7f42f9fc2212db00d36a19e004255ddac2ed80b032af28b76f9dde9365406299"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r7, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x6, 0x0)
epoll_create$auto(0x4)
epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
capset$auto(0x0, 0xfffffffffffffffe)
epoll_ctl$auto(0x5, 0x3, r0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='j\x00%'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
syz_clone(0x40100100, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100))
mprotect$auto(0x0, 0x8000000000000001, 0x6)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000)
sysfs$auto(0x2, 0x9, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x1, 0x0)
openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/uprobe_profile\x00', 0x200082, 0x0)
executing program 5:
unshare$auto(0x40000080)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
read$auto_dev_fops_plock(r0, &(0x7f0000000240)=""/192, 0xc0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x6})
getsockopt$auto(0xffffffffffffffff, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r1=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r1, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r5=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r3, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x4c, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_BSSID={0x36, 0xf5, "af08860a5c815018c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce49244259f4098b7805b616c75a7"}]}, 0x4c}}, 0x4000000)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000)
r1 = pipe2$auto(&(0x7f0000000040)=<r2=>r0, 0xffffffff)
r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
readv$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x5}, 0x1)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5}]}, 0x2c}}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x71d)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.3/d3cold_allowed\x00', 0x0, 0x0)
read$auto(0x3, 0x0, 0x80)
r6 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0)
write$auto(r6, 0x0, 0xfd)
r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto(r7, 0x8038550a, 0x1)
setsockopt$auto(0xffffffffffffffff, 0xfffffffd, 0x14, 0x0, 0x4)
pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffe01)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x1)
ppoll$auto(&(0x7f0000000200)={r2, 0x8000, 0x6}, 0x8, &(0x7f0000000280)={0x9}, &(0x7f0000000340)={0xfff}, 0x8)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
executing program 4:
unshare$auto(0x40000080)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
read$auto_dev_fops_plock(r0, &(0x7f0000000240)=""/192, 0xc0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x6})
getsockopt$auto(0xffffffffffffffff, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r2, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r4, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_settime$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-ioctl$sock_SIOCGIFINDEX-close_range$auto-mmap$auto-io_uring_setup$auto-mmap$auto-socket-openat$auto_tracing_stats_fops_trace-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-mmap$auto-openat$auto_vmwgfx_driver_fops_vmwgfx_drv-io_uring_setup$auto-read$auto_kernfs_file_fops_kernfs_internal-openat$auto_sg_fops_sg-socket-socket$nl_generic-socket-mmap$auto-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL-getsockopt$auto-mmap$auto-shmat$auto-io_uring_register$auto-socket-bind$auto
detailed listing:
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program did not crash
single: failed to extract reproducer
bisect: bisecting 38 programs with base timeout 1m40s
testing program (duration=1m49s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 27, 15, 30, 19, 15, 15, 13, 30, 30, 16, 30, 30, 30, 9, 25, 30, 30, 29, 17, 18, 5, 20, 1, 30, 30, 24, 23, 20, 3, 18, 25, 25, 30, 16, 30, 30, 17]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socketpair$auto(0x1e, 0x0, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x800, 0x5, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
r0 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r0, 0x0, 0x6, 0x0, 0x0)
modify_ldt$auto(0x2, 0x0, 0x80)
socket(0xa, 0x5, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/group\x00', 0x20c800, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x4}, 0x7, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffb8, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(0x3, 0x0, 0xffd8)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2f212abd780000002900f500af08860a5c815035c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce4000000000000000000"], 0x40}}, 0x4000000)
pipe2$auto(&(0x7f0000000040)=r0, 0xffffffff)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)="4a67d2", 0x14}, 0x6, &(0x7f0000000180), 0x5, 0x1001}, 0x5}, 0x2, 0x100)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r3 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0xfffffffffffffffd, 0x0, 0x10000000000e0, 0xfffffffffffffffe, 0x401, 0x100000000008000)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xffe0}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x71d)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0x2}, 0x52)
shutdown$auto(0x200000003, 0x2)
socket(0x2, 0x3, 0x1)
socket(0x2a, 0x2, 0x0)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/fail_io_timeout/space\x00', 0x400040, 0x0)
syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000180), r3)
close_range$auto(0x2, 0x8, 0x0)
executing program 1:
openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/uid_map\x00', 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x8, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000000)="2ff0a2bfbf6af25fbd9f64b5", 0x10, &(0x7f00000000c0)={0x0, 0x1a001}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
shutdown$auto(0x200000003, 0x2)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x401, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
executing program 1:
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
sysfs$auto(0x2, 0x4f, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x4e, 0x1d, 0xc, 0x6, 0x5f02, 0x82, 0x9, 0x877, 0x6}, 0x0)
socket(0x1, 0x2, 0x4)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55)
recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x1008, 0x0, 0x0, 0x0, 0x2, 0x100}, 0x803}, 0x908, 0x6, 0x0)
r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd11/hctx0/tags_bitmap\x00', 0x8080, 0x0)
pread64$auto(r1, 0x0, 0x800, 0x4)
statmount$auto(0x0, &(0x7f0000000380)={0x6, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], "90c510ff7b12f5e8969f78aed83645fe3ad144a1f58f8d6cad229bb8f065937e043b7631ed28549752472aeeab56855b0baaaee21bcf89f9c839d5eda84b966dbc987c40decc0be8fb0fa47a64f99d08901104a891490669028665d809d9dfd0fb0054b2b8b7cd5b0c6d510e46a2c10f29ea879fbe3f2470f9502b03f7c5ff00a1825a22b29b79e9355e6d48d7aa2c7ff1c5ae4327f7cd3277c0024977ae6304da"}, 0x1fe, 0x81)
mprotect$auto(0xffff, 0x8000000000000001, 0x400)
socket(0x10, 0x2, 0x0)
mlockall$auto(0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2)
r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto(r2, 0xfffffff7, 0x10000008)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
r3 = socket(0x1d, 0x2, 0x7)
getsockopt$auto(r3, 0x6b, 0x3, 0xfffffffffffffffe, 0x0)
read$auto(0x3, 0x0, 0x9)
executing program 1:
socket(0x11, 0x800, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async)
socket(0xa, 0x2, 0x88) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x801, 0x84) (async)
syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0xfffffffc, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=r0, 0x1, @old_prog_fd=r0}, 0x7) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
ioctl$auto(r1, 0xc018620b, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/power/wakeup_expire_count\x00', 0x2000, 0x0) (async)
r2 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bdi/43:192/stats\x00', 0x700, 0x0)
pread64$auto(r2, &(0x7f0000000080)='(![', 0x80, 0x2)
executing program 1:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
brk$auto(0x7) (fail_nth: 1)
executing program 32:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
brk$auto(0x7) (fail_nth: 1)
executing program 3:
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
ioctl$auto(r0, 0xc0046209, 0x9)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x2, 0x5, 0x7181, 0xc54, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x4000080000001, 0xb4, 0x3, 0x7, 0x10007, 0x80, 0x2a2, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x1, 0x2, 0x800000000, 0x2, 0x0, 0x2000, 0x0, 0x0, 0x70624ce7, 0x1, 0xfffffffffffffffd, 0x4, 0x6, 0x0, 0x6, 0x100000001, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x1, 0xfffffffffffffe00, 0x0, 0x0, 0x9, 0x400000000005b8, 0xffff, 0x0, 0x7429, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x8, 0x3, 0xfffffffffffffffc, 0x9, 0x1, 0x7, 0xc567]}, 0x1fe, 0xd)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0))
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0)
socket(0x18, 0x5, 0x2)
bind$auto(0x3, &(0x7f0000000000), 0x6b)
close_range$auto(0x2, 0x8, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8000)
executing program 3:
r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x331200, 0x0)
sendmmsg$auto(r0, &(0x7f0000002180)={{&(0x7f0000000040)="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", 0x3, &(0x7f0000001140)={&(0x7f0000001040)="c91ec32815e174da4b57c0bef625d012d8699795e2096ddf390d7181e1f2867b574d194d925238722d1412ac8b82d1ba5f157a846bd6233799b54a44857ad71261d3ea78358f6a51a89a17af1175920309857993f88cdab76398c25e1d4745be0c9e80e4bb56e6c8fde5a4f99632e8a2ac5c5ede9c0e5067d31d5607f18319348dd206e911810e524c411b0b2a6ab4680d8eb2041fc845842166841e8d125cc8b451ff6a123e9fd75c877910ecf335767a724628fa8eed8c44764df02f2026565abce6e2a6159ed133c06fb30d0fa994df833dce7247afb18c8e594433005a55433c4c", 0x5d}, 0x6, &(0x7f0000001180)="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", 0x3, 0xffffffff}, 0xe}, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$auto_fops_atomic_t_ro_(0xffffffffffffffff, &(0x7f00000021c0)="34ded20042823a4855597c746ca6cf60254065eec561b0ec3bf71bdf85eaaa69042f1fc9ef6288e3d3f3b256a8b1b0ac9b00fb271e53", 0x36)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002240), r1)
r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000002280)='/dev/mixer\x00', 0x88440, 0x0)
msgctl$auto(0x10001, 0x10001, &(0x7f0000002340)={{0x5, <r4=>0x0, 0xffffffffffffffff, 0x9, 0x400, 0x0, 0x7}, &(0x7f00000022c0), &(0x7f0000002300)=0x6, 0x5, 0x5, 0x9, 0x5200, 0xc, 0x101, 0x0, 0xfffc, @raw=0x3, @raw=0x65f})
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000035c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003580)={&(0x7f00000023c0)={0x11a0, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x852, 0x75, 0x0, 0x1, [@nested={0xc7, 0xcc, 0x0, 0x1, [@generic="cfcadcca6c3138113a5b2ea3dd1e361a480f644a052ff8d4e29c62414a9c5cdd25dd7d8dbedcef07beb7ae9f36f840487aadf8b257b4cfedceed8545ad8757f494e02cfc694bf5c3ed693ee3e2038cfd67fbe6663c6289c09cdf85584f9310a4df891e00f92453544c57885563a1f4", @generic="ad804651fb6021637ac91dac5e1fa3d587785d0a13c85279", @generic="62c994f9c74bfa6f276a05db817991e0a03161938031448730aa1b84ad7dadd2984bcda512902a690db73b00981089f2127606b3", @typed={0x8, 0x145, 0x0, 0x0, @fd=r3}]}, @nested={0x112, 0x3d, 0x0, 0x1, [@nested={0x4, 0x77}, @nested={0x4, 0xa0}, @generic="3283f070fdcdb976cc646ca916932ea9725068be828b2d733cc498d9fe9b9e76b3e1b8a56bbd9d193df4f9bca6aef0d7c94e4ca3a45fb4923f5ca1611655d64d6033bdce750be1a3893fd5e4cce451ce8fa1e067c0fb8573db009704c20da314c47b52db444098bb787163a9b5f013f48a85ebd1d2", @typed={0x8, 0xb0, 0x0, 0x0, @uid=r4}, @generic="455c466a3b63f07237e02f9f4bc5bbc563efa3f6815e4640b3aa75329c9c4e9672614befc6a17b51639db713ba0417dc644a29157fa546590fbec98f22e139d21a33a9287ed659bbe0a8990b675ae2a1b0b77d4e1195e7bc30fd9a98e23d19b4c49a0487a90287e8d8b044b1c52b7d48be9df9460da900f1ea59cf68021c87c337281148ece8543c04"]}, @nested={0xf1, 0xf1, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @ipv4=@loopback}, @generic="26425dbf", @nested={0x4, 0x117}, @generic="e2bec6cc088dce4b2bf387caa61cd0559513455ca7bac93cc2cd87bda50140e40947248bc29b5dbcf15ead54fbf83c5bd36803675d747f5e67154e200cdcc3d0e2e1d99348533cdbdd5ce7e4c11e408786090b3fc955b90d8add6dcf5c4ed9f72573440920ccc1a7ca90eee3ffca8a5e9267c055ad562fe1a264558805998db6f954602393adc4bbb1a3e4e2d844bc3b83c49cc6318b5da6b6fc8b38263db79139d047c2c63197b3f05960375987c76aada0fa685159097e206eb197b65374d750", @nested={0x4, 0xd}, @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x6}, @typed={0xc, 0x12c, 0x0, 0x0, @u64=0x401}]}, @nested={0x8, 0x128, 0x0, 0x1, [@nested={0x4, 0x3e}]}, @nested={0x1c4, 0x65, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xb2}, @generic="a756b612997fd00a5b506f2354fa2a4cd7252abf418f153b28dff978adf0420e3f32d7da53a062c0d9243b20626a740da5f5231a7d66c2b122b44b9538d8d553146ba76b3c578556c6a42b17ff550d6a05e2c3", @generic="921a75e8ed5e471584b553067424e8926ad79324b3b79724e3c80315a203fd66c69b16b0ef726870938781f6faa2944fe195a0c77b1422d39705a0ef7cdf6c5d783831a5d87508aaeed3f715cd8c0aad1b3a2bdd6c9f741ee66e3fee74b0661c4d96927f924a22b33e9e1b5e33386fe2b15789827e6fb0eeaef4494318978315397b64ba8f9582d8b5d5ea8a240bcb98", @nested={0x4, 0x5a}, @generic="1d955f32d7ab8824eb0f17d45a51ed901411dae1617c0c0ea8b56f1050ff79a62684f74cb9109ed03cc9b4ba1272b4a574587065eac1b83f7af8cfdd8a5dcb611d477e912fba4f66bf122ed7e2b7f1a23a0cc3f207be92b9c49a70b0d15c051991537e922277941a66b281e9634ad805519d6fde46cace38da5ed7f12fe4d10bcd5388171aabbcc2d7ed3881109f8070ccc314750ed563b672915f4929c08a91774eac20ff59e2d57880ee358291e035f46311c5e89f2dd62b3e9b98b2c77071ec", @typed={0x9, 0x136, 0x0, 0x0, @str='(!\x8b#\x00'}]}, @generic="3c381ff32f1e6a183f08fdc76386481acb8df03c0a25c851b8ee3e2c6bbda7607ddefab87999c46f2d227d6943313681565811d460535e6724cc9a544ce68d53b6d7275377d3d8c5d744c30ccf8c091e0357ae30f7378d7aaa0b1a29e4c402994b358f0cfd7fbb46debcd51d393274d8fce225e77021353a701c4d3c06008a8fde15b8a86a185c5e1742c766e3f685e99bafce0145cc8e45b389a714228c671b8cc64ed7be78", @generic, @nested={0x6f, 0xc0, 0x0, 0x1, [@generic="3b0d2736e4922ea42b1ce6327ee5c9c0a30e3b8cc5a6caf094fde216cd15504c165837e2e386d1f838c371c80fd8f9b347e6435ae191a20dd7b003dbc41985ab1df8551e0353876de9a2d7013a593b3d9621d3", @nested={0x4, 0x1d}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@local}]}, @generic="b213d0b625af040bb9756bc29ba8bc6657eeb8abde6c11f219a94d8418e9d8a31f82079d063f2acd8cbbc93eab3f5aa6c228c187b92087dba352a1429a68113dc5790f425094963f35af5d5d372205990ce0a6c16aca431385fa5009382ebad170940c455244779f2a97149c69bf7735b479c111cd2793c7e0891c09e1e868df9f160958f96d9b19c9c801c08bf2b0108ffdf2b64ac62768956a55b8ec1f5c67a2a1cd3a65bc74e596ce57f2f570ec87535dd2d6fd767727f6ae8e36946037c8e031bfe964cde91b", @nested={0x1d3, 0x5d, 0x0, 0x1, [@generic="d3c186dee37d5764db343068e0cf4257846427ee596f9a15b06711a04d946584b62426bb035a2a265ddc597cdccb72f05361", @generic="c447d219e5d1f5893e0e52be62cc7c2a62f122920f1c979329071ea952b6635448900f660e9106b067810d3b0e795a24620676cb328ac42d40008fb7e7eb62ec6d6dd08aa51c638ecbc7318ec001fcdc10da3b31da7f33d150d3e3e8338645bc7ca76249031a24cffc3111ed98c385b7eacb739113ef088d3e985590346354e9a820618f1860162d91b36314977fdecb624cf51bffae8f4b44d07320e3619b0943519a1207cc88d8dc3e56b2f87ae6205e3508ad1857a0afbbe918c4dd5b1d7b972ae563617d946f7672730be10ca83959a1d586c4de3b40faaa3e3c", @generic="4f510b84112e6f3e8f17b4d585298f43d48cee80de700a1fdcd95a0b4fa7b9239d19283f76a9f2b2b4bfaef9c24b9a4ccca4d420cccc2db838e420a0f4cb3a7c8006260aa83d2d15edb22c5ba6173b593b5682e94aa3a4b3dad5d47c726b805d369e9ee276653adcb72f5fe087318ebb46adc06a0252582f3345f076359a7976689eab83f898326deb7d2f40f5da4d2f924094913aec229d2b6c02713cbb257f4ff5960ace37d617c915f8b9dd6cd7b5f52c438873ccdeda256fe147f9", @nested={0x4, 0x13b}]}]}, @NL80211_ATTR_EMA_RNR_ELEMS={0x170, 0x145, 0x0, 0x1, [@nested={0x16c, 0xfc, 0x0, 0x1, [@generic="2e82cd512211fabdc8f580e2cdd161c18811ac8bbde53a8579124e420193", @generic="e00f25aad5a9f9e594859654dc2ef7457166a5323513073e2ae079d1110bc97c70496bbf5e9bc7815e6d66c368f1b2d6d082769d67b2d4ad88773e8a24729d247be2de1dd961dbdcc13f8f4ead7ada16f3617aa91dfad76a013ed8a50de53009b0bfcd0595c8d56b32505b44f2473f59", @nested={0x4, 0xda}, @generic="a82a20b242108c6b808e7fd950d448e16e4297afd90217", @generic="c13d921530c596f39bd892ab3ea178234ffa9fccf3d305ad793e80b61549e1556b613d58fc0358caa5b0a0c8cfc32363fccd2e90306da5eda17008fb50a83f1664cb497ae7dddf09f096cf3c7925d89375c4836f08465ec630", @nested={0x4, 0x120}, @generic="10fa1719450fdfa78d5ae6082baf592e25502b84778f047538f6ef009333269f20fe6a6655c8403b7864a25032ad01aaed49202e69c451e0bcd1d02f77c4067323dbcb9badde9418ffdcb911eaf4d3fa9ae4112f5def86563202", @nested={0x4, 0x6}, @nested={0x4, 0xa4}]}]}, @NL80211_ATTR_PROBE_RESP={0x509, 0x91, "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"}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_CSA_IES={0x1b8, 0xb9, 0x0, 0x1, [@nested={0xfe, 0x5, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @fd=r0}, @typed={0x3e, 0xb3, 0x0, 0x0, @binary="23d7d30c85ed0976dea03282d1114b1e259b238bb33fc1ca958272979ca5b6ea4b83e2bae8137a558b14f7d8f1735c8673cf88272ae64cb3e414"}, @generic="c92277d15e7f1ee90d53872084b028a1ed77638fa6e1fa0e3724f85d8f49834301d2e338da7ba6056c6a6ba0210e6cb8b4b36871ff2d7d5762e75b58ad632a10a8217000faffae7c87733e0cf553ea88340ebf83862818ce97c6e705039c49e394dbcdc0956660d62d1ae0a62b96e95d70ce5e08a49846886c5638d76727b1df1a84007484647dc4194a5dc46c4a3d460d27159d2496c1f2b004cdc0328ad044c01a44df5e5f", @typed={0x5, 0xd2, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x107}]}, @generic="09d0a911e8191d57abc9e972d6a5b676fb8ffd2f719fd05a0d009f210d7e7cd83f52f1c6a8d9009846e61e623aa2d9b07016c5240e23d22605caf463edf661b9519282c6d75b2c7c06e70ff0", @nested={0x66, 0xf4, 0x0, 0x1, [@generic="975d32a329c46dd2b98052c52db72003aedd9f8dedd90048eb47767b38e9207050b381f485946c79fde27008e8c6ffbce5e4bd12eb7e8d3a6ee99f35aca94bfd7ff1bbab77402c33bf3ecbfed71b968d915a97270515dcc62fd56edb29d5", @typed={0x4, 0x82}]}]}, @NL80211_ATTR_REG_ALPHA2={0xf3, 0x21, "729a70709da6c7ebb1dadcf645de7c764faf34dbe09ea52d6c7ea46d4c4aeeb563230abf88ae254e00ddd21a7d4476042fb6e7df70850ed649ac82d1d1902209b853f4b75cec8954015bc578fe267d69647d376e8b5b55d718432692d29c96f28c82f8af2011dcedd452681e80c121922136ddfb8d1ed0efef796d4c446968c6962caf02571b80b0b62abee3fdb9e8d6d7ccbc817c91998e307d2a8223107164f45aef45511cf77c1702a3e668c6b2074264153fc338ead8be5ceff878dd6740387981862cef74618f902133b6423c31d58be0c28f6e505e4d97c3610e989ca68677502b1dcd15821a1d6971ca3512"}]}, 0x11a0}, 0x1, 0x0, 0x0, 0x40c0}, 0x4)
statmount$auto(&(0x7f0000003600)={0xc39, @inferred=r1, 0x7, 0xfffffffffffffffc, 0x4}, &(0x7f0000003640)={0xffff7fff, 0x8, 0x24b, 0xffff8001, 0x401, 0x1ff, 0x4, 0x17, 0x6, 0x7, 0x3, 0x8, 0xffffffffffffd9aa, 0x8b2, 0xffff, 0xe, 0x7, 0x5, 0x1, 0x8000000000, 0x8, 0x4e, 0xffff6db9, 0x3, 0x6a, 0x6, [0x0, 0x9, 0x8, 0x800, 0x3, 0x10001, 0x7, 0x4, 0x9, 0x200, 0x8, 0x5, 0xd, 0x7, 0xf3e, 0xd, 0xf51, 0x7, 0x1000, 0x3ff, 0x4, 0x29, 0xd, 0xffffffff, 0x5, 0x3, 0x3, 0x7ff, 0x4, 0x1, 0x1dc8, 0x6, 0x5, 0x0, 0xfffffffffffffffd, 0x800, 0x299f, 0x3, 0x0, 0x3, 0x7, 0x1, 0x3ff, 0x4a06, 0x6, 0xfff], "061d94619c438889762304ebb56270d497917633af9640a9fb3f8a90cb54e59faad49759fc04164133854e6811ff054557a12de582bd9674620821a507837f0e185a7bf609a50232e45fb225162e52300516b6bb039e83ed765e13cf4604340dc35f6650e39231c69223edc3574b532117306f7e7c4be4dc63c4362f77a788fd6bae34820d69f7669f118c3ac0d17472f3cccabf11a4c481fc60d773ed0f5cea1b24f14972848f0ad588bfa57aa0f60fe3c163efec2cf8db6b3835"}, 0x8000000000000001, 0x4)
writev$auto(r0, &(0x7f0000003940)={&(0x7f0000003900)="ddf463accf48ddc2fc53fe31758c66af73ee7573d123fca28a6971fa900e4ddb53b78a5300554a", 0x7f}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = open(&(0x7f0000003980)='./file0\x00', 0x40, 0x172)
r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000039c0)='/proc/thread-self/pagemap\x00', 0x90001, 0x0)
mmap$auto(0x57db, 0x8, 0x15, 0x10011, r7, 0x1)
read$auto(r6, &(0x7f0000003a00)='/dev/mixer\x00', 0x4c)
sysfs$auto(0x8, 0x7, 0x6a)
r8 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000003a40), 0x100, 0x0)
io_uring_enter$auto(r8, 0x1, 0x7, 0x3, &(0x7f0000003a80)="23f1e222a67cc903f53f3420b40d07f244b7012dda3a3cf0127fbe50e546e8bc28a8d91b5b82098ea9b00558b87a6a015aca413d730d95f298336368a5d708e8569b1694ae0434469be6b23acb732ddac6ae88cc1200178dfc64cf6ec32582bb0255a7e7e2d33b80499ca857e44d3bb65a849fd6b616a10cda8ad2d4c05685330a9747444631c23fff24f4d635892ee19a8e8a6e97ae9aa8004be96a1a6fa6ee524be5b48ef8ca20b44ffb3d91966a8ec564bc9d7ed45e16c1d9dd591251d25d5c937ac13c722378a3e53422c68390ea7e331d46b9142d458c9e19c4374b1b", 0x5)
r9 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003b80), 0x402, 0x0)
write$auto_vhost_vsock_fops_vsock(r9, &(0x7f0000003bc0)="2fdaee671b8c05fe0ae199299a6d1465bb116a3dea10e3c274d0980490994afa7441e3147358d6d7e9c8c0fe28ff475dd3e06715b66739748db67f20b93805503902c467aeec0fc3c2a8dd8499d0b369a8d55b71a2c8fafa60", 0x59)
write$auto_evm_xattr_ops_evm_secfs(r6, &(0x7f0000003c40)="93a29bc0bc079d5ade51848872a82f4d82531a0919ca73d8c4cbb8009c0048446ec8ab3e6f96ec0a6795e8347a96b7678f22092e153e309a803ce4fc1d", 0x3d)
sysfs$auto(0x0, 0x0, 0x81)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r10, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4000840)
write$auto_mtd_fops_mtdchar(r6, &(0x7f0000003d80)="1c316295ad2b200b87ec7f7f4a734cc5d9cd6f88ebc5c9", 0x17)
r11 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000003e00), r1)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000003f00)={&(0x7f0000003dc0), 0xc, &(0x7f0000003ec0)={&(0x7f0000003e40)={0x58, r11, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4eb}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xef}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c074}, 0x80)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000005000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004fc0)={&(0x7f0000003f80)={0x101c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0x1004, 0xbb, "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"}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x101c}, 0x1, 0x0, 0x0, 0x4068098}, 0x40000)
rmdir$auto(&(0x7f0000005040)='./file0\x00')
sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000005180)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005140)={&(0x7f0000005100)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
executing program 3:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 3:
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) (async)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) (async)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", @inferred=<r1=>0xffffffffffffffff})
socket(0x1a, 0x1, 0x3)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
pipe2$auto(0x0, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
ioctl$auto_evdev_fops_evdev(r4, 0x80104592, 0x0)
poll$auto(&(0x7f0000000040)={r1, 0x8, 0x400}, 0x2, 0x10001) (async)
poll$auto(&(0x7f0000000040)={<r5=>r1, 0x8, 0x400}, 0x2, 0x10001)
write$auto_ftrace_set_event_pid_fops_trace_events(r5, &(0x7f0000000100)="56ecad51ba1cdb8125235a3ba4dc7a6163217a2c55685ff9fb089ce33e98409b1541b20645ad705c0e19a16bd4a22dee63b38a43245e869dd02def08788baddcf95e7a2e064c01d6be38fa6588f52dff086aaa3c5b1c8d7a05c8d3418ff9e9109dd87c954fd847832b9fb6", 0x6b)
executing program 3:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r2, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 3:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 33:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 0:
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@broadcast}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
timerfd_create$auto(0x9, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
executing program 0:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x4, 0x80000000}, 0xb}, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r5 = syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1fc, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0xfd, 0x7, "15a617d9c8c66e78b3a0eb16baac5e9d1ff0eb65ced9eb2a8b25dd2b2ed6594310c909e479b2ec0da3aa66d5766b39b583f8f4bb1085b83593381c6bc8768625fbd5a909dcac17fdc2db9bd5837c42eddacf8594e59ad347b6ee9626efb8613ca52181a059cf7c676c111254a81c58ba9b4e4eae68bc6c271ba9b53147d04557febc8501dac3a7b368b5aefb16679584054d0f3bf68f4eaa9b9b84c0a849f93d7b8c1c97564050c4671860321c4b80b8c82058c6160970fe33ebf7d42cb99938b5c2950b414cca93c777df7f18522fb7624e97cb6b9d119542b198df0908d7db8ecd9da232cb3c3d68cc252d45a720f7f130de5da8ce735f44"}, @NLBL_UNLABEL_A_SECCTX={0xe5, 0x7, "29ad1b75c556bb5a6809c123e49104605802319e9d3e3133be6a9336c7141dc43bd373082c3edc6a8f06cf748b5263661b9023b71f82e8356557edc658e99dc65a74bcc07f8b8cd6d3d555238f4ce832fb687981480e9c3004a94d5a963f5a72b028a05227b40eded67ba6829ac14aba2c23a99c58938c1ffe6df78efbcd48e343ac83b5a51f9eb55f9991060a5ec173b8047605a7f26b7336648e91a75113876aa4e8bc57ccf6cc31817e3ffe3b7cbd5cc6852212805a73627ea3dcaf3b05752d7f42f9fc2212db00d36a19e004255ddac2ed80b032af28b76f9dde9365406299"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r7, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 0:
r0 = socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
sendmmsg$auto(r1, 0x0, 0x5, 0x20000000)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9)
poll$auto(&(0x7f0000000040)={r2, 0x1000, 0x94}, 0x4, 0xfffff800)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004)
iopl$auto(0x3)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x80000000, 0xfffffffffffffffc, 0x9b71, 0x2, 0x8)
get_mempolicy$auto(0x0, 0x0, 0x81, 0x8, 0x3)
connect$auto(0x3, &(0x7f0000000140), 0x55)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r3 = bpf$auto(0x0, 0x0, 0xfbf)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89b0, &(0x7f0000000140)={'vlan0\x00'})
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, r3, 0x8000)
write$auto(0x3, 0x0, 0x296)
sendmsg$auto_NLBL_MGMT_C_LISTDEF(r1, 0x0, 0x20048800)
pipe2$auto(&(0x7f0000000000)=r0, 0x4)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x3)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x9)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4020009, 0x6, 0xb5, 0x401, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
removexattr$auto(0x0, 0x0)
mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd)
getrandom$auto(0x0, 0x6000000, 0x3)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rxrpc/calls\x00', 0x100, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/88, 0x58)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001080)=""/4092, 0xffc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socketpair$auto(0x1000001d, 0x2, 0x7, 0x0)
open(0x0, 0x252802, 0x190)
socket(0x1, 0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0xf44, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000001c0), 0x55)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0x80000001, 0x8)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 2:
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
ioctl$auto(r0, 0x921064a6, 0x20000000020000a)
getdents$auto(0x600000000, 0xfffffffffffffffd, 0xd00)
mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x2, 0x8, 0x4000000000db, 0x44eb1, 0x4000000000000006, 0x300000000000)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
socket(0x10, 0x2, 0x4)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff)
socketpair$auto(0x1d, 0x2, 0x2, 0x0)
connect$auto(0x3, 0x0, 0x55)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
pidfd_open$auto(0xffffffffffffffff, 0xfffffff7)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x7fe, 0x8)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2200, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x3, 0x1, 0x5c5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$auto_GTP_CMD_ECHOREQ(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r2, 0x601, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0xb24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
mremap$auto(0x0, 0x3, 0x3fd6, 0x3, 0x1000000000f1)
mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0x2, 0x8000)
madvise$auto(0x741, 0x6, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x460f, 0x0)
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x20, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
executing program 2:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001580)='/dev/dsp1\x00', 0x0, 0x0)
rseq$auto(0xfffffffffffffffd, 0x80000001, 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x80000005)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0xa, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000000), 0x0)
close_range$auto(0x2, 0xa, 0x0)
open(0x0, 0xa240, 0x15e)
open(0x0, 0x161342, 0x100)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00'})
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
open(0x0, 0x22240, 0x16c)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x1004, 0x5, 0x7fffffffffffffff, 0x8000000014, 0xffffffffffffffff, 0xb4)
madvise$auto(0x0, 0x2003ec, 0x14)
msync$auto(0x0, 0x2000000005, 0x6)
executing program 5:
sysfs$auto(0x910, 0x80, 0x3b7f6eca)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0)
read$auto_dvb_dvr_fops_dmxdev(r0, &(0x7f0000001380)=""/111, 0x6f)
close_range$auto(0x2, 0x8, 0x0)
executing program 4:
mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x262400, 0xb5d1af1605322c72)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/tracing/trace_options\x00', 0x8000, 0x0)
pread64$auto(r1, &(0x7f0000000ec0)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2, 0x40)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setreuid$auto(0x15, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
sendmsg$auto_NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ioctl$auto(0x3, 0xff0a, 0x0)
executing program 5:
epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x10001, 0x0, &(0x7f0000000080)={0xffffffff}, 0x1)
executing program 5:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48811}, 0x4000804)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x101083, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0)
r1 = getuid()
r2 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRES8=r2, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace\x00', 0x80800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x180)
sendmsg$auto_NBD_CMD_CONNECT(r2, 0x0, 0x80)
lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x0, 0x100000003, 0xfb9, r1, 0x0, 0x0, 0x800002000000009, 0x6, 0x8000010008, 0x2, 0x7dffffff, 0x5, 0xfff, 0xddf9, 0xbc3, 0x1})
r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/personality\x00', 0x80000, 0x0)
read$auto(r3, &(0x7f0000000240)='\xdf\xee\x8a', 0x196d083b)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r4)
sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={0x0}}, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000003f00), 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_logitech/parameters/lg4ff_no_autoswitch\x00', 0x2080, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
r6 = socket(0x2, 0x1, 0x0)
stat$auto(0x0, &(0x7f0000000340)={0x4588, 0x9, 0x9, 0x1, 0xee01, 0x0, 0x0, 0x10, 0x3, 0x2, 0x0, 0x1, 0x81, 0x8, 0x200, 0x2, 0x7})
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
executing program 2:
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r0)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdc01, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc8a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4881)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub0/status\x00', 0x200, 0x0)
pread64$auto(r2, 0x0, 0x100000000008, 0x8)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2000c, 0x6, 0xcb1, 0xffffffffffffffff, 0x8000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xa2803, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x1d, 0x5, 0x8000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82082, 0x0)
mprotect$auto(0x1000df96, 0x8000000000000004, 0xfffffffffffffff7)
close_range$auto(0x2, 0x8, 0x0)
socket(0x29, 0x1, 0xfffffffe)
write$auto(0x3, 0x0, 0x296)
msgrcv$auto(0x0, 0x0, 0x1000, 0xffffffffffffffff, 0xb1)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x92500, 0x0)
ioctl$auto_TIOCCBRK2(r3, 0x5428, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x28, 0x6, 0x24)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
socket(0x1f, 0x801, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0xfffffcab, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
executing program 4:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x4, 0x80000000}, 0xb}, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1fc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0xfd, 0x7, "15a617d9c8c66e78b3a0eb16baac5e9d1ff0eb65ced9eb2a8b25dd2b2ed6594310c909e479b2ec0da3aa66d5766b39b583f8f4bb1085b83593381c6bc8768625fbd5a909dcac17fdc2db9bd5837c42eddacf8594e59ad347b6ee9626efb8613ca52181a059cf7c676c111254a81c58ba9b4e4eae68bc6c271ba9b53147d04557febc8501dac3a7b368b5aefb16679584054d0f3bf68f4eaa9b9b84c0a849f93d7b8c1c97564050c4671860321c4b80b8c82058c6160970fe33ebf7d42cb99938b5c2950b414cca93c777df7f18522fb7624e97cb6b9d119542b198df0908d7db8ecd9da232cb3c3d68cc252d45a720f7f130de5da8ce735f44"}, @NLBL_UNLABEL_A_SECCTX={0xe5, 0x7, "29ad1b75c556bb5a6809c123e49104605802319e9d3e3133be6a9336c7141dc43bd373082c3edc6a8f06cf748b5263661b9023b71f82e8356557edc658e99dc65a74bcc07f8b8cd6d3d555238f4ce832fb687981480e9c3004a94d5a963f5a72b028a05227b40eded67ba6829ac14aba2c23a99c58938c1ffe6df78efbcd48e343ac83b5a51f9eb55f9991060a5ec173b8047605a7f26b7336648e91a75113876aa4e8bc57ccf6cc31817e3ffe3b7cbd5cc6852212805a73627ea3dcaf3b05752d7f42f9fc2212db00d36a19e004255ddac2ed80b032af28b76f9dde9365406299"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r6, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
setsockopt$auto(r0, 0x4d6f, 0x7fff, &(0x7f0000000000)='\x00', 0x1)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
ioctl$auto(0xc8, 0x800454e0, 0xe)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010)
close_range$auto(r0, r0, 0x20000000)
io_uring_setup$auto(0x6, 0x0)
open(0x0, 0x161342, 0x100)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9)
socket(0x1d, 0x3, 0x1)
socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mknod$auto(0x0, 0x1081, 0x9)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x1010001, 0x100000003)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x4c, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_BSSID={0x36, 0xf5, "af08860a5c815018c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce49244259f4098b7805b616c75a7"}]}, 0x4c}}, 0x4000000)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000)
r1 = pipe2$auto(&(0x7f0000000040)=r0, 0xffffffff)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x2}]}, 0x24}}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x71d)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto(r4, 0x8038550a, 0x1)
setsockopt$auto(0xffffffffffffffff, 0xfffffffd, 0x14, 0x0, 0x4)
pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffe01)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x1)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fc00df25290000001800018014000200766c616e310000000000000000000000e6ba463ae912ff4a6df592597ca822b5698d872d174d554dff78e70778a683241404ea4b1d4276e75aeaa41e05d1613692e075a7f78699e9751eac19e7f33b0b15"], 0x2c}, 0x1, 0x300, 0x0, 0x408d1}, 0x4010)
executing program 0:
unshare$auto(0x40000080)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
read$auto_dev_fops_plock(r0, &(0x7f0000000240)=""/192, 0xc0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x6})
getsockopt$auto(0xffffffffffffffff, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r4, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)
executing program 2:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x4, 0x80000000}, 0xb}, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000100), r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r6, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 4:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, 0x0, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r5 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000100), r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1fc, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0xfd, 0x7, "15a617d9c8c66e78b3a0eb16baac5e9d1ff0eb65ced9eb2a8b25dd2b2ed6594310c909e479b2ec0da3aa66d5766b39b583f8f4bb1085b83593381c6bc8768625fbd5a909dcac17fdc2db9bd5837c42eddacf8594e59ad347b6ee9626efb8613ca52181a059cf7c676c111254a81c58ba9b4e4eae68bc6c271ba9b53147d04557febc8501dac3a7b368b5aefb16679584054d0f3bf68f4eaa9b9b84c0a849f93d7b8c1c97564050c4671860321c4b80b8c82058c6160970fe33ebf7d42cb99938b5c2950b414cca93c777df7f18522fb7624e97cb6b9d119542b198df0908d7db8ecd9da232cb3c3d68cc252d45a720f7f130de5da8ce735f44"}, @NLBL_UNLABEL_A_SECCTX={0xe5, 0x7, "29ad1b75c556bb5a6809c123e49104605802319e9d3e3133be6a9336c7141dc43bd373082c3edc6a8f06cf748b5263661b9023b71f82e8356557edc658e99dc65a74bcc07f8b8cd6d3d555238f4ce832fb687981480e9c3004a94d5a963f5a72b028a05227b40eded67ba6829ac14aba2c23a99c58938c1ffe6df78efbcd48e343ac83b5a51f9eb55f9991060a5ec173b8047605a7f26b7336648e91a75113876aa4e8bc57ccf6cc31817e3ffe3b7cbd5cc6852212805a73627ea3dcaf3b05752d7f42f9fc2212db00d36a19e004255ddac2ed80b032af28b76f9dde9365406299"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r7, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x6, 0x0)
epoll_create$auto(0x4)
epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
capset$auto(0x0, 0xfffffffffffffffe)
epoll_ctl$auto(0x5, 0x3, r0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='j\x00%'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
syz_clone(0x40100100, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100))
mprotect$auto(0x0, 0x8000000000000001, 0x6)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000)
sysfs$auto(0x2, 0x9, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x1, 0x0)
openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/uprobe_profile\x00', 0x200082, 0x0)
executing program 5:
unshare$auto(0x40000080)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
read$auto_dev_fops_plock(r0, &(0x7f0000000240)=""/192, 0xc0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x6})
getsockopt$auto(0xffffffffffffffff, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r1=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r1, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r5=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r3, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x4c, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_BSSID={0x36, 0xf5, "af08860a5c815018c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce49244259f4098b7805b616c75a7"}]}, 0x4c}}, 0x4000000)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000)
r1 = pipe2$auto(&(0x7f0000000040)=<r2=>r0, 0xffffffff)
r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
readv$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x5}, 0x1)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5}]}, 0x2c}}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x71d)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.3/d3cold_allowed\x00', 0x0, 0x0)
read$auto(0x3, 0x0, 0x80)
r6 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0)
write$auto(r6, 0x0, 0xfd)
r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto(r7, 0x8038550a, 0x1)
setsockopt$auto(0xffffffffffffffff, 0xfffffffd, 0x14, 0x0, 0x4)
pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffe01)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x1)
ppoll$auto(&(0x7f0000000200)={r2, 0x8000, 0x6}, 0x8, &(0x7f0000000280)={0x9}, &(0x7f0000000340)={0xfff}, 0x8)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
executing program 4:
unshare$auto(0x40000080)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
read$auto_dev_fops_plock(r0, &(0x7f0000000240)=""/192, 0xc0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x6})
getsockopt$auto(0xffffffffffffffff, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r2, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r4, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: bisecting 38 programs
bisect: split chunks (needed=false): <37>
bisect: split chunk #0 of len 37 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 9, 25, 30, 30, 29, 17, 18, 5, 20, 1, 30, 30, 24, 23, 20, 3, 18, 25, 25, 30, 16, 30, 30, 17]
detailed listing:
executing program 33:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 0:
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@broadcast}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
timerfd_create$auto(0x9, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
executing program 0:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x4, 0x80000000}, 0xb}, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r5 = syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1fc, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0xfd, 0x7, "15a617d9c8c66e78b3a0eb16baac5e9d1ff0eb65ced9eb2a8b25dd2b2ed6594310c909e479b2ec0da3aa66d5766b39b583f8f4bb1085b83593381c6bc8768625fbd5a909dcac17fdc2db9bd5837c42eddacf8594e59ad347b6ee9626efb8613ca52181a059cf7c676c111254a81c58ba9b4e4eae68bc6c271ba9b53147d04557febc8501dac3a7b368b5aefb16679584054d0f3bf68f4eaa9b9b84c0a849f93d7b8c1c97564050c4671860321c4b80b8c82058c6160970fe33ebf7d42cb99938b5c2950b414cca93c777df7f18522fb7624e97cb6b9d119542b198df0908d7db8ecd9da232cb3c3d68cc252d45a720f7f130de5da8ce735f44"}, @NLBL_UNLABEL_A_SECCTX={0xe5, 0x7, "29ad1b75c556bb5a6809c123e49104605802319e9d3e3133be6a9336c7141dc43bd373082c3edc6a8f06cf748b5263661b9023b71f82e8356557edc658e99dc65a74bcc07f8b8cd6d3d555238f4ce832fb687981480e9c3004a94d5a963f5a72b028a05227b40eded67ba6829ac14aba2c23a99c58938c1ffe6df78efbcd48e343ac83b5a51f9eb55f9991060a5ec173b8047605a7f26b7336648e91a75113876aa4e8bc57ccf6cc31817e3ffe3b7cbd5cc6852212805a73627ea3dcaf3b05752d7f42f9fc2212db00d36a19e004255ddac2ed80b032af28b76f9dde9365406299"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r7, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 0:
r0 = socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
sendmmsg$auto(r1, 0x0, 0x5, 0x20000000)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9)
poll$auto(&(0x7f0000000040)={r2, 0x1000, 0x94}, 0x4, 0xfffff800)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004)
iopl$auto(0x3)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x80000000, 0xfffffffffffffffc, 0x9b71, 0x2, 0x8)
get_mempolicy$auto(0x0, 0x0, 0x81, 0x8, 0x3)
connect$auto(0x3, &(0x7f0000000140), 0x55)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r3 = bpf$auto(0x0, 0x0, 0xfbf)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89b0, &(0x7f0000000140)={'vlan0\x00'})
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, r3, 0x8000)
write$auto(0x3, 0x0, 0x296)
sendmsg$auto_NLBL_MGMT_C_LISTDEF(r1, 0x0, 0x20048800)
pipe2$auto(&(0x7f0000000000)=r0, 0x4)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x3)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x9)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4020009, 0x6, 0xb5, 0x401, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
removexattr$auto(0x0, 0x0)
mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd)
getrandom$auto(0x0, 0x6000000, 0x3)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rxrpc/calls\x00', 0x100, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/88, 0x58)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001080)=""/4092, 0xffc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socketpair$auto(0x1000001d, 0x2, 0x7, 0x0)
open(0x0, 0x252802, 0x190)
socket(0x1, 0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0xf44, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000001c0), 0x55)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0x80000001, 0x8)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 2:
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
ioctl$auto(r0, 0x921064a6, 0x20000000020000a)
getdents$auto(0x600000000, 0xfffffffffffffffd, 0xd00)
mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x2, 0x8, 0x4000000000db, 0x44eb1, 0x4000000000000006, 0x300000000000)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
socket(0x10, 0x2, 0x4)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff)
socketpair$auto(0x1d, 0x2, 0x2, 0x0)
connect$auto(0x3, 0x0, 0x55)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
pidfd_open$auto(0xffffffffffffffff, 0xfffffff7)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x7fe, 0x8)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2200, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x3, 0x1, 0x5c5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$auto_GTP_CMD_ECHOREQ(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r2, 0x601, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0xb24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
mremap$auto(0x0, 0x3, 0x3fd6, 0x3, 0x1000000000f1)
mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0x2, 0x8000)
madvise$auto(0x741, 0x6, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x460f, 0x0)
executing program 0:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x20, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
executing program 2:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001580)='/dev/dsp1\x00', 0x0, 0x0)
rseq$auto(0xfffffffffffffffd, 0x80000001, 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x80000005)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0xa, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000000), 0x0)
close_range$auto(0x2, 0xa, 0x0)
open(0x0, 0xa240, 0x15e)
open(0x0, 0x161342, 0x100)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00'})
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
open(0x0, 0x22240, 0x16c)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x1004, 0x5, 0x7fffffffffffffff, 0x8000000014, 0xffffffffffffffff, 0xb4)
madvise$auto(0x0, 0x2003ec, 0x14)
msync$auto(0x0, 0x2000000005, 0x6)
executing program 5:
sysfs$auto(0x910, 0x80, 0x3b7f6eca)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0)
read$auto_dvb_dvr_fops_dmxdev(r0, &(0x7f0000001380)=""/111, 0x6f)
close_range$auto(0x2, 0x8, 0x0)
executing program 4:
mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x262400, 0xb5d1af1605322c72)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/tracing/trace_options\x00', 0x8000, 0x0)
pread64$auto(r1, &(0x7f0000000ec0)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2, 0x40)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setreuid$auto(0x15, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
sendmsg$auto_NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ioctl$auto(0x3, 0xff0a, 0x0)
executing program 5:
epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x10001, 0x0, &(0x7f0000000080)={0xffffffff}, 0x1)
executing program 5:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48811}, 0x4000804)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x101083, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0)
r1 = getuid()
r2 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRES8=r2, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace\x00', 0x80800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x180)
sendmsg$auto_NBD_CMD_CONNECT(r2, 0x0, 0x80)
lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x0, 0x100000003, 0xfb9, r1, 0x0, 0x0, 0x800002000000009, 0x6, 0x8000010008, 0x2, 0x7dffffff, 0x5, 0xfff, 0xddf9, 0xbc3, 0x1})
r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/personality\x00', 0x80000, 0x0)
read$auto(r3, &(0x7f0000000240)='\xdf\xee\x8a', 0x196d083b)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r4)
sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={0x0}}, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000003f00), 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_logitech/parameters/lg4ff_no_autoswitch\x00', 0x2080, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
r6 = socket(0x2, 0x1, 0x0)
stat$auto(0x0, &(0x7f0000000340)={0x4588, 0x9, 0x9, 0x1, 0xee01, 0x0, 0x0, 0x10, 0x3, 0x2, 0x0, 0x1, 0x81, 0x8, 0x200, 0x2, 0x7})
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
executing program 2:
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r0)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdc01, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc8a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4881)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub0/status\x00', 0x200, 0x0)
pread64$auto(r2, 0x0, 0x100000000008, 0x8)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2000c, 0x6, 0xcb1, 0xffffffffffffffff, 0x8000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xa2803, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x1d, 0x5, 0x8000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82082, 0x0)
mprotect$auto(0x1000df96, 0x8000000000000004, 0xfffffffffffffff7)
close_range$auto(0x2, 0x8, 0x0)
socket(0x29, 0x1, 0xfffffffe)
write$auto(0x3, 0x0, 0x296)
msgrcv$auto(0x0, 0x0, 0x1000, 0xffffffffffffffff, 0xb1)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x92500, 0x0)
ioctl$auto_TIOCCBRK2(r3, 0x5428, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x28, 0x6, 0x24)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
socket(0x1f, 0x801, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0xfffffcab, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
executing program 4:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x4, 0x80000000}, 0xb}, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1fc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0xfd, 0x7, "15a617d9c8c66e78b3a0eb16baac5e9d1ff0eb65ced9eb2a8b25dd2b2ed6594310c909e479b2ec0da3aa66d5766b39b583f8f4bb1085b83593381c6bc8768625fbd5a909dcac17fdc2db9bd5837c42eddacf8594e59ad347b6ee9626efb8613ca52181a059cf7c676c111254a81c58ba9b4e4eae68bc6c271ba9b53147d04557febc8501dac3a7b368b5aefb16679584054d0f3bf68f4eaa9b9b84c0a849f93d7b8c1c97564050c4671860321c4b80b8c82058c6160970fe33ebf7d42cb99938b5c2950b414cca93c777df7f18522fb7624e97cb6b9d119542b198df0908d7db8ecd9da232cb3c3d68cc252d45a720f7f130de5da8ce735f44"}, @NLBL_UNLABEL_A_SECCTX={0xe5, 0x7, "29ad1b75c556bb5a6809c123e49104605802319e9d3e3133be6a9336c7141dc43bd373082c3edc6a8f06cf748b5263661b9023b71f82e8356557edc658e99dc65a74bcc07f8b8cd6d3d555238f4ce832fb687981480e9c3004a94d5a963f5a72b028a05227b40eded67ba6829ac14aba2c23a99c58938c1ffe6df78efbcd48e343ac83b5a51f9eb55f9991060a5ec173b8047605a7f26b7336648e91a75113876aa4e8bc57ccf6cc31817e3ffe3b7cbd5cc6852212805a73627ea3dcaf3b05752d7f42f9fc2212db00d36a19e004255ddac2ed80b032af28b76f9dde9365406299"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r6, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
setsockopt$auto(r0, 0x4d6f, 0x7fff, &(0x7f0000000000)='\x00', 0x1)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
ioctl$auto(0xc8, 0x800454e0, 0xe)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010)
close_range$auto(r0, r0, 0x20000000)
io_uring_setup$auto(0x6, 0x0)
open(0x0, 0x161342, 0x100)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9)
socket(0x1d, 0x3, 0x1)
socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mknod$auto(0x0, 0x1081, 0x9)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x1010001, 0x100000003)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x4c, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_BSSID={0x36, 0xf5, "af08860a5c815018c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce49244259f4098b7805b616c75a7"}]}, 0x4c}}, 0x4000000)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000)
r1 = pipe2$auto(&(0x7f0000000040)=r0, 0xffffffff)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x2}]}, 0x24}}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x71d)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto(r4, 0x8038550a, 0x1)
setsockopt$auto(0xffffffffffffffff, 0xfffffffd, 0x14, 0x0, 0x4)
pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffe01)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x1)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fc00df25290000001800018014000200766c616e310000000000000000000000e6ba463ae912ff4a6df592597ca822b5698d872d174d554dff78e70778a683241404ea4b1d4276e75aeaa41e05d1613692e075a7f78699e9751eac19e7f33b0b15"], 0x2c}, 0x1, 0x300, 0x0, 0x408d1}, 0x4010)
executing program 0:
unshare$auto(0x40000080)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
read$auto_dev_fops_plock(r0, &(0x7f0000000240)=""/192, 0xc0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x6})
getsockopt$auto(0xffffffffffffffff, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r4, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)
executing program 2:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x4, 0x80000000}, 0xb}, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000100), r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r6, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 4:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, 0x0, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r5 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000100), r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1fc, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0xfd, 0x7, "15a617d9c8c66e78b3a0eb16baac5e9d1ff0eb65ced9eb2a8b25dd2b2ed6594310c909e479b2ec0da3aa66d5766b39b583f8f4bb1085b83593381c6bc8768625fbd5a909dcac17fdc2db9bd5837c42eddacf8594e59ad347b6ee9626efb8613ca52181a059cf7c676c111254a81c58ba9b4e4eae68bc6c271ba9b53147d04557febc8501dac3a7b368b5aefb16679584054d0f3bf68f4eaa9b9b84c0a849f93d7b8c1c97564050c4671860321c4b80b8c82058c6160970fe33ebf7d42cb99938b5c2950b414cca93c777df7f18522fb7624e97cb6b9d119542b198df0908d7db8ecd9da232cb3c3d68cc252d45a720f7f130de5da8ce735f44"}, @NLBL_UNLABEL_A_SECCTX={0xe5, 0x7, "29ad1b75c556bb5a6809c123e49104605802319e9d3e3133be6a9336c7141dc43bd373082c3edc6a8f06cf748b5263661b9023b71f82e8356557edc658e99dc65a74bcc07f8b8cd6d3d555238f4ce832fb687981480e9c3004a94d5a963f5a72b028a05227b40eded67ba6829ac14aba2c23a99c58938c1ffe6df78efbcd48e343ac83b5a51f9eb55f9991060a5ec173b8047605a7f26b7336648e91a75113876aa4e8bc57ccf6cc31817e3ffe3b7cbd5cc6852212805a73627ea3dcaf3b05752d7f42f9fc2212db00d36a19e004255ddac2ed80b032af28b76f9dde9365406299"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r7, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x6, 0x0)
epoll_create$auto(0x4)
epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
capset$auto(0x0, 0xfffffffffffffffe)
epoll_ctl$auto(0x5, 0x3, r0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='j\x00%'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
syz_clone(0x40100100, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100))
mprotect$auto(0x0, 0x8000000000000001, 0x6)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000)
sysfs$auto(0x2, 0x9, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x1, 0x0)
openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/uprobe_profile\x00', 0x200082, 0x0)
executing program 5:
unshare$auto(0x40000080)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
read$auto_dev_fops_plock(r0, &(0x7f0000000240)=""/192, 0xc0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x6})
getsockopt$auto(0xffffffffffffffff, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r1=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r1, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r5=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r3, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x4c, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_BSSID={0x36, 0xf5, "af08860a5c815018c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce49244259f4098b7805b616c75a7"}]}, 0x4c}}, 0x4000000)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000)
r1 = pipe2$auto(&(0x7f0000000040)=<r2=>r0, 0xffffffff)
r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
readv$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x5}, 0x1)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5}]}, 0x2c}}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x71d)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.3/d3cold_allowed\x00', 0x0, 0x0)
read$auto(0x3, 0x0, 0x80)
r6 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0)
write$auto(r6, 0x0, 0xfd)
r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto(r7, 0x8038550a, 0x1)
setsockopt$auto(0xffffffffffffffff, 0xfffffffd, 0x14, 0x0, 0x4)
pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffe01)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x1)
ppoll$auto(&(0x7f0000000200)={r2, 0x8000, 0x6}, 0x8, &(0x7f0000000280)={0x9}, &(0x7f0000000340)={0xfff}, 0x8)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
executing program 4:
unshare$auto(0x40000080)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
read$auto_dev_fops_plock(r0, &(0x7f0000000240)=""/192, 0xc0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x6})
getsockopt$auto(0xffffffffffffffff, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r2, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r4, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 27, 15, 30, 19, 15, 15, 13, 30, 30, 16, 30, 30, 24, 23, 20, 3, 18, 25, 25, 30, 16, 30, 30, 17]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socketpair$auto(0x1e, 0x0, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x800, 0x5, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
r0 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r0, 0x0, 0x6, 0x0, 0x0)
modify_ldt$auto(0x2, 0x0, 0x80)
socket(0xa, 0x5, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/group\x00', 0x20c800, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x4}, 0x7, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffb8, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(0x3, 0x0, 0xffd8)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2f212abd780000002900f500af08860a5c815035c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce4000000000000000000"], 0x40}}, 0x4000000)
pipe2$auto(&(0x7f0000000040)=r0, 0xffffffff)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)="4a67d2", 0x14}, 0x6, &(0x7f0000000180), 0x5, 0x1001}, 0x5}, 0x2, 0x100)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r3 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0xfffffffffffffffd, 0x0, 0x10000000000e0, 0xfffffffffffffffe, 0x401, 0x100000000008000)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xffe0}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x71d)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0x2}, 0x52)
shutdown$auto(0x200000003, 0x2)
socket(0x2, 0x3, 0x1)
socket(0x2a, 0x2, 0x0)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/fail_io_timeout/space\x00', 0x400040, 0x0)
syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000180), r3)
close_range$auto(0x2, 0x8, 0x0)
executing program 1:
openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/uid_map\x00', 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x8, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000000)="2ff0a2bfbf6af25fbd9f64b5", 0x10, &(0x7f00000000c0)={0x0, 0x1a001}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
shutdown$auto(0x200000003, 0x2)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x401, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
executing program 1:
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
sysfs$auto(0x2, 0x4f, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x4e, 0x1d, 0xc, 0x6, 0x5f02, 0x82, 0x9, 0x877, 0x6}, 0x0)
socket(0x1, 0x2, 0x4)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55)
recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x1008, 0x0, 0x0, 0x0, 0x2, 0x100}, 0x803}, 0x908, 0x6, 0x0)
r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd11/hctx0/tags_bitmap\x00', 0x8080, 0x0)
pread64$auto(r1, 0x0, 0x800, 0x4)
statmount$auto(0x0, &(0x7f0000000380)={0x6, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], "90c510ff7b12f5e8969f78aed83645fe3ad144a1f58f8d6cad229bb8f065937e043b7631ed28549752472aeeab56855b0baaaee21bcf89f9c839d5eda84b966dbc987c40decc0be8fb0fa47a64f99d08901104a891490669028665d809d9dfd0fb0054b2b8b7cd5b0c6d510e46a2c10f29ea879fbe3f2470f9502b03f7c5ff00a1825a22b29b79e9355e6d48d7aa2c7ff1c5ae4327f7cd3277c0024977ae6304da"}, 0x1fe, 0x81)
mprotect$auto(0xffff, 0x8000000000000001, 0x400)
socket(0x10, 0x2, 0x0)
mlockall$auto(0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2)
r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto(r2, 0xfffffff7, 0x10000008)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
r3 = socket(0x1d, 0x2, 0x7)
getsockopt$auto(r3, 0x6b, 0x3, 0xfffffffffffffffe, 0x0)
read$auto(0x3, 0x0, 0x9)
executing program 1:
socket(0x11, 0x800, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async)
socket(0xa, 0x2, 0x88) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x801, 0x84) (async)
syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0xfffffffc, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=r0, 0x1, @old_prog_fd=r0}, 0x7) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
ioctl$auto(r1, 0xc018620b, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/power/wakeup_expire_count\x00', 0x2000, 0x0) (async)
r2 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bdi/43:192/stats\x00', 0x700, 0x0)
pread64$auto(r2, &(0x7f0000000080)='(![', 0x80, 0x2)
executing program 1:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
brk$auto(0x7) (fail_nth: 1)
executing program 32:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
brk$auto(0x7) (fail_nth: 1)
executing program 3:
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
ioctl$auto(r0, 0xc0046209, 0x9)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x2, 0x5, 0x7181, 0xc54, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x4000080000001, 0xb4, 0x3, 0x7, 0x10007, 0x80, 0x2a2, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x1, 0x2, 0x800000000, 0x2, 0x0, 0x2000, 0x0, 0x0, 0x70624ce7, 0x1, 0xfffffffffffffffd, 0x4, 0x6, 0x0, 0x6, 0x100000001, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x1, 0xfffffffffffffe00, 0x0, 0x0, 0x9, 0x400000000005b8, 0xffff, 0x0, 0x7429, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x8, 0x3, 0xfffffffffffffffc, 0x9, 0x1, 0x7, 0xc567]}, 0x1fe, 0xd)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0))
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0)
socket(0x18, 0x5, 0x2)
bind$auto(0x3, &(0x7f0000000000), 0x6b)
close_range$auto(0x2, 0x8, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8000)
executing program 3:
r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x331200, 0x0)
sendmmsg$auto(r0, &(0x7f0000002180)={{&(0x7f0000000040)="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", 0x3, &(0x7f0000001140)={&(0x7f0000001040)="c91ec32815e174da4b57c0bef625d012d8699795e2096ddf390d7181e1f2867b574d194d925238722d1412ac8b82d1ba5f157a846bd6233799b54a44857ad71261d3ea78358f6a51a89a17af1175920309857993f88cdab76398c25e1d4745be0c9e80e4bb56e6c8fde5a4f99632e8a2ac5c5ede9c0e5067d31d5607f18319348dd206e911810e524c411b0b2a6ab4680d8eb2041fc845842166841e8d125cc8b451ff6a123e9fd75c877910ecf335767a724628fa8eed8c44764df02f2026565abce6e2a6159ed133c06fb30d0fa994df833dce7247afb18c8e594433005a55433c4c", 0x5d}, 0x6, &(0x7f0000001180)="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", 0x3, 0xffffffff}, 0xe}, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$auto_fops_atomic_t_ro_(0xffffffffffffffff, &(0x7f00000021c0)="34ded20042823a4855597c746ca6cf60254065eec561b0ec3bf71bdf85eaaa69042f1fc9ef6288e3d3f3b256a8b1b0ac9b00fb271e53", 0x36)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002240), r1)
r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000002280)='/dev/mixer\x00', 0x88440, 0x0)
msgctl$auto(0x10001, 0x10001, &(0x7f0000002340)={{0x5, <r4=>0x0, 0xffffffffffffffff, 0x9, 0x400, 0x0, 0x7}, &(0x7f00000022c0), &(0x7f0000002300)=0x6, 0x5, 0x5, 0x9, 0x5200, 0xc, 0x101, 0x0, 0xfffc, @raw=0x3, @raw=0x65f})
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000035c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003580)={&(0x7f00000023c0)={0x11a0, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x852, 0x75, 0x0, 0x1, [@nested={0xc7, 0xcc, 0x0, 0x1, [@generic="cfcadcca6c3138113a5b2ea3dd1e361a480f644a052ff8d4e29c62414a9c5cdd25dd7d8dbedcef07beb7ae9f36f840487aadf8b257b4cfedceed8545ad8757f494e02cfc694bf5c3ed693ee3e2038cfd67fbe6663c6289c09cdf85584f9310a4df891e00f92453544c57885563a1f4", @generic="ad804651fb6021637ac91dac5e1fa3d587785d0a13c85279", @generic="62c994f9c74bfa6f276a05db817991e0a03161938031448730aa1b84ad7dadd2984bcda512902a690db73b00981089f2127606b3", @typed={0x8, 0x145, 0x0, 0x0, @fd=r3}]}, @nested={0x112, 0x3d, 0x0, 0x1, [@nested={0x4, 0x77}, @nested={0x4, 0xa0}, @generic="3283f070fdcdb976cc646ca916932ea9725068be828b2d733cc498d9fe9b9e76b3e1b8a56bbd9d193df4f9bca6aef0d7c94e4ca3a45fb4923f5ca1611655d64d6033bdce750be1a3893fd5e4cce451ce8fa1e067c0fb8573db009704c20da314c47b52db444098bb787163a9b5f013f48a85ebd1d2", @typed={0x8, 0xb0, 0x0, 0x0, @uid=r4}, @generic="455c466a3b63f07237e02f9f4bc5bbc563efa3f6815e4640b3aa75329c9c4e9672614befc6a17b51639db713ba0417dc644a29157fa546590fbec98f22e139d21a33a9287ed659bbe0a8990b675ae2a1b0b77d4e1195e7bc30fd9a98e23d19b4c49a0487a90287e8d8b044b1c52b7d48be9df9460da900f1ea59cf68021c87c337281148ece8543c04"]}, @nested={0xf1, 0xf1, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @ipv4=@loopback}, @generic="26425dbf", @nested={0x4, 0x117}, @generic="e2bec6cc088dce4b2bf387caa61cd0559513455ca7bac93cc2cd87bda50140e40947248bc29b5dbcf15ead54fbf83c5bd36803675d747f5e67154e200cdcc3d0e2e1d99348533cdbdd5ce7e4c11e408786090b3fc955b90d8add6dcf5c4ed9f72573440920ccc1a7ca90eee3ffca8a5e9267c055ad562fe1a264558805998db6f954602393adc4bbb1a3e4e2d844bc3b83c49cc6318b5da6b6fc8b38263db79139d047c2c63197b3f05960375987c76aada0fa685159097e206eb197b65374d750", @nested={0x4, 0xd}, @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x6}, @typed={0xc, 0x12c, 0x0, 0x0, @u64=0x401}]}, @nested={0x8, 0x128, 0x0, 0x1, [@nested={0x4, 0x3e}]}, @nested={0x1c4, 0x65, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xb2}, @generic="a756b612997fd00a5b506f2354fa2a4cd7252abf418f153b28dff978adf0420e3f32d7da53a062c0d9243b20626a740da5f5231a7d66c2b122b44b9538d8d553146ba76b3c578556c6a42b17ff550d6a05e2c3", @generic="921a75e8ed5e471584b553067424e8926ad79324b3b79724e3c80315a203fd66c69b16b0ef726870938781f6faa2944fe195a0c77b1422d39705a0ef7cdf6c5d783831a5d87508aaeed3f715cd8c0aad1b3a2bdd6c9f741ee66e3fee74b0661c4d96927f924a22b33e9e1b5e33386fe2b15789827e6fb0eeaef4494318978315397b64ba8f9582d8b5d5ea8a240bcb98", @nested={0x4, 0x5a}, @generic="1d955f32d7ab8824eb0f17d45a51ed901411dae1617c0c0ea8b56f1050ff79a62684f74cb9109ed03cc9b4ba1272b4a574587065eac1b83f7af8cfdd8a5dcb611d477e912fba4f66bf122ed7e2b7f1a23a0cc3f207be92b9c49a70b0d15c051991537e922277941a66b281e9634ad805519d6fde46cace38da5ed7f12fe4d10bcd5388171aabbcc2d7ed3881109f8070ccc314750ed563b672915f4929c08a91774eac20ff59e2d57880ee358291e035f46311c5e89f2dd62b3e9b98b2c77071ec", @typed={0x9, 0x136, 0x0, 0x0, @str='(!\x8b#\x00'}]}, @generic="3c381ff32f1e6a183f08fdc76386481acb8df03c0a25c851b8ee3e2c6bbda7607ddefab87999c46f2d227d6943313681565811d460535e6724cc9a544ce68d53b6d7275377d3d8c5d744c30ccf8c091e0357ae30f7378d7aaa0b1a29e4c402994b358f0cfd7fbb46debcd51d393274d8fce225e77021353a701c4d3c06008a8fde15b8a86a185c5e1742c766e3f685e99bafce0145cc8e45b389a714228c671b8cc64ed7be78", @generic, @nested={0x6f, 0xc0, 0x0, 0x1, [@generic="3b0d2736e4922ea42b1ce6327ee5c9c0a30e3b8cc5a6caf094fde216cd15504c165837e2e386d1f838c371c80fd8f9b347e6435ae191a20dd7b003dbc41985ab1df8551e0353876de9a2d7013a593b3d9621d3", @nested={0x4, 0x1d}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@local}]}, @generic="b213d0b625af040bb9756bc29ba8bc6657eeb8abde6c11f219a94d8418e9d8a31f82079d063f2acd8cbbc93eab3f5aa6c228c187b92087dba352a1429a68113dc5790f425094963f35af5d5d372205990ce0a6c16aca431385fa5009382ebad170940c455244779f2a97149c69bf7735b479c111cd2793c7e0891c09e1e868df9f160958f96d9b19c9c801c08bf2b0108ffdf2b64ac62768956a55b8ec1f5c67a2a1cd3a65bc74e596ce57f2f570ec87535dd2d6fd767727f6ae8e36946037c8e031bfe964cde91b", @nested={0x1d3, 0x5d, 0x0, 0x1, [@generic="d3c186dee37d5764db343068e0cf4257846427ee596f9a15b06711a04d946584b62426bb035a2a265ddc597cdccb72f05361", @generic="c447d219e5d1f5893e0e52be62cc7c2a62f122920f1c979329071ea952b6635448900f660e9106b067810d3b0e795a24620676cb328ac42d40008fb7e7eb62ec6d6dd08aa51c638ecbc7318ec001fcdc10da3b31da7f33d150d3e3e8338645bc7ca76249031a24cffc3111ed98c385b7eacb739113ef088d3e985590346354e9a820618f1860162d91b36314977fdecb624cf51bffae8f4b44d07320e3619b0943519a1207cc88d8dc3e56b2f87ae6205e3508ad1857a0afbbe918c4dd5b1d7b972ae563617d946f7672730be10ca83959a1d586c4de3b40faaa3e3c", @generic="4f510b84112e6f3e8f17b4d585298f43d48cee80de700a1fdcd95a0b4fa7b9239d19283f76a9f2b2b4bfaef9c24b9a4ccca4d420cccc2db838e420a0f4cb3a7c8006260aa83d2d15edb22c5ba6173b593b5682e94aa3a4b3dad5d47c726b805d369e9ee276653adcb72f5fe087318ebb46adc06a0252582f3345f076359a7976689eab83f898326deb7d2f40f5da4d2f924094913aec229d2b6c02713cbb257f4ff5960ace37d617c915f8b9dd6cd7b5f52c438873ccdeda256fe147f9", @nested={0x4, 0x13b}]}]}, @NL80211_ATTR_EMA_RNR_ELEMS={0x170, 0x145, 0x0, 0x1, [@nested={0x16c, 0xfc, 0x0, 0x1, [@generic="2e82cd512211fabdc8f580e2cdd161c18811ac8bbde53a8579124e420193", @generic="e00f25aad5a9f9e594859654dc2ef7457166a5323513073e2ae079d1110bc97c70496bbf5e9bc7815e6d66c368f1b2d6d082769d67b2d4ad88773e8a24729d247be2de1dd961dbdcc13f8f4ead7ada16f3617aa91dfad76a013ed8a50de53009b0bfcd0595c8d56b32505b44f2473f59", @nested={0x4, 0xda}, @generic="a82a20b242108c6b808e7fd950d448e16e4297afd90217", @generic="c13d921530c596f39bd892ab3ea178234ffa9fccf3d305ad793e80b61549e1556b613d58fc0358caa5b0a0c8cfc32363fccd2e90306da5eda17008fb50a83f1664cb497ae7dddf09f096cf3c7925d89375c4836f08465ec630", @nested={0x4, 0x120}, @generic="10fa1719450fdfa78d5ae6082baf592e25502b84778f047538f6ef009333269f20fe6a6655c8403b7864a25032ad01aaed49202e69c451e0bcd1d02f77c4067323dbcb9badde9418ffdcb911eaf4d3fa9ae4112f5def86563202", @nested={0x4, 0x6}, @nested={0x4, 0xa4}]}]}, @NL80211_ATTR_PROBE_RESP={0x509, 0x91, "7b21cba14ba8315abcc49de09f3ba5b18296d75623e2fddc5c590f54af4ba67d8d81c58fe38b7a137f97aaff64697bbf2a1d77c34e41f0ce0479f7fb0c9a9e447fcea9d929eca900134be77f38e1c77835b433b7aa2ce12f831571e3cdff2086c063b29664d60a8272b847eb9a5c647be8d35a0e49e5711c6c0c656c24b0b1a50c33b360376cd7411027cf93d0ff92de87b47008b3f4861cc5d5d3d0e359d50a897f9e069825d844bf3f9ed265eab59fc25cacce9a209abe242c4ef3e4f733a90e97c81cccee808bd64c9d84c6501245956835acec77276bc3ce9e78ef0854ec8870c20ac5205507c52f4f179736f9dafafa86ed967ff9c2614c01ad303cf501bf22ffa00a4ffa99adaca1a315c3b167c36dd4a271ce1fcfc26f984b68177a30d5f434fbd206c01ab5be35eb15efdbf52b075bdc8244062430796e1500a34121cd104d80730d0ff564cd4f632d5df6e336c60e0263ca85d084cbacac7bf7b1a98fddde5369ec3c6e9a03a4f0bd1ed368682ea64a453dd921264b1209292c7194407ec6f5e7dc91afbee42fb567c47ca57912e12c9fb823ec8af17c3bf40d588ee2df7e15b853bc55e0e839d09e12e905772f6c3f76a02129edfe56029eaf659d7ca2659c65695d14e3fdc0c4b767673cf06c5df838e87f5766d311cedfcfc0fd9fa5624cc532860712512984811ab8ad1badc1ee8f3cb0597dfd253f182a6a1f791af9f054eb4739fed9b0a3fe62e9f7acac6c1fcf73144b796a7d72d28d88b7dbe7489f3e1facb3e8c14b525c530c4d2b70d9452b2ff54671e8c1e54e9b0da783d32c743013703f1da07eca9130515856f1aa53104d5c20cf8684a5aed1b87104026859ab9525429422ab4ce721a934406734013667c999c8aa57533c649b60e92dbd89d6c05058b9d04a7672a4ec9cb2b8411437d7ab9629b6df3b500608fc7422eb0a1949b836387271b51dbc868d43159629429a833f6a51cb07cfbe98a9692ac5d016812393e134e9f05e032a4d70d6b1af82d686ca20496ae574680c7470a3cd95650f29907e3566e2cd71ae47b210ae15404b4f4bdde6220ddd5724412cb9b4591468816f991bcf8b2acdc92c7c25e99311eeaa6b664dcc949b320cf88e74c9390e4fffea9717ef44c2e5d21d1f10943517668a6f82863a3a5bb03f95bded7b9e668036ba76c000581c487507a20ac1c3f329d6d18b1e4eaf078732117a5692b5a20ae70acd71299a685f387cdfd8a5da27cb64e7b12d6d136361517f2974620608f7817f57fd966d421859c768450a40cedce581d128e64b19b4c6baac0039b52146cd0f64781a0d9846e93fc282254fd59f193d01e51eedadcf65166b216900157f091d430f428925a32600d80f740b0df0a349def33d131dd0976bcc36cc988b138645af4fffd1aaf10e868651d06c4d88fcb481fb715bf025ff902630266769fca02f3416b6c01fc75d9c7099f92bf935916e6ef01d6e3a8f6a46cfe2c24efd6f028d69271184fc026efd64ec6c01228da665bda9e5ce1383e372c3825c59679e6d9cc0ac0abb55135e5a437edc0bdb16dab4b89c0018828667ee229bfb15af3a63d4ab3cc24c12f17edebee6766128b65660744be3fc28f01713642778e3f9d37f4ca9fd7fca6670ae7cef02ba8e35fd3ef26719e3e4084fc0dd9a95ba3a543e1c022150f3777b6b0d1dab575349037e679c95e81dc8df51b8ed422bdcd0e4fbe2ae5fac31050e5704a67d9f239f67de18d1c89b627fedc104102e96994acc5e485c1a296ab0b70a6c4a230e4a037036a9affb8f8b4fd7b2ed82a8715ceab6"}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_CSA_IES={0x1b8, 0xb9, 0x0, 0x1, [@nested={0xfe, 0x5, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @fd=r0}, @typed={0x3e, 0xb3, 0x0, 0x0, @binary="23d7d30c85ed0976dea03282d1114b1e259b238bb33fc1ca958272979ca5b6ea4b83e2bae8137a558b14f7d8f1735c8673cf88272ae64cb3e414"}, @generic="c92277d15e7f1ee90d53872084b028a1ed77638fa6e1fa0e3724f85d8f49834301d2e338da7ba6056c6a6ba0210e6cb8b4b36871ff2d7d5762e75b58ad632a10a8217000faffae7c87733e0cf553ea88340ebf83862818ce97c6e705039c49e394dbcdc0956660d62d1ae0a62b96e95d70ce5e08a49846886c5638d76727b1df1a84007484647dc4194a5dc46c4a3d460d27159d2496c1f2b004cdc0328ad044c01a44df5e5f", @typed={0x5, 0xd2, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x107}]}, @generic="09d0a911e8191d57abc9e972d6a5b676fb8ffd2f719fd05a0d009f210d7e7cd83f52f1c6a8d9009846e61e623aa2d9b07016c5240e23d22605caf463edf661b9519282c6d75b2c7c06e70ff0", @nested={0x66, 0xf4, 0x0, 0x1, [@generic="975d32a329c46dd2b98052c52db72003aedd9f8dedd90048eb47767b38e9207050b381f485946c79fde27008e8c6ffbce5e4bd12eb7e8d3a6ee99f35aca94bfd7ff1bbab77402c33bf3ecbfed71b968d915a97270515dcc62fd56edb29d5", @typed={0x4, 0x82}]}]}, @NL80211_ATTR_REG_ALPHA2={0xf3, 0x21, "729a70709da6c7ebb1dadcf645de7c764faf34dbe09ea52d6c7ea46d4c4aeeb563230abf88ae254e00ddd21a7d4476042fb6e7df70850ed649ac82d1d1902209b853f4b75cec8954015bc578fe267d69647d376e8b5b55d718432692d29c96f28c82f8af2011dcedd452681e80c121922136ddfb8d1ed0efef796d4c446968c6962caf02571b80b0b62abee3fdb9e8d6d7ccbc817c91998e307d2a8223107164f45aef45511cf77c1702a3e668c6b2074264153fc338ead8be5ceff878dd6740387981862cef74618f902133b6423c31d58be0c28f6e505e4d97c3610e989ca68677502b1dcd15821a1d6971ca3512"}]}, 0x11a0}, 0x1, 0x0, 0x0, 0x40c0}, 0x4)
statmount$auto(&(0x7f0000003600)={0xc39, @inferred=r1, 0x7, 0xfffffffffffffffc, 0x4}, &(0x7f0000003640)={0xffff7fff, 0x8, 0x24b, 0xffff8001, 0x401, 0x1ff, 0x4, 0x17, 0x6, 0x7, 0x3, 0x8, 0xffffffffffffd9aa, 0x8b2, 0xffff, 0xe, 0x7, 0x5, 0x1, 0x8000000000, 0x8, 0x4e, 0xffff6db9, 0x3, 0x6a, 0x6, [0x0, 0x9, 0x8, 0x800, 0x3, 0x10001, 0x7, 0x4, 0x9, 0x200, 0x8, 0x5, 0xd, 0x7, 0xf3e, 0xd, 0xf51, 0x7, 0x1000, 0x3ff, 0x4, 0x29, 0xd, 0xffffffff, 0x5, 0x3, 0x3, 0x7ff, 0x4, 0x1, 0x1dc8, 0x6, 0x5, 0x0, 0xfffffffffffffffd, 0x800, 0x299f, 0x3, 0x0, 0x3, 0x7, 0x1, 0x3ff, 0x4a06, 0x6, 0xfff], "061d94619c438889762304ebb56270d497917633af9640a9fb3f8a90cb54e59faad49759fc04164133854e6811ff054557a12de582bd9674620821a507837f0e185a7bf609a50232e45fb225162e52300516b6bb039e83ed765e13cf4604340dc35f6650e39231c69223edc3574b532117306f7e7c4be4dc63c4362f77a788fd6bae34820d69f7669f118c3ac0d17472f3cccabf11a4c481fc60d773ed0f5cea1b24f14972848f0ad588bfa57aa0f60fe3c163efec2cf8db6b3835"}, 0x8000000000000001, 0x4)
writev$auto(r0, &(0x7f0000003940)={&(0x7f0000003900)="ddf463accf48ddc2fc53fe31758c66af73ee7573d123fca28a6971fa900e4ddb53b78a5300554a", 0x7f}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = open(&(0x7f0000003980)='./file0\x00', 0x40, 0x172)
r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000039c0)='/proc/thread-self/pagemap\x00', 0x90001, 0x0)
mmap$auto(0x57db, 0x8, 0x15, 0x10011, r7, 0x1)
read$auto(r6, &(0x7f0000003a00)='/dev/mixer\x00', 0x4c)
sysfs$auto(0x8, 0x7, 0x6a)
r8 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000003a40), 0x100, 0x0)
io_uring_enter$auto(r8, 0x1, 0x7, 0x3, &(0x7f0000003a80)="23f1e222a67cc903f53f3420b40d07f244b7012dda3a3cf0127fbe50e546e8bc28a8d91b5b82098ea9b00558b87a6a015aca413d730d95f298336368a5d708e8569b1694ae0434469be6b23acb732ddac6ae88cc1200178dfc64cf6ec32582bb0255a7e7e2d33b80499ca857e44d3bb65a849fd6b616a10cda8ad2d4c05685330a9747444631c23fff24f4d635892ee19a8e8a6e97ae9aa8004be96a1a6fa6ee524be5b48ef8ca20b44ffb3d91966a8ec564bc9d7ed45e16c1d9dd591251d25d5c937ac13c722378a3e53422c68390ea7e331d46b9142d458c9e19c4374b1b", 0x5)
r9 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003b80), 0x402, 0x0)
write$auto_vhost_vsock_fops_vsock(r9, &(0x7f0000003bc0)="2fdaee671b8c05fe0ae199299a6d1465bb116a3dea10e3c274d0980490994afa7441e3147358d6d7e9c8c0fe28ff475dd3e06715b66739748db67f20b93805503902c467aeec0fc3c2a8dd8499d0b369a8d55b71a2c8fafa60", 0x59)
write$auto_evm_xattr_ops_evm_secfs(r6, &(0x7f0000003c40)="93a29bc0bc079d5ade51848872a82f4d82531a0919ca73d8c4cbb8009c0048446ec8ab3e6f96ec0a6795e8347a96b7678f22092e153e309a803ce4fc1d", 0x3d)
sysfs$auto(0x0, 0x0, 0x81)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r10, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4000840)
write$auto_mtd_fops_mtdchar(r6, &(0x7f0000003d80)="1c316295ad2b200b87ec7f7f4a734cc5d9cd6f88ebc5c9", 0x17)
r11 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000003e00), r1)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000003f00)={&(0x7f0000003dc0), 0xc, &(0x7f0000003ec0)={&(0x7f0000003e40)={0x58, r11, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4eb}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xef}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c074}, 0x80)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000005000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004fc0)={&(0x7f0000003f80)={0x101c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0x1004, 0xbb, "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"}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x101c}, 0x1, 0x0, 0x0, 0x4068098}, 0x40000)
rmdir$auto(&(0x7f0000005040)='./file0\x00')
sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000005180)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005140)={&(0x7f0000005100)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
executing program 3:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 3:
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) (async)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) (async)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", @inferred=<r1=>0xffffffffffffffff})
socket(0x1a, 0x1, 0x3)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
pipe2$auto(0x0, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
ioctl$auto_evdev_fops_evdev(r4, 0x80104592, 0x0)
poll$auto(&(0x7f0000000040)={r1, 0x8, 0x400}, 0x2, 0x10001) (async)
poll$auto(&(0x7f0000000040)={<r5=>r1, 0x8, 0x400}, 0x2, 0x10001)
write$auto_ftrace_set_event_pid_fops_trace_events(r5, &(0x7f0000000100)="56ecad51ba1cdb8125235a3ba4dc7a6163217a2c55685ff9fb089ce33e98409b1541b20645ad705c0e19a16bd4a22dee63b38a43245e869dd02def08788baddcf95e7a2e064c01d6be38fa6588f52dff086aaa3c5b1c8d7a05c8d3418ff9e9109dd87c954fd847832b9fb6", 0x6b)
executing program 3:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r2, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 3:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 4:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x4, 0x80000000}, 0xb}, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1fc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0xfd, 0x7, "15a617d9c8c66e78b3a0eb16baac5e9d1ff0eb65ced9eb2a8b25dd2b2ed6594310c909e479b2ec0da3aa66d5766b39b583f8f4bb1085b83593381c6bc8768625fbd5a909dcac17fdc2db9bd5837c42eddacf8594e59ad347b6ee9626efb8613ca52181a059cf7c676c111254a81c58ba9b4e4eae68bc6c271ba9b53147d04557febc8501dac3a7b368b5aefb16679584054d0f3bf68f4eaa9b9b84c0a849f93d7b8c1c97564050c4671860321c4b80b8c82058c6160970fe33ebf7d42cb99938b5c2950b414cca93c777df7f18522fb7624e97cb6b9d119542b198df0908d7db8ecd9da232cb3c3d68cc252d45a720f7f130de5da8ce735f44"}, @NLBL_UNLABEL_A_SECCTX={0xe5, 0x7, "29ad1b75c556bb5a6809c123e49104605802319e9d3e3133be6a9336c7141dc43bd373082c3edc6a8f06cf748b5263661b9023b71f82e8356557edc658e99dc65a74bcc07f8b8cd6d3d555238f4ce832fb687981480e9c3004a94d5a963f5a72b028a05227b40eded67ba6829ac14aba2c23a99c58938c1ffe6df78efbcd48e343ac83b5a51f9eb55f9991060a5ec173b8047605a7f26b7336648e91a75113876aa4e8bc57ccf6cc31817e3ffe3b7cbd5cc6852212805a73627ea3dcaf3b05752d7f42f9fc2212db00d36a19e004255ddac2ed80b032af28b76f9dde9365406299"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r6, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 5:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
setsockopt$auto(r0, 0x4d6f, 0x7fff, &(0x7f0000000000)='\x00', 0x1)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
ioctl$auto(0xc8, 0x800454e0, 0xe)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010)
close_range$auto(r0, r0, 0x20000000)
io_uring_setup$auto(0x6, 0x0)
open(0x0, 0x161342, 0x100)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9)
socket(0x1d, 0x3, 0x1)
socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mknod$auto(0x0, 0x1081, 0x9)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x1010001, 0x100000003)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x4c, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_BSSID={0x36, 0xf5, "af08860a5c815018c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce49244259f4098b7805b616c75a7"}]}, 0x4c}}, 0x4000000)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000)
r1 = pipe2$auto(&(0x7f0000000040)=r0, 0xffffffff)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x2}]}, 0x24}}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x71d)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto(r4, 0x8038550a, 0x1)
setsockopt$auto(0xffffffffffffffff, 0xfffffffd, 0x14, 0x0, 0x4)
pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffe01)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x1)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fc00df25290000001800018014000200766c616e310000000000000000000000e6ba463ae912ff4a6df592597ca822b5698d872d174d554dff78e70778a683241404ea4b1d4276e75aeaa41e05d1613692e075a7f78699e9751eac19e7f33b0b15"], 0x2c}, 0x1, 0x300, 0x0, 0x408d1}, 0x4010)
executing program 0:
unshare$auto(0x40000080)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
read$auto_dev_fops_plock(r0, &(0x7f0000000240)=""/192, 0xc0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x6})
getsockopt$auto(0xffffffffffffffff, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r4, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)
executing program 2:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x4, 0x80000000}, 0xb}, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000100), r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r6, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 4:
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
getpeername$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x1}, &(0x7f00000004c0)=0xd0b1)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x0)
sendmmsg$auto(r2, 0x0, 0x1, 0x3663f3c3)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r5 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000100), r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1fc, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0xfd, 0x7, "15a617d9c8c66e78b3a0eb16baac5e9d1ff0eb65ced9eb2a8b25dd2b2ed6594310c909e479b2ec0da3aa66d5766b39b583f8f4bb1085b83593381c6bc8768625fbd5a909dcac17fdc2db9bd5837c42eddacf8594e59ad347b6ee9626efb8613ca52181a059cf7c676c111254a81c58ba9b4e4eae68bc6c271ba9b53147d04557febc8501dac3a7b368b5aefb16679584054d0f3bf68f4eaa9b9b84c0a849f93d7b8c1c97564050c4671860321c4b80b8c82058c6160970fe33ebf7d42cb99938b5c2950b414cca93c777df7f18522fb7624e97cb6b9d119542b198df0908d7db8ecd9da232cb3c3d68cc252d45a720f7f130de5da8ce735f44"}, @NLBL_UNLABEL_A_SECCTX={0xe5, 0x7, "29ad1b75c556bb5a6809c123e49104605802319e9d3e3133be6a9336c7141dc43bd373082c3edc6a8f06cf748b5263661b9023b71f82e8356557edc658e99dc65a74bcc07f8b8cd6d3d555238f4ce832fb687981480e9c3004a94d5a963f5a72b028a05227b40eded67ba6829ac14aba2c23a99c58938c1ffe6df78efbcd48e343ac83b5a51f9eb55f9991060a5ec173b8047605a7f26b7336648e91a75113876aa4e8bc57ccf6cc31817e3ffe3b7cbd5cc6852212805a73627ea3dcaf3b05752d7f42f9fc2212db00d36a19e004255ddac2ed80b032af28b76f9dde9365406299"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
ioctl$auto(r7, 0x40104d02, 0x7)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000014001f000000000040000000000000000000a24f9a9713529b6a280646568800"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x6, 0x0)
epoll_create$auto(0x4)
epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
capset$auto(0x0, 0xfffffffffffffffe)
epoll_ctl$auto(0x5, 0x3, r0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='j\x00%'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
syz_clone(0x40100100, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100))
mprotect$auto(0x0, 0x8000000000000001, 0x6)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000)
sysfs$auto(0x2, 0x9, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x1, 0x0)
openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/uprobe_profile\x00', 0x200082, 0x0)
executing program 5:
unshare$auto(0x40000080)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
read$auto_dev_fops_plock(r0, &(0x7f0000000240)=""/192, 0xc0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x6})
getsockopt$auto(0xffffffffffffffff, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r1=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r1, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r5=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r3, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x4c, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_BSSID={0x36, 0xf5, "af08860a5c815018c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce49244259f4098b7805b616c75a7"}]}, 0x4c}}, 0x4000000)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000)
r1 = pipe2$auto(&(0x7f0000000040)=<r2=>r0, 0xffffffff)
r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
readv$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x5}, 0x1)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5}]}, 0x2c}}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x71d)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.3/d3cold_allowed\x00', 0x0, 0x0)
read$auto(0x3, 0x0, 0x80)
r6 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0)
write$auto(r6, 0x0, 0xfd)
r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto(r7, 0x8038550a, 0x1)
setsockopt$auto(0xffffffffffffffff, 0xfffffffd, 0x14, 0x0, 0x4)
pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffe01)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x1)
ppoll$auto(&(0x7f0000000200)={r2, 0x8000, 0x6}, 0x8, &(0x7f0000000280)={0x9}, &(0x7f0000000340)={0xfff}, 0x8)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
executing program 4:
unshare$auto(0x40000080)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
read$auto_dev_fops_plock(r0, &(0x7f0000000240)=""/192, 0xc0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x6})
getsockopt$auto(0xffffffffffffffff, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r2, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r4, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 27, 15, 30, 19, 15, 15, 13, 30, 30, 16, 30, 30, 30]
detailed listing:
executing program 1:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socketpair$auto(0x1e, 0x0, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x800, 0x5, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
r0 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r0, 0x0, 0x6, 0x0, 0x0)
modify_ldt$auto(0x2, 0x0, 0x80)
socket(0xa, 0x5, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/group\x00', 0x20c800, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x4}, 0x7, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffb8, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(0x3, 0x0, 0xffd8)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2f212abd780000002900f500af08860a5c815035c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce4000000000000000000"], 0x40}}, 0x4000000)
pipe2$auto(&(0x7f0000000040)=r0, 0xffffffff)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)="4a67d2", 0x14}, 0x6, &(0x7f0000000180), 0x5, 0x1001}, 0x5}, 0x2, 0x100)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r3 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0xfffffffffffffffd, 0x0, 0x10000000000e0, 0xfffffffffffffffe, 0x401, 0x100000000008000)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xffe0}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x71d)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0x2}, 0x52)
shutdown$auto(0x200000003, 0x2)
socket(0x2, 0x3, 0x1)
socket(0x2a, 0x2, 0x0)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/fail_io_timeout/space\x00', 0x400040, 0x0)
syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000180), r3)
close_range$auto(0x2, 0x8, 0x0)
executing program 1:
openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/uid_map\x00', 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x8, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000000)="2ff0a2bfbf6af25fbd9f64b5", 0x10, &(0x7f00000000c0)={0x0, 0x1a001}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
shutdown$auto(0x200000003, 0x2)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x401, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
executing program 1:
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
sysfs$auto(0x2, 0x4f, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x4e, 0x1d, 0xc, 0x6, 0x5f02, 0x82, 0x9, 0x877, 0x6}, 0x0)
socket(0x1, 0x2, 0x4)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55)
recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x1008, 0x0, 0x0, 0x0, 0x2, 0x100}, 0x803}, 0x908, 0x6, 0x0)
r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd11/hctx0/tags_bitmap\x00', 0x8080, 0x0)
pread64$auto(r1, 0x0, 0x800, 0x4)
statmount$auto(0x0, &(0x7f0000000380)={0x6, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], "90c510ff7b12f5e8969f78aed83645fe3ad144a1f58f8d6cad229bb8f065937e043b7631ed28549752472aeeab56855b0baaaee21bcf89f9c839d5eda84b966dbc987c40decc0be8fb0fa47a64f99d08901104a891490669028665d809d9dfd0fb0054b2b8b7cd5b0c6d510e46a2c10f29ea879fbe3f2470f9502b03f7c5ff00a1825a22b29b79e9355e6d48d7aa2c7ff1c5ae4327f7cd3277c0024977ae6304da"}, 0x1fe, 0x81)
mprotect$auto(0xffff, 0x8000000000000001, 0x400)
socket(0x10, 0x2, 0x0)
mlockall$auto(0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2)
r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto(r2, 0xfffffff7, 0x10000008)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
r3 = socket(0x1d, 0x2, 0x7)
getsockopt$auto(r3, 0x6b, 0x3, 0xfffffffffffffffe, 0x0)
read$auto(0x3, 0x0, 0x9)
executing program 1:
socket(0x11, 0x800, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async)
socket(0xa, 0x2, 0x88) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x801, 0x84) (async)
syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0xfffffffc, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=r0, 0x1, @old_prog_fd=r0}, 0x7) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
ioctl$auto(r1, 0xc018620b, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/power/wakeup_expire_count\x00', 0x2000, 0x0) (async)
r2 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bdi/43:192/stats\x00', 0x700, 0x0)
pread64$auto(r2, &(0x7f0000000080)='(![', 0x80, 0x2)
executing program 1:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
brk$auto(0x7) (fail_nth: 1)
executing program 32:
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
brk$auto(0x7) (fail_nth: 1)
executing program 3:
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
ioctl$auto(r0, 0xc0046209, 0x9)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x2, 0x5, 0x7181, 0xc54, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x4000080000001, 0xb4, 0x3, 0x7, 0x10007, 0x80, 0x2a2, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x1, 0x2, 0x800000000, 0x2, 0x0, 0x2000, 0x0, 0x0, 0x70624ce7, 0x1, 0xfffffffffffffffd, 0x4, 0x6, 0x0, 0x6, 0x100000001, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x1, 0xfffffffffffffe00, 0x0, 0x0, 0x9, 0x400000000005b8, 0xffff, 0x0, 0x7429, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x8, 0x3, 0xfffffffffffffffc, 0x9, 0x1, 0x7, 0xc567]}, 0x1fe, 0xd)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0))
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0)
socket(0x18, 0x5, 0x2)
bind$auto(0x3, &(0x7f0000000000), 0x6b)
close_range$auto(0x2, 0x8, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8000)
executing program 3:
r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x331200, 0x0)
sendmmsg$auto(r0, &(0x7f0000002180)={{&(0x7f0000000040)="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", 0x3, &(0x7f0000001140)={&(0x7f0000001040)="c91ec32815e174da4b57c0bef625d012d8699795e2096ddf390d7181e1f2867b574d194d925238722d1412ac8b82d1ba5f157a846bd6233799b54a44857ad71261d3ea78358f6a51a89a17af1175920309857993f88cdab76398c25e1d4745be0c9e80e4bb56e6c8fde5a4f99632e8a2ac5c5ede9c0e5067d31d5607f18319348dd206e911810e524c411b0b2a6ab4680d8eb2041fc845842166841e8d125cc8b451ff6a123e9fd75c877910ecf335767a724628fa8eed8c44764df02f2026565abce6e2a6159ed133c06fb30d0fa994df833dce7247afb18c8e594433005a55433c4c", 0x5d}, 0x6, &(0x7f0000001180)="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", 0x3, 0xffffffff}, 0xe}, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$auto_fops_atomic_t_ro_(0xffffffffffffffff, &(0x7f00000021c0)="34ded20042823a4855597c746ca6cf60254065eec561b0ec3bf71bdf85eaaa69042f1fc9ef6288e3d3f3b256a8b1b0ac9b00fb271e53", 0x36)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002240), r1)
r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000002280)='/dev/mixer\x00', 0x88440, 0x0)
msgctl$auto(0x10001, 0x10001, &(0x7f0000002340)={{0x5, <r4=>0x0, 0xffffffffffffffff, 0x9, 0x400, 0x0, 0x7}, &(0x7f00000022c0), &(0x7f0000002300)=0x6, 0x5, 0x5, 0x9, 0x5200, 0xc, 0x101, 0x0, 0xfffc, @raw=0x3, @raw=0x65f})
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000035c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003580)={&(0x7f00000023c0)={0x11a0, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x852, 0x75, 0x0, 0x1, [@nested={0xc7, 0xcc, 0x0, 0x1, [@generic="cfcadcca6c3138113a5b2ea3dd1e361a480f644a052ff8d4e29c62414a9c5cdd25dd7d8dbedcef07beb7ae9f36f840487aadf8b257b4cfedceed8545ad8757f494e02cfc694bf5c3ed693ee3e2038cfd67fbe6663c6289c09cdf85584f9310a4df891e00f92453544c57885563a1f4", @generic="ad804651fb6021637ac91dac5e1fa3d587785d0a13c85279", @generic="62c994f9c74bfa6f276a05db817991e0a03161938031448730aa1b84ad7dadd2984bcda512902a690db73b00981089f2127606b3", @typed={0x8, 0x145, 0x0, 0x0, @fd=r3}]}, @nested={0x112, 0x3d, 0x0, 0x1, [@nested={0x4, 0x77}, @nested={0x4, 0xa0}, @generic="3283f070fdcdb976cc646ca916932ea9725068be828b2d733cc498d9fe9b9e76b3e1b8a56bbd9d193df4f9bca6aef0d7c94e4ca3a45fb4923f5ca1611655d64d6033bdce750be1a3893fd5e4cce451ce8fa1e067c0fb8573db009704c20da314c47b52db444098bb787163a9b5f013f48a85ebd1d2", @typed={0x8, 0xb0, 0x0, 0x0, @uid=r4}, @generic="455c466a3b63f07237e02f9f4bc5bbc563efa3f6815e4640b3aa75329c9c4e9672614befc6a17b51639db713ba0417dc644a29157fa546590fbec98f22e139d21a33a9287ed659bbe0a8990b675ae2a1b0b77d4e1195e7bc30fd9a98e23d19b4c49a0487a90287e8d8b044b1c52b7d48be9df9460da900f1ea59cf68021c87c337281148ece8543c04"]}, @nested={0xf1, 0xf1, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @ipv4=@loopback}, @generic="26425dbf", @nested={0x4, 0x117}, @generic="e2bec6cc088dce4b2bf387caa61cd0559513455ca7bac93cc2cd87bda50140e40947248bc29b5dbcf15ead54fbf83c5bd36803675d747f5e67154e200cdcc3d0e2e1d99348533cdbdd5ce7e4c11e408786090b3fc955b90d8add6dcf5c4ed9f72573440920ccc1a7ca90eee3ffca8a5e9267c055ad562fe1a264558805998db6f954602393adc4bbb1a3e4e2d844bc3b83c49cc6318b5da6b6fc8b38263db79139d047c2c63197b3f05960375987c76aada0fa685159097e206eb197b65374d750", @nested={0x4, 0xd}, @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x6}, @typed={0xc, 0x12c, 0x0, 0x0, @u64=0x401}]}, @nested={0x8, 0x128, 0x0, 0x1, [@nested={0x4, 0x3e}]}, @nested={0x1c4, 0x65, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xb2}, @generic="a756b612997fd00a5b506f2354fa2a4cd7252abf418f153b28dff978adf0420e3f32d7da53a062c0d9243b20626a740da5f5231a7d66c2b122b44b9538d8d553146ba76b3c578556c6a42b17ff550d6a05e2c3", @generic="921a75e8ed5e471584b553067424e8926ad79324b3b79724e3c80315a203fd66c69b16b0ef726870938781f6faa2944fe195a0c77b1422d39705a0ef7cdf6c5d783831a5d87508aaeed3f715cd8c0aad1b3a2bdd6c9f741ee66e3fee74b0661c4d96927f924a22b33e9e1b5e33386fe2b15789827e6fb0eeaef4494318978315397b64ba8f9582d8b5d5ea8a240bcb98", @nested={0x4, 0x5a}, @generic="1d955f32d7ab8824eb0f17d45a51ed901411dae1617c0c0ea8b56f1050ff79a62684f74cb9109ed03cc9b4ba1272b4a574587065eac1b83f7af8cfdd8a5dcb611d477e912fba4f66bf122ed7e2b7f1a23a0cc3f207be92b9c49a70b0d15c051991537e922277941a66b281e9634ad805519d6fde46cace38da5ed7f12fe4d10bcd5388171aabbcc2d7ed3881109f8070ccc314750ed563b672915f4929c08a91774eac20ff59e2d57880ee358291e035f46311c5e89f2dd62b3e9b98b2c77071ec", @typed={0x9, 0x136, 0x0, 0x0, @str='(!\x8b#\x00'}]}, @generic="3c381ff32f1e6a183f08fdc76386481acb8df03c0a25c851b8ee3e2c6bbda7607ddefab87999c46f2d227d6943313681565811d460535e6724cc9a544ce68d53b6d7275377d3d8c5d744c30ccf8c091e0357ae30f7378d7aaa0b1a29e4c402994b358f0cfd7fbb46debcd51d393274d8fce225e77021353a701c4d3c06008a8fde15b8a86a185c5e1742c766e3f685e99bafce0145cc8e45b389a714228c671b8cc64ed7be78", @generic, @nested={0x6f, 0xc0, 0x0, 0x1, [@generic="3b0d2736e4922ea42b1ce6327ee5c9c0a30e3b8cc5a6caf094fde216cd15504c165837e2e386d1f838c371c80fd8f9b347e6435ae191a20dd7b003dbc41985ab1df8551e0353876de9a2d7013a593b3d9621d3", @nested={0x4, 0x1d}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@local}]}, @generic="b213d0b625af040bb9756bc29ba8bc6657eeb8abde6c11f219a94d8418e9d8a31f82079d063f2acd8cbbc93eab3f5aa6c228c187b92087dba352a1429a68113dc5790f425094963f35af5d5d372205990ce0a6c16aca431385fa5009382ebad170940c455244779f2a97149c69bf7735b479c111cd2793c7e0891c09e1e868df9f160958f96d9b19c9c801c08bf2b0108ffdf2b64ac62768956a55b8ec1f5c67a2a1cd3a65bc74e596ce57f2f570ec87535dd2d6fd767727f6ae8e36946037c8e031bfe964cde91b", @nested={0x1d3, 0x5d, 0x0, 0x1, [@generic="d3c186dee37d5764db343068e0cf4257846427ee596f9a15b06711a04d946584b62426bb035a2a265ddc597cdccb72f05361", @generic="c447d219e5d1f5893e0e52be62cc7c2a62f122920f1c979329071ea952b6635448900f660e9106b067810d3b0e795a24620676cb328ac42d40008fb7e7eb62ec6d6dd08aa51c638ecbc7318ec001fcdc10da3b31da7f33d150d3e3e8338645bc7ca76249031a24cffc3111ed98c385b7eacb739113ef088d3e985590346354e9a820618f1860162d91b36314977fdecb624cf51bffae8f4b44d07320e3619b0943519a1207cc88d8dc3e56b2f87ae6205e3508ad1857a0afbbe918c4dd5b1d7b972ae563617d946f7672730be10ca83959a1d586c4de3b40faaa3e3c", @generic="4f510b84112e6f3e8f17b4d585298f43d48cee80de700a1fdcd95a0b4fa7b9239d19283f76a9f2b2b4bfaef9c24b9a4ccca4d420cccc2db838e420a0f4cb3a7c8006260aa83d2d15edb22c5ba6173b593b5682e94aa3a4b3dad5d47c726b805d369e9ee276653adcb72f5fe087318ebb46adc06a0252582f3345f076359a7976689eab83f898326deb7d2f40f5da4d2f924094913aec229d2b6c02713cbb257f4ff5960ace37d617c915f8b9dd6cd7b5f52c438873ccdeda256fe147f9", @nested={0x4, 0x13b}]}]}, @NL80211_ATTR_EMA_RNR_ELEMS={0x170, 0x145, 0x0, 0x1, [@nested={0x16c, 0xfc, 0x0, 0x1, [@generic="2e82cd512211fabdc8f580e2cdd161c18811ac8bbde53a8579124e420193", @generic="e00f25aad5a9f9e594859654dc2ef7457166a5323513073e2ae079d1110bc97c70496bbf5e9bc7815e6d66c368f1b2d6d082769d67b2d4ad88773e8a24729d247be2de1dd961dbdcc13f8f4ead7ada16f3617aa91dfad76a013ed8a50de53009b0bfcd0595c8d56b32505b44f2473f59", @nested={0x4, 0xda}, @generic="a82a20b242108c6b808e7fd950d448e16e4297afd90217", @generic="c13d921530c596f39bd892ab3ea178234ffa9fccf3d305ad793e80b61549e1556b613d58fc0358caa5b0a0c8cfc32363fccd2e90306da5eda17008fb50a83f1664cb497ae7dddf09f096cf3c7925d89375c4836f08465ec630", @nested={0x4, 0x120}, @generic="10fa1719450fdfa78d5ae6082baf592e25502b84778f047538f6ef009333269f20fe6a6655c8403b7864a25032ad01aaed49202e69c451e0bcd1d02f77c4067323dbcb9badde9418ffdcb911eaf4d3fa9ae4112f5def86563202", @nested={0x4, 0x6}, @nested={0x4, 0xa4}]}]}, @NL80211_ATTR_PROBE_RESP={0x509, 0x91, "7b21cba14ba8315abcc49de09f3ba5b18296d75623e2fddc5c590f54af4ba67d8d81c58fe38b7a137f97aaff64697bbf2a1d77c34e41f0ce0479f7fb0c9a9e447fcea9d929eca900134be77f38e1c77835b433b7aa2ce12f831571e3cdff2086c063b29664d60a8272b847eb9a5c647be8d35a0e49e5711c6c0c656c24b0b1a50c33b360376cd7411027cf93d0ff92de87b47008b3f4861cc5d5d3d0e359d50a897f9e069825d844bf3f9ed265eab59fc25cacce9a209abe242c4ef3e4f733a90e97c81cccee808bd64c9d84c6501245956835acec77276bc3ce9e78ef0854ec8870c20ac5205507c52f4f179736f9dafafa86ed967ff9c2614c01ad303cf501bf22ffa00a4ffa99adaca1a315c3b167c36dd4a271ce1fcfc26f984b68177a30d5f434fbd206c01ab5be35eb15efdbf52b075bdc8244062430796e1500a34121cd104d80730d0ff564cd4f632d5df6e336c60e0263ca85d084cbacac7bf7b1a98fddde5369ec3c6e9a03a4f0bd1ed368682ea64a453dd921264b1209292c7194407ec6f5e7dc91afbee42fb567c47ca57912e12c9fb823ec8af17c3bf40d588ee2df7e15b853bc55e0e839d09e12e905772f6c3f76a02129edfe56029eaf659d7ca2659c65695d14e3fdc0c4b767673cf06c5df838e87f5766d311cedfcfc0fd9fa5624cc532860712512984811ab8ad1badc1ee8f3cb0597dfd253f182a6a1f791af9f054eb4739fed9b0a3fe62e9f7acac6c1fcf73144b796a7d72d28d88b7dbe7489f3e1facb3e8c14b525c530c4d2b70d9452b2ff54671e8c1e54e9b0da783d32c743013703f1da07eca9130515856f1aa53104d5c20cf8684a5aed1b87104026859ab9525429422ab4ce721a934406734013667c999c8aa57533c649b60e92dbd89d6c05058b9d04a7672a4ec9cb2b8411437d7ab9629b6df3b500608fc7422eb0a1949b836387271b51dbc868d43159629429a833f6a51cb07cfbe98a9692ac5d016812393e134e9f05e032a4d70d6b1af82d686ca20496ae574680c7470a3cd95650f29907e3566e2cd71ae47b210ae15404b4f4bdde6220ddd5724412cb9b4591468816f991bcf8b2acdc92c7c25e99311eeaa6b664dcc949b320cf88e74c9390e4fffea9717ef44c2e5d21d1f10943517668a6f82863a3a5bb03f95bded7b9e668036ba76c000581c487507a20ac1c3f329d6d18b1e4eaf078732117a5692b5a20ae70acd71299a685f387cdfd8a5da27cb64e7b12d6d136361517f2974620608f7817f57fd966d421859c768450a40cedce581d128e64b19b4c6baac0039b52146cd0f64781a0d9846e93fc282254fd59f193d01e51eedadcf65166b216900157f091d430f428925a32600d80f740b0df0a349def33d131dd0976bcc36cc988b138645af4fffd1aaf10e868651d06c4d88fcb481fb715bf025ff902630266769fca02f3416b6c01fc75d9c7099f92bf935916e6ef01d6e3a8f6a46cfe2c24efd6f028d69271184fc026efd64ec6c01228da665bda9e5ce1383e372c3825c59679e6d9cc0ac0abb55135e5a437edc0bdb16dab4b89c0018828667ee229bfb15af3a63d4ab3cc24c12f17edebee6766128b65660744be3fc28f01713642778e3f9d37f4ca9fd7fca6670ae7cef02ba8e35fd3ef26719e3e4084fc0dd9a95ba3a543e1c022150f3777b6b0d1dab575349037e679c95e81dc8df51b8ed422bdcd0e4fbe2ae5fac31050e5704a67d9f239f67de18d1c89b627fedc104102e96994acc5e485c1a296ab0b70a6c4a230e4a037036a9affb8f8b4fd7b2ed82a8715ceab6"}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_CSA_IES={0x1b8, 0xb9, 0x0, 0x1, [@nested={0xfe, 0x5, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @fd=r0}, @typed={0x3e, 0xb3, 0x0, 0x0, @binary="23d7d30c85ed0976dea03282d1114b1e259b238bb33fc1ca958272979ca5b6ea4b83e2bae8137a558b14f7d8f1735c8673cf88272ae64cb3e414"}, @generic="c92277d15e7f1ee90d53872084b028a1ed77638fa6e1fa0e3724f85d8f49834301d2e338da7ba6056c6a6ba0210e6cb8b4b36871ff2d7d5762e75b58ad632a10a8217000faffae7c87733e0cf553ea88340ebf83862818ce97c6e705039c49e394dbcdc0956660d62d1ae0a62b96e95d70ce5e08a49846886c5638d76727b1df1a84007484647dc4194a5dc46c4a3d460d27159d2496c1f2b004cdc0328ad044c01a44df5e5f", @typed={0x5, 0xd2, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x107}]}, @generic="09d0a911e8191d57abc9e972d6a5b676fb8ffd2f719fd05a0d009f210d7e7cd83f52f1c6a8d9009846e61e623aa2d9b07016c5240e23d22605caf463edf661b9519282c6d75b2c7c06e70ff0", @nested={0x66, 0xf4, 0x0, 0x1, [@generic="975d32a329c46dd2b98052c52db72003aedd9f8dedd90048eb47767b38e9207050b381f485946c79fde27008e8c6ffbce5e4bd12eb7e8d3a6ee99f35aca94bfd7ff1bbab77402c33bf3ecbfed71b968d915a97270515dcc62fd56edb29d5", @typed={0x4, 0x82}]}]}, @NL80211_ATTR_REG_ALPHA2={0xf3, 0x21, "729a70709da6c7ebb1dadcf645de7c764faf34dbe09ea52d6c7ea46d4c4aeeb563230abf88ae254e00ddd21a7d4476042fb6e7df70850ed649ac82d1d1902209b853f4b75cec8954015bc578fe267d69647d376e8b5b55d718432692d29c96f28c82f8af2011dcedd452681e80c121922136ddfb8d1ed0efef796d4c446968c6962caf02571b80b0b62abee3fdb9e8d6d7ccbc817c91998e307d2a8223107164f45aef45511cf77c1702a3e668c6b2074264153fc338ead8be5ceff878dd6740387981862cef74618f902133b6423c31d58be0c28f6e505e4d97c3610e989ca68677502b1dcd15821a1d6971ca3512"}]}, 0x11a0}, 0x1, 0x0, 0x0, 0x40c0}, 0x4)
statmount$auto(&(0x7f0000003600)={0xc39, @inferred=r1, 0x7, 0xfffffffffffffffc, 0x4}, &(0x7f0000003640)={0xffff7fff, 0x8, 0x24b, 0xffff8001, 0x401, 0x1ff, 0x4, 0x17, 0x6, 0x7, 0x3, 0x8, 0xffffffffffffd9aa, 0x8b2, 0xffff, 0xe, 0x7, 0x5, 0x1, 0x8000000000, 0x8, 0x4e, 0xffff6db9, 0x3, 0x6a, 0x6, [0x0, 0x9, 0x8, 0x800, 0x3, 0x10001, 0x7, 0x4, 0x9, 0x200, 0x8, 0x5, 0xd, 0x7, 0xf3e, 0xd, 0xf51, 0x7, 0x1000, 0x3ff, 0x4, 0x29, 0xd, 0xffffffff, 0x5, 0x3, 0x3, 0x7ff, 0x4, 0x1, 0x1dc8, 0x6, 0x5, 0x0, 0xfffffffffffffffd, 0x800, 0x299f, 0x3, 0x0, 0x3, 0x7, 0x1, 0x3ff, 0x4a06, 0x6, 0xfff], "061d94619c438889762304ebb56270d497917633af9640a9fb3f8a90cb54e59faad49759fc04164133854e6811ff054557a12de582bd9674620821a507837f0e185a7bf609a50232e45fb225162e52300516b6bb039e83ed765e13cf4604340dc35f6650e39231c69223edc3574b532117306f7e7c4be4dc63c4362f77a788fd6bae34820d69f7669f118c3ac0d17472f3cccabf11a4c481fc60d773ed0f5cea1b24f14972848f0ad588bfa57aa0f60fe3c163efec2cf8db6b3835"}, 0x8000000000000001, 0x4)
writev$auto(r0, &(0x7f0000003940)={&(0x7f0000003900)="ddf463accf48ddc2fc53fe31758c66af73ee7573d123fca28a6971fa900e4ddb53b78a5300554a", 0x7f}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = open(&(0x7f0000003980)='./file0\x00', 0x40, 0x172)
r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000039c0)='/proc/thread-self/pagemap\x00', 0x90001, 0x0)
mmap$auto(0x57db, 0x8, 0x15, 0x10011, r7, 0x1)
read$auto(r6, &(0x7f0000003a00)='/dev/mixer\x00', 0x4c)
sysfs$auto(0x8, 0x7, 0x6a)
r8 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000003a40), 0x100, 0x0)
io_uring_enter$auto(r8, 0x1, 0x7, 0x3, &(0x7f0000003a80)="23f1e222a67cc903f53f3420b40d07f244b7012dda3a3cf0127fbe50e546e8bc28a8d91b5b82098ea9b00558b87a6a015aca413d730d95f298336368a5d708e8569b1694ae0434469be6b23acb732ddac6ae88cc1200178dfc64cf6ec32582bb0255a7e7e2d33b80499ca857e44d3bb65a849fd6b616a10cda8ad2d4c05685330a9747444631c23fff24f4d635892ee19a8e8a6e97ae9aa8004be96a1a6fa6ee524be5b48ef8ca20b44ffb3d91966a8ec564bc9d7ed45e16c1d9dd591251d25d5c937ac13c722378a3e53422c68390ea7e331d46b9142d458c9e19c4374b1b", 0x5)
r9 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003b80), 0x402, 0x0)
write$auto_vhost_vsock_fops_vsock(r9, &(0x7f0000003bc0)="2fdaee671b8c05fe0ae199299a6d1465bb116a3dea10e3c274d0980490994afa7441e3147358d6d7e9c8c0fe28ff475dd3e06715b66739748db67f20b93805503902c467aeec0fc3c2a8dd8499d0b369a8d55b71a2c8fafa60", 0x59)
write$auto_evm_xattr_ops_evm_secfs(r6, &(0x7f0000003c40)="93a29bc0bc079d5ade51848872a82f4d82531a0919ca73d8c4cbb8009c0048446ec8ab3e6f96ec0a6795e8347a96b7678f22092e153e309a803ce4fc1d", 0x3d)
sysfs$auto(0x0, 0x0, 0x81)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r10, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4000840)
write$auto_mtd_fops_mtdchar(r6, &(0x7f0000003d80)="1c316295ad2b200b87ec7f7f4a734cc5d9cd6f88ebc5c9", 0x17)
r11 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000003e00), r1)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000003f00)={&(0x7f0000003dc0), 0xc, &(0x7f0000003ec0)={&(0x7f0000003e40)={0x58, r11, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4eb}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xef}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c074}, 0x80)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000005000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004fc0)={&(0x7f0000003f80)={0x101c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0x1004, 0xbb, "77b4eb488200fafe02cb239ebb0266845c30bc0b89ba09c6395ea1925278e733bf36e1090e552125f5fd622e9e690cf42ace80ed9ec97858311068e343e819ad16adbee66805ff9f12b42b939737f5a5390cf3c035872fadb40aa4f45dcc5ca9ae0c1eb5b88017173817f6ddd22f0fa75555daa17a25a738cac9be95ae0302d290f8ed22c91e28ea633c162d513f4bcfb121e166cb847545dd2570fe84743f8dc05458e00c0e09737d0d6f3fced2c3c6bb23a5ac59f500a3e0491753e4470c8d329b51e9c2557400433a73688dff785b45b025d1208d79196457200856e2c036d7d55c3ea93da03e0f07d6875e463225a8aaf5531163b5c644dd8e0bbdeca83486f41b8adc7190b4942a6c7456660c40decf7f668a8006bb2fda7e24607fbc3c76cdc56e10bff1f7aed5a9acd6d813a88269a1feb19f0b2dcf7225bd63d5c0df6985d6d4c63e8bd88c4fd893abf74d7cc601d32b66a5cb589f38cc48c4f9cda3d159187aadb407792001d07ec1cd54476f779f00e6954dc7067bddbf604cc810408d6ebbc688c7723629f74d7f802a4875ea5cf5178796b47b89bfe867e50e19d86173a621a8a07c59383842e6ed3e37381d36010e5b8722415b98417c95c003ebf56457c7db41a9a83df2c91db4139dcd6855ac5004db2c7da0d84a0b8654279ae381afe7ced98fadbaa7ea04474c252a4194200a891813ed92ce0bf046afd143e25bbb0531f1e4d47ef7624085538a85d3b728ba6eec1eea8d217fe24a16d4323559557813c254ad22f32f4b161aac9c9720f3afa164c094321af50304c8c8da78015f683de44f31440f0268934aa849486fa38e5b7bcb0c1d8463975003c531b249562b60a4cd24c3d6874a2a7e29d38d64a235b77b40d7c29322f7a900147e5081ad5608bb43c569a97b296d40f2dec17b0d843fe1f9829e0c3b36982e41f534d1c4fb1627a969a71c561f5d8b4726cc22a82e50555487fe2c960f4297ec4356d2ee812573c03938396a718c3c1559c697de7c6f130b7267d3a0cc2087a496bb8a1fca79ef3f6893ce2a8a565506497b4a4c335d13b6b51eb92c5e44d50d798321a12e14fc95205dd29cdeb30d6af4e98fb4b106d4d12debd2dba94c138525d7bc797e2e6f2f585df5ae7f5aa65b8558077ae3f22c27abce2b4a110b4df281f9d6ca3150df74c86ab9783c362a7072cfcb12c21d04282cc050ccee10c7d09d65d34c141e0f10f57992dbc9a491e194b118d4d7321cd3a7a2e837060667f5f699fc756226ae2916816e69fb0a51837e204f324c61358bb5eb260d51e94daa78b496414c0f176d485a32b7328315f442c960386ac66ec7e135f0e050ec005ca13e46cf5d36c97655577dee63648a0664e257b983cfed793b17f89ab7399c7ca3c8815e6744e149356ab55221f768fd8ff2b0a1a7612d6bc8287b350f98702e67bd226bf5d4d96defed619f199d7c0e2ab0842ffdb6363ef1b99f4e319eb7f9605840568ff2af7d0f1fb5f090bdeae0ed7b830d7e5a5aecd031a80135d382403f0707ee48bc81dae253b830915e3178331619e0534963cd069676aabfec076d53cd8bd144b401d9a623229052419b4da4548e8dba003df99d17f87525df79c316ee0791e79a86c9f69bd2334d21b3048c178cab16c6e7435c3177726dc3d22cfc7f80b77030b167cfc4ed8fa09b9296f2e757249dc7db248bcdbdca08354846a78c208b980e93928ab8bc3a0bce15d4e906e07c87d877a138e97a759764790856e690aec13e12b2e2e5922107f82c7b3e1ed6069d483d63e841a5ebea4f385e3261b7abb8ce0a9612e47e9b929ae096fa8a6651bb4a28606b1b8470e1b089bf64fd9e0654707670762b2410db6db410bff837bdc6a3fe22e4e2c081101861819c779a4e866d99c37f9e5b32578bdaccbc89543b4c5c7336f89b7f1674676babfb54b748f450df832bd833555ecc57fb56e3823dd718852fc579ffccdd65c6c02461ce0cbb2a30965793c677cfcc3bfe1c1e69ea8313c1329821e5e43f9b1335fe62e2befcf63aafae16a9b4a8983445fcc79142d57558dd271f90db9f686c30fcc5336c43acd7d19d1ea8876e9916ddf7bf60f7bdb5e23b3573efc34173c30c6de67b42a336028e23a752757fe9e7f729a618dc0ff7c9c79d09f2e40b54a2a430d4602216b4b686be1bf9d76fff447a28929922712796eccc02c5ce8893f682d5415ac38885c07eb8e90ae8d56bb6eea2bcb721d541eab2876ec5db4a77ea57d941579e01a7ed338c9a34e2797915f1734c1941b0b4d862ebfbd46bcac7b94189dff5490f25c96324593a98b3f075965b8084b4ff2b8ed03cca2764f415c5b854963912308796954f7a699089c846b43ba86e4c66151601c8ff94fb4b520c7a06230db2a705eda485505177427013464b184335075fc4414524c069a0af0587128899d6f7d74eff014ab0e21c3bb611858a53ee6d80a575e89693ce67e75d2dcbfe514792447fd8d607a73de4f4774f24fa9292098a795ebf9b19c0395215e476a95d890dc15e998b8a99937f9deb958b88f8fdeaf1d942537ce5010db746eb07481d323004ba21a5883dd09d9e67e088b5bde19cff27f967335ea14c4e740dd4336a7960e7f4cd971a8fccd476f32876af47f4e73f0ad67532851f32b1d748522bf7d210bb4aeb476a966705ab5eb4cbf030b1933886357ea9ca1c493db0da93f986d925759b05fc61db02d2a82685b08c54ffb52faa7b770ffc79a8eb49e32cd6f7f4ba00d996a02331eb86251ec9045a5f590e1b3ce63f0567c6deae1c0e9b02603885e6e3ef1a79791e36f7ab5c6a95c571ee7d06147901168e48e3fbdb7253960f189d17fd08ae0e639aa2e6794b34e9d45b547717f9bcebe6d8f82a75b206b88e8843392774694fc1586d9712ab08ec32fe669e86b91c6539fceccee75bbff43ba9c2c27760fc03539b23953eab6740dbe7123fef94944b7e4460abd5c704f860179f8d4aa0baa9de8b34469db3ed0f7a702aaf91d689fe9b21771a23fcd6d15ea99ec6c9f16f0af41e762c00daeb4d68f9a7a817ee0c381ffafc2d33f525b4b83654b73e1e8991a087ff2c53964b1b5c1b0f282373c13d257abd00ffc6082a55a7a2633715abf175f2bedcbd2f4618a7a89262c492748efcb34067a8a8f9a36f7ed77e60407a9d1ab75445778f20b7606314b720b941de6d34fbaffff3a4a7f5f98512558ee2919f568f973783e0a0fc252f9edffc9caa5ab5a61dec9d58e791d949f8fd684b332e57ec3f758df63cc0ed4c847f4c35d2ef705ef4aa9a45dee3094d65a0d069ff8274b2fd5371aead61bc4f37ab0ef4ca6b3bf951603dfcafd22066ea16f63bd23073bbb0cfcf599601eb90fd4ce5b97be230a118bd4611761c3bcec43b1c6f1d7e380c0da6abf5d4bb4f82e01a45d67117ac65623348f81d7e6db3c84d9f2bddd6bd61ddb6e9b20750b85d4e1e727d2bddeefc0d008601c47c440fdcbf3d038e119c6de676ae0efc1295b278d8699bca2427ca062ee826182863f37ea92e29db94a812f43399d9aa37a7050cfd090a96e758682ed97115f9dcd6ff19b3819544b0165b81608c47a45d24a30089658b5c3a8b9f72c40e7bd45afcfec63e032e883180d4702246fcb1f5ac152f3802cf1112dc73fbdb78ee2ec1a6d13c9ef8c55408e71cba5f405fb7cd601061dfa1e6f74866708d6fa708bdc6ffd44d405a1c57640e21739c9526d10a27977de4d2e121ab299d3163d588e71e4525b872b5357bd44fc8b3c4c633447582da547d5782a8196b07f46865a0317e7d12f94116492a0c3b41a30e9b89d40490ada25ce1ebaa21366836a4bae2131eef45a8eed91b5bb6123599c1ee967b34a6f3a1b3493c9eaf89b791e24d806ca5b15b7b6947738fe99a53cae119368f11cf0b0a6cb66748d691d546e9594d91e18c5e442b869baa1ee684bcc5248c7215ecfe238d74bebbbf6e165b4768b79d4bff87db163457004ff8675da20a26237ded5fc258b3922a3c71e87d181bea6c30cd2a7670b3a0eac96622ea8afb2f4f92d65ef1f6e0d7338804971cae03e755b0537266f0c132864ed8fea8114f4704e2f69eb449dc04770d0b2b0d10f57cb7ab541f94e52f060f79976813bf591148d56bc9a404a78825eb3244724e09a5164ec2e87a25e657051dcb685a66171302edceb4be0736e1b465068ca2e00b4a5cf46b7bc39897b41c1edde73706fe50e3feafed928ea855fd8c572af2e0d265b3b7036a2fbe2366bbd7bc965d3cd8213bbc289176c140b88b3c4efd8713d937b4fdc59858aa97943d05386e8c309c609d493eda7db6a9b178991af48543c7e808b725c9bd619103d0572d548d095565c932fd786045b1ff7b281aff9546c9224f86706b09f1818f27d24e661b16f1c6221336da27807a4a87423195fb5ca0f50c2592ef11728b25874ae485f8a8f5a845795453fbcc7b1e6d11ee4bc2b68c24a201e0bcddb7776536f8e27b4e540da77263c1845896b54118ecec92438bae87d3efa6a7689dcafb900c07eda3b2aec172765e24c81b0bde9f6b8d59d8026ed5d901c11bf518248d46c28679283806dc54838be860967ab95f45bc0e4a0d8ee56f2823676048c323294d540befb81316da359158e88740cc7f26dfb0ffc3dd09a0b9cf22d38c0a6ac5c67ef10c229dad3c45aa67f43a9642b6746e6f134612b07e8d8fe7c956d104688bceb4b573d9421dafabc77c069d30b3590fbe37da89c20a7a8e79e2a8b941e8167be5e1af7c59341f927bd7c058ca65b8a89450756383a7af727a06ae1b25686ec7ee5b1fe8120af823b57d863046e5f6613fcd605f93f345012f6a30237b6d65794bedccddafa18f60a314904aa2a1a8e16094693f79d73f8e37f40b379f0a7e0ed71c3fbafd1aa94d979e4974fd8494a3249ca79a0371c6e9c514894e922d7769356a284973b7cf9f7564d11d9c9b51ee94891eb5be88a9a320ce909c8a33f6aecfcea31fd6bbdbf2c86b08d0e80f5c91c759f95d2a659d1e0b7dcfde45e94b8f391717d6dff66e6e8d2a096ebfcfcb5221d2176cfaa2a7c16e008ceeb261945ba6751197f5ae2e7b217571accf91c0b6c19487d98cf9211ada85a06c59076ff06cfb0ffcc57e330c053a2261447e371303f8bbe73056f9b7ea256f5596cf9d2634c5ecd501cce689ef30af6094bf83624d312208f1c92fc1e1160e8a019e124aee4822c629c5f1bd61751c309fa387650f91b6ef2c3612fb6a9496207174f00efd768530618d0e1ab6b76e55bee23c140933bc34c622ac995f0a296ffc48681a9bcc9250e07dc61ae5918fa8bba41bc22bebf74dec74988c7d2ddc3754957ecd3ce897c52722492dfcb783d1b4762088f25b7c2bf3c561835b66350360f4174a357a08bad0a1c3c2e62789ad7eb076a4683c85ecb0e0b88963a64e97b48256457b59d8f4c17d2e9021047b464df81da3a6b404f6061ed295dc693894d51ce5cca579a89eb4c28b790361c56cec7fe720f030d8189c7e4d55e092448d260afc292025966923750161ac25bbb20b0a3e0d3a7bd79c548f5ccd534602b3c81f8d3717c10b6426a175f63ee7b43e3d5aadd181c9d2e4d0a3546aa00a2e5d18b61f6c46bf0d0f244cc88dd22aed6085291d855e72da08d810ff882064d294be2caa2a6f291ccf3fbf456216e63b6f54f3a9a7e7fc2b2544257ff68415b50b16211d66b0f8c8a6ee7cd53ca10d787ed9fc76de61a627119d67b0802108ee23dc3385f8a5311579469d13f921a4db3388f5983be6dd15"}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x101c}, 0x1, 0x0, 0x0, 0x4068098}, 0x40000)
rmdir$auto(&(0x7f0000005040)='./file0\x00')
sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000005180)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005140)={&(0x7f0000005100)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
executing program 3:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 3:
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) (async)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) (async)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", @inferred=<r1=>0xffffffffffffffff})
socket(0x1a, 0x1, 0x3)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
pipe2$auto(0x0, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
ioctl$auto_evdev_fops_evdev(r4, 0x80104592, 0x0)
poll$auto(&(0x7f0000000040)={r1, 0x8, 0x400}, 0x2, 0x10001) (async)
poll$auto(&(0x7f0000000040)={<r5=>r1, 0x8, 0x400}, 0x2, 0x10001)
write$auto_ftrace_set_event_pid_fops_trace_events(r5, &(0x7f0000000100)="56ecad51ba1cdb8125235a3ba4dc7a6163217a2c55685ff9fb089ce33e98409b1541b20645ad705c0e19a16bd4a22dee63b38a43245e869dd02def08788baddcf95e7a2e064c01d6be38fa6588f52dff086aaa3c5b1c8d7a05c8d3418ff9e9109dd87c954fd847832b9fb6", 0x6b)
executing program 3:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r2, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 3:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <13>
bisect: split chunk #0 of len 13 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30, 30, 16, 30, 30, 30]
detailed listing:
executing program 3:
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
ioctl$auto(r0, 0xc0046209, 0x9)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x2, 0x5, 0x7181, 0xc54, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x4000080000001, 0xb4, 0x3, 0x7, 0x10007, 0x80, 0x2a2, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x1, 0x2, 0x800000000, 0x2, 0x0, 0x2000, 0x0, 0x0, 0x70624ce7, 0x1, 0xfffffffffffffffd, 0x4, 0x6, 0x0, 0x6, 0x100000001, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x1, 0xfffffffffffffe00, 0x0, 0x0, 0x9, 0x400000000005b8, 0xffff, 0x0, 0x7429, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x8, 0x3, 0xfffffffffffffffc, 0x9, 0x1, 0x7, 0xc567]}, 0x1fe, 0xd)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0))
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0)
socket(0x18, 0x5, 0x2)
bind$auto(0x3, &(0x7f0000000000), 0x6b)
close_range$auto(0x2, 0x8, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8000)
executing program 3:
r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x331200, 0x0)
sendmmsg$auto(r0, &(0x7f0000002180)={{&(0x7f0000000040)="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", 0x3, &(0x7f0000001140)={&(0x7f0000001040)="c91ec32815e174da4b57c0bef625d012d8699795e2096ddf390d7181e1f2867b574d194d925238722d1412ac8b82d1ba5f157a846bd6233799b54a44857ad71261d3ea78358f6a51a89a17af1175920309857993f88cdab76398c25e1d4745be0c9e80e4bb56e6c8fde5a4f99632e8a2ac5c5ede9c0e5067d31d5607f18319348dd206e911810e524c411b0b2a6ab4680d8eb2041fc845842166841e8d125cc8b451ff6a123e9fd75c877910ecf335767a724628fa8eed8c44764df02f2026565abce6e2a6159ed133c06fb30d0fa994df833dce7247afb18c8e594433005a55433c4c", 0x5d}, 0x6, &(0x7f0000001180)="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", 0x3, 0xffffffff}, 0xe}, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$auto_fops_atomic_t_ro_(0xffffffffffffffff, &(0x7f00000021c0)="34ded20042823a4855597c746ca6cf60254065eec561b0ec3bf71bdf85eaaa69042f1fc9ef6288e3d3f3b256a8b1b0ac9b00fb271e53", 0x36)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002240), r1)
r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000002280)='/dev/mixer\x00', 0x88440, 0x0)
msgctl$auto(0x10001, 0x10001, &(0x7f0000002340)={{0x5, <r4=>0x0, 0xffffffffffffffff, 0x9, 0x400, 0x0, 0x7}, &(0x7f00000022c0), &(0x7f0000002300)=0x6, 0x5, 0x5, 0x9, 0x5200, 0xc, 0x101, 0x0, 0xfffc, @raw=0x3, @raw=0x65f})
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000035c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003580)={&(0x7f00000023c0)={0x11a0, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x852, 0x75, 0x0, 0x1, [@nested={0xc7, 0xcc, 0x0, 0x1, [@generic="cfcadcca6c3138113a5b2ea3dd1e361a480f644a052ff8d4e29c62414a9c5cdd25dd7d8dbedcef07beb7ae9f36f840487aadf8b257b4cfedceed8545ad8757f494e02cfc694bf5c3ed693ee3e2038cfd67fbe6663c6289c09cdf85584f9310a4df891e00f92453544c57885563a1f4", @generic="ad804651fb6021637ac91dac5e1fa3d587785d0a13c85279", @generic="62c994f9c74bfa6f276a05db817991e0a03161938031448730aa1b84ad7dadd2984bcda512902a690db73b00981089f2127606b3", @typed={0x8, 0x145, 0x0, 0x0, @fd=r3}]}, @nested={0x112, 0x3d, 0x0, 0x1, [@nested={0x4, 0x77}, @nested={0x4, 0xa0}, @generic="3283f070fdcdb976cc646ca916932ea9725068be828b2d733cc498d9fe9b9e76b3e1b8a56bbd9d193df4f9bca6aef0d7c94e4ca3a45fb4923f5ca1611655d64d6033bdce750be1a3893fd5e4cce451ce8fa1e067c0fb8573db009704c20da314c47b52db444098bb787163a9b5f013f48a85ebd1d2", @typed={0x8, 0xb0, 0x0, 0x0, @uid=r4}, @generic="455c466a3b63f07237e02f9f4bc5bbc563efa3f6815e4640b3aa75329c9c4e9672614befc6a17b51639db713ba0417dc644a29157fa546590fbec98f22e139d21a33a9287ed659bbe0a8990b675ae2a1b0b77d4e1195e7bc30fd9a98e23d19b4c49a0487a90287e8d8b044b1c52b7d48be9df9460da900f1ea59cf68021c87c337281148ece8543c04"]}, @nested={0xf1, 0xf1, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @ipv4=@loopback}, @generic="26425dbf", @nested={0x4, 0x117}, @generic="e2bec6cc088dce4b2bf387caa61cd0559513455ca7bac93cc2cd87bda50140e40947248bc29b5dbcf15ead54fbf83c5bd36803675d747f5e67154e200cdcc3d0e2e1d99348533cdbdd5ce7e4c11e408786090b3fc955b90d8add6dcf5c4ed9f72573440920ccc1a7ca90eee3ffca8a5e9267c055ad562fe1a264558805998db6f954602393adc4bbb1a3e4e2d844bc3b83c49cc6318b5da6b6fc8b38263db79139d047c2c63197b3f05960375987c76aada0fa685159097e206eb197b65374d750", @nested={0x4, 0xd}, @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x6}, @typed={0xc, 0x12c, 0x0, 0x0, @u64=0x401}]}, @nested={0x8, 0x128, 0x0, 0x1, [@nested={0x4, 0x3e}]}, @nested={0x1c4, 0x65, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xb2}, @generic="a756b612997fd00a5b506f2354fa2a4cd7252abf418f153b28dff978adf0420e3f32d7da53a062c0d9243b20626a740da5f5231a7d66c2b122b44b9538d8d553146ba76b3c578556c6a42b17ff550d6a05e2c3", @generic="921a75e8ed5e471584b553067424e8926ad79324b3b79724e3c80315a203fd66c69b16b0ef726870938781f6faa2944fe195a0c77b1422d39705a0ef7cdf6c5d783831a5d87508aaeed3f715cd8c0aad1b3a2bdd6c9f741ee66e3fee74b0661c4d96927f924a22b33e9e1b5e33386fe2b15789827e6fb0eeaef4494318978315397b64ba8f9582d8b5d5ea8a240bcb98", @nested={0x4, 0x5a}, @generic="1d955f32d7ab8824eb0f17d45a51ed901411dae1617c0c0ea8b56f1050ff79a62684f74cb9109ed03cc9b4ba1272b4a574587065eac1b83f7af8cfdd8a5dcb611d477e912fba4f66bf122ed7e2b7f1a23a0cc3f207be92b9c49a70b0d15c051991537e922277941a66b281e9634ad805519d6fde46cace38da5ed7f12fe4d10bcd5388171aabbcc2d7ed3881109f8070ccc314750ed563b672915f4929c08a91774eac20ff59e2d57880ee358291e035f46311c5e89f2dd62b3e9b98b2c77071ec", @typed={0x9, 0x136, 0x0, 0x0, @str='(!\x8b#\x00'}]}, @generic="3c381ff32f1e6a183f08fdc76386481acb8df03c0a25c851b8ee3e2c6bbda7607ddefab87999c46f2d227d6943313681565811d460535e6724cc9a544ce68d53b6d7275377d3d8c5d744c30ccf8c091e0357ae30f7378d7aaa0b1a29e4c402994b358f0cfd7fbb46debcd51d393274d8fce225e77021353a701c4d3c06008a8fde15b8a86a185c5e1742c766e3f685e99bafce0145cc8e45b389a714228c671b8cc64ed7be78", @generic, @nested={0x6f, 0xc0, 0x0, 0x1, [@generic="3b0d2736e4922ea42b1ce6327ee5c9c0a30e3b8cc5a6caf094fde216cd15504c165837e2e386d1f838c371c80fd8f9b347e6435ae191a20dd7b003dbc41985ab1df8551e0353876de9a2d7013a593b3d9621d3", @nested={0x4, 0x1d}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@local}]}, @generic="b213d0b625af040bb9756bc29ba8bc6657eeb8abde6c11f219a94d8418e9d8a31f82079d063f2acd8cbbc93eab3f5aa6c228c187b92087dba352a1429a68113dc5790f425094963f35af5d5d372205990ce0a6c16aca431385fa5009382ebad170940c455244779f2a97149c69bf7735b479c111cd2793c7e0891c09e1e868df9f160958f96d9b19c9c801c08bf2b0108ffdf2b64ac62768956a55b8ec1f5c67a2a1cd3a65bc74e596ce57f2f570ec87535dd2d6fd767727f6ae8e36946037c8e031bfe964cde91b", @nested={0x1d3, 0x5d, 0x0, 0x1, [@generic="d3c186dee37d5764db343068e0cf4257846427ee596f9a15b06711a04d946584b62426bb035a2a265ddc597cdccb72f05361", @generic="c447d219e5d1f5893e0e52be62cc7c2a62f122920f1c979329071ea952b6635448900f660e9106b067810d3b0e795a24620676cb328ac42d40008fb7e7eb62ec6d6dd08aa51c638ecbc7318ec001fcdc10da3b31da7f33d150d3e3e8338645bc7ca76249031a24cffc3111ed98c385b7eacb739113ef088d3e985590346354e9a820618f1860162d91b36314977fdecb624cf51bffae8f4b44d07320e3619b0943519a1207cc88d8dc3e56b2f87ae6205e3508ad1857a0afbbe918c4dd5b1d7b972ae563617d946f7672730be10ca83959a1d586c4de3b40faaa3e3c", @generic="4f510b84112e6f3e8f17b4d585298f43d48cee80de700a1fdcd95a0b4fa7b9239d19283f76a9f2b2b4bfaef9c24b9a4ccca4d420cccc2db838e420a0f4cb3a7c8006260aa83d2d15edb22c5ba6173b593b5682e94aa3a4b3dad5d47c726b805d369e9ee276653adcb72f5fe087318ebb46adc06a0252582f3345f076359a7976689eab83f898326deb7d2f40f5da4d2f924094913aec229d2b6c02713cbb257f4ff5960ace37d617c915f8b9dd6cd7b5f52c438873ccdeda256fe147f9", @nested={0x4, 0x13b}]}]}, @NL80211_ATTR_EMA_RNR_ELEMS={0x170, 0x145, 0x0, 0x1, [@nested={0x16c, 0xfc, 0x0, 0x1, [@generic="2e82cd512211fabdc8f580e2cdd161c18811ac8bbde53a8579124e420193", @generic="e00f25aad5a9f9e594859654dc2ef7457166a5323513073e2ae079d1110bc97c70496bbf5e9bc7815e6d66c368f1b2d6d082769d67b2d4ad88773e8a24729d247be2de1dd961dbdcc13f8f4ead7ada16f3617aa91dfad76a013ed8a50de53009b0bfcd0595c8d56b32505b44f2473f59", @nested={0x4, 0xda}, @generic="a82a20b242108c6b808e7fd950d448e16e4297afd90217", @generic="c13d921530c596f39bd892ab3ea178234ffa9fccf3d305ad793e80b61549e1556b613d58fc0358caa5b0a0c8cfc32363fccd2e90306da5eda17008fb50a83f1664cb497ae7dddf09f096cf3c7925d89375c4836f08465ec630", @nested={0x4, 0x120}, @generic="10fa1719450fdfa78d5ae6082baf592e25502b84778f047538f6ef009333269f20fe6a6655c8403b7864a25032ad01aaed49202e69c451e0bcd1d02f77c4067323dbcb9badde9418ffdcb911eaf4d3fa9ae4112f5def86563202", @nested={0x4, 0x6}, @nested={0x4, 0xa4}]}]}, @NL80211_ATTR_PROBE_RESP={0x509, 0x91, "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"}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_CSA_IES={0x1b8, 0xb9, 0x0, 0x1, [@nested={0xfe, 0x5, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @fd=r0}, @typed={0x3e, 0xb3, 0x0, 0x0, @binary="23d7d30c85ed0976dea03282d1114b1e259b238bb33fc1ca958272979ca5b6ea4b83e2bae8137a558b14f7d8f1735c8673cf88272ae64cb3e414"}, @generic="c92277d15e7f1ee90d53872084b028a1ed77638fa6e1fa0e3724f85d8f49834301d2e338da7ba6056c6a6ba0210e6cb8b4b36871ff2d7d5762e75b58ad632a10a8217000faffae7c87733e0cf553ea88340ebf83862818ce97c6e705039c49e394dbcdc0956660d62d1ae0a62b96e95d70ce5e08a49846886c5638d76727b1df1a84007484647dc4194a5dc46c4a3d460d27159d2496c1f2b004cdc0328ad044c01a44df5e5f", @typed={0x5, 0xd2, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x107}]}, @generic="09d0a911e8191d57abc9e972d6a5b676fb8ffd2f719fd05a0d009f210d7e7cd83f52f1c6a8d9009846e61e623aa2d9b07016c5240e23d22605caf463edf661b9519282c6d75b2c7c06e70ff0", @nested={0x66, 0xf4, 0x0, 0x1, [@generic="975d32a329c46dd2b98052c52db72003aedd9f8dedd90048eb47767b38e9207050b381f485946c79fde27008e8c6ffbce5e4bd12eb7e8d3a6ee99f35aca94bfd7ff1bbab77402c33bf3ecbfed71b968d915a97270515dcc62fd56edb29d5", @typed={0x4, 0x82}]}]}, @NL80211_ATTR_REG_ALPHA2={0xf3, 0x21, "729a70709da6c7ebb1dadcf645de7c764faf34dbe09ea52d6c7ea46d4c4aeeb563230abf88ae254e00ddd21a7d4476042fb6e7df70850ed649ac82d1d1902209b853f4b75cec8954015bc578fe267d69647d376e8b5b55d718432692d29c96f28c82f8af2011dcedd452681e80c121922136ddfb8d1ed0efef796d4c446968c6962caf02571b80b0b62abee3fdb9e8d6d7ccbc817c91998e307d2a8223107164f45aef45511cf77c1702a3e668c6b2074264153fc338ead8be5ceff878dd6740387981862cef74618f902133b6423c31d58be0c28f6e505e4d97c3610e989ca68677502b1dcd15821a1d6971ca3512"}]}, 0x11a0}, 0x1, 0x0, 0x0, 0x40c0}, 0x4)
statmount$auto(&(0x7f0000003600)={0xc39, @inferred=r1, 0x7, 0xfffffffffffffffc, 0x4}, &(0x7f0000003640)={0xffff7fff, 0x8, 0x24b, 0xffff8001, 0x401, 0x1ff, 0x4, 0x17, 0x6, 0x7, 0x3, 0x8, 0xffffffffffffd9aa, 0x8b2, 0xffff, 0xe, 0x7, 0x5, 0x1, 0x8000000000, 0x8, 0x4e, 0xffff6db9, 0x3, 0x6a, 0x6, [0x0, 0x9, 0x8, 0x800, 0x3, 0x10001, 0x7, 0x4, 0x9, 0x200, 0x8, 0x5, 0xd, 0x7, 0xf3e, 0xd, 0xf51, 0x7, 0x1000, 0x3ff, 0x4, 0x29, 0xd, 0xffffffff, 0x5, 0x3, 0x3, 0x7ff, 0x4, 0x1, 0x1dc8, 0x6, 0x5, 0x0, 0xfffffffffffffffd, 0x800, 0x299f, 0x3, 0x0, 0x3, 0x7, 0x1, 0x3ff, 0x4a06, 0x6, 0xfff], "061d94619c438889762304ebb56270d497917633af9640a9fb3f8a90cb54e59faad49759fc04164133854e6811ff054557a12de582bd9674620821a507837f0e185a7bf609a50232e45fb225162e52300516b6bb039e83ed765e13cf4604340dc35f6650e39231c69223edc3574b532117306f7e7c4be4dc63c4362f77a788fd6bae34820d69f7669f118c3ac0d17472f3cccabf11a4c481fc60d773ed0f5cea1b24f14972848f0ad588bfa57aa0f60fe3c163efec2cf8db6b3835"}, 0x8000000000000001, 0x4)
writev$auto(r0, &(0x7f0000003940)={&(0x7f0000003900)="ddf463accf48ddc2fc53fe31758c66af73ee7573d123fca28a6971fa900e4ddb53b78a5300554a", 0x7f}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = open(&(0x7f0000003980)='./file0\x00', 0x40, 0x172)
r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000039c0)='/proc/thread-self/pagemap\x00', 0x90001, 0x0)
mmap$auto(0x57db, 0x8, 0x15, 0x10011, r7, 0x1)
read$auto(r6, &(0x7f0000003a00)='/dev/mixer\x00', 0x4c)
sysfs$auto(0x8, 0x7, 0x6a)
r8 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000003a40), 0x100, 0x0)
io_uring_enter$auto(r8, 0x1, 0x7, 0x3, &(0x7f0000003a80)="23f1e222a67cc903f53f3420b40d07f244b7012dda3a3cf0127fbe50e546e8bc28a8d91b5b82098ea9b00558b87a6a015aca413d730d95f298336368a5d708e8569b1694ae0434469be6b23acb732ddac6ae88cc1200178dfc64cf6ec32582bb0255a7e7e2d33b80499ca857e44d3bb65a849fd6b616a10cda8ad2d4c05685330a9747444631c23fff24f4d635892ee19a8e8a6e97ae9aa8004be96a1a6fa6ee524be5b48ef8ca20b44ffb3d91966a8ec564bc9d7ed45e16c1d9dd591251d25d5c937ac13c722378a3e53422c68390ea7e331d46b9142d458c9e19c4374b1b", 0x5)
r9 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003b80), 0x402, 0x0)
write$auto_vhost_vsock_fops_vsock(r9, &(0x7f0000003bc0)="2fdaee671b8c05fe0ae199299a6d1465bb116a3dea10e3c274d0980490994afa7441e3147358d6d7e9c8c0fe28ff475dd3e06715b66739748db67f20b93805503902c467aeec0fc3c2a8dd8499d0b369a8d55b71a2c8fafa60", 0x59)
write$auto_evm_xattr_ops_evm_secfs(r6, &(0x7f0000003c40)="93a29bc0bc079d5ade51848872a82f4d82531a0919ca73d8c4cbb8009c0048446ec8ab3e6f96ec0a6795e8347a96b7678f22092e153e309a803ce4fc1d", 0x3d)
sysfs$auto(0x0, 0x0, 0x81)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r10, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4000840)
write$auto_mtd_fops_mtdchar(r6, &(0x7f0000003d80)="1c316295ad2b200b87ec7f7f4a734cc5d9cd6f88ebc5c9", 0x17)
r11 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000003e00), r1)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000003f00)={&(0x7f0000003dc0), 0xc, &(0x7f0000003ec0)={&(0x7f0000003e40)={0x58, r11, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4eb}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xef}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c074}, 0x80)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000005000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004fc0)={&(0x7f0000003f80)={0x101c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0x1004, 0xbb, "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"}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x101c}, 0x1, 0x0, 0x0, 0x4068098}, 0x40000)
rmdir$auto(&(0x7f0000005040)='./file0\x00')
sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000005180)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005140)={&(0x7f0000005100)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
executing program 3:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 3:
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) (async)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) (async)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", @inferred=<r1=>0xffffffffffffffff})
socket(0x1a, 0x1, 0x3)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
pipe2$auto(0x0, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
ioctl$auto_evdev_fops_evdev(r4, 0x80104592, 0x0)
poll$auto(&(0x7f0000000040)={r1, 0x8, 0x400}, 0x2, 0x10001) (async)
poll$auto(&(0x7f0000000040)={<r5=>r1, 0x8, 0x400}, 0x2, 0x10001)
write$auto_ftrace_set_event_pid_fops_trace_events(r5, &(0x7f0000000100)="56ecad51ba1cdb8125235a3ba4dc7a6163217a2c55685ff9fb089ce33e98409b1541b20645ad705c0e19a16bd4a22dee63b38a43245e869dd02def08788baddcf95e7a2e064c01d6be38fa6588f52dff086aaa3c5b1c8d7a05c8d3418ff9e9109dd87c954fd847832b9fb6", 0x6b)
executing program 3:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r2, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 3:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <6>
bisect: split chunk #0 of len 6 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 30, 30, 30]
detailed listing:
executing program 3:
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) (async)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) (async)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", @inferred=<r1=>0xffffffffffffffff})
socket(0x1a, 0x1, 0x3)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
pipe2$auto(0x0, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
ioctl$auto_evdev_fops_evdev(r4, 0x80104592, 0x0)
poll$auto(&(0x7f0000000040)={r1, 0x8, 0x400}, 0x2, 0x10001) (async)
poll$auto(&(0x7f0000000040)={<r5=>r1, 0x8, 0x400}, 0x2, 0x10001)
write$auto_ftrace_set_event_pid_fops_trace_events(r5, &(0x7f0000000100)="56ecad51ba1cdb8125235a3ba4dc7a6163217a2c55685ff9fb089ce33e98409b1541b20645ad705c0e19a16bd4a22dee63b38a43245e869dd02def08788baddcf95e7a2e064c01d6be38fa6588f52dff086aaa3c5b1c8d7a05c8d3418ff9e9109dd87c954fd847832b9fb6", 0x6b)
executing program 3:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r2, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 3:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <3>
bisect: split chunk #0 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30]
detailed listing:
executing program 3:
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007800c00050001000000000000007f1c01092989121f81a44320e3fa0f01a57821ac"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80a00, 0x0)
ioctl$auto(r2, 0x4b41, 0x92b6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x2, 0x3fd6, 0x7, 0x7fffffffb000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x21000, 0x0)
ioctl$auto_PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434, 0x5)
mmap$auto(0x7c, 0xff, 0xdb, 0x15, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
fanotify_init$auto(0x65, 0x2)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = prctl$auto(0x6, 0x6, 0x0, 0x0, 0x0)
r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
splice$auto(r4, &(0x7f0000000100)=0xfffffffffffffff8, r4, &(0x7f0000000140)=0x800, 0x100, 0x4)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x2f0519a300bcab6a, 0x0)
socket(0x7e80644ac73d4b17, 0x1, 0xc)
write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 30, 30]
detailed listing:
executing program 3:
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) (async)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) (async)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", @inferred=<r1=>0xffffffffffffffff})
socket(0x1a, 0x1, 0x3)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
pipe2$auto(0x0, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
ioctl$auto_evdev_fops_evdev(r4, 0x80104592, 0x0)
poll$auto(&(0x7f0000000040)={r1, 0x8, 0x400}, 0x2, 0x10001) (async)
poll$auto(&(0x7f0000000040)={<r5=>r1, 0x8, 0x400}, 0x2, 0x10001)
write$auto_ftrace_set_event_pid_fops_trace_events(r5, &(0x7f0000000100)="56ecad51ba1cdb8125235a3ba4dc7a6163217a2c55685ff9fb089ce33e98409b1541b20645ad705c0e19a16bd4a22dee63b38a43245e869dd02def08788baddcf95e7a2e064c01d6be38fa6588f52dff086aaa3c5b1c8d7a05c8d3418ff9e9109dd87c954fd847832b9fb6", 0x6b)
executing program 3:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r2, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30]
detailed listing:
executing program 3:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r2, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 2 programs left: 

executing program 3:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r2, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)


bisect: trying to concatenate
bisect: concatenate 2 entries
minimizing program #0 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r1, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r1, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r1, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r1, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: general protection fault in hci_devcd_register
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r1, 0x0, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: general protection fault in hci_devcd_register
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
write$auto(r1, 0x0, 0x5)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: general protection fault in hci_devcd_register
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
iopl$auto(0x3)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
ioperm$auto(0x7, 0x71, 0x863)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: general protection fault in hci_devcd_register
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
socket$nl_generic(0x10, 0x3, 0x10)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: general protection fault in hci_devcd_register
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: general protection fault in hci_devcd_register
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x3, 0x2)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 30]
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
executing program 5:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
minimized 30 calls -> 1 calls
minimizing program #1 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 29]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)
socket(0x2b, 0x1, 0x0)

program crashed: general protection fault in hci_devcd_register
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 28]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 27]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 26]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 25]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$auto(0x6, 0x40000000084, 0x48, 0xfffffffffffffffe, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 24]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 23]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)

program crashed: WARNING in hci_devcd_register
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 22]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20009, 0xb, 0xeb2, 0x401, 0xd)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 21]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 20]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 19]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
socket(0x10, 0x2, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 18]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)

program crashed: general protection fault in hci_devcd_register
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 17]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 16]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 15]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 14]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

program crashed: general protection fault in hci_devcd_register
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 13]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 12]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 12]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 12]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa00, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 11]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 10]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x4020009, 0x9f, 0xebd, 0x401, 0x8000)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 9]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x3ff, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 8]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 7]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 7]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 5]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 4]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
timerfd_settime$auto(0x80000000, 0x3, &(0x7f0000000140)={{0x6, 0x2}, {0x9, 0x10001}}, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 3]
detailed listing:
executing program 3:
tkill$auto(0x80000000000001, 0x7)
executing program 0:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
minimized 30 calls -> 3 calls
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: concatenation succeeded
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=1m13.579375558s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=1m13.579375558s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-write$auto
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=1m13.579375558s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=1m13.579375558s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=1m13.579375558s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m13.579375558s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
simplifying guilty program options
testing program (duration=1m13.579375558s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
extracting C reproducer
testing compiled C program (duration=1m13.579375558s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
testing program (duration=1m13.579375558s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
tkill$auto(0x80000000000001, 0x7)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
reproducing took 2h38m5.682103314s
repro crashed as (corrupted=false):
------------[ cut here ]------------
ODEBUG: free active (active state 0) object: ffff888028ec1248 object type: timer_list hint: hci_devcd_timeout+0x0/0x2f0 include/linux/skbuff.h:2741
WARNING: CPU: 0 PID: 6027 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612
Modules linked in:
CPU: 0 UID: 0 PID: 6027 Comm: syz.2.18 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612
Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd e0 81 b1 8b 41 56 4c 89 e6 48 c7 c7 60 76 b1 8b e8 bf 42 bc fc 90 <0f> 0b 90 90 58 83 05 a6 47 7f 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
RSP: 0018:ffffc90003557768 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff815a1789
RDX: ffff88802ba69e00 RSI: ffffffff815a1796 RDI: 0000000000000001
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000003 R12: ffffffff8bb17d00
R13: ffffffff8b4f81a0 R14: ffffffff8a2af6e0 R15: ffffc90003557878
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffceee20e40 CR3: 000000003500e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __debug_check_no_obj_freed lib/debugobjects.c:1099 [inline]
 debug_check_no_obj_freed+0x4b7/0x600 lib/debugobjects.c:1129
 slab_free_hook mm/slub.c:2284 [inline]
 slab_free mm/slub.c:4613 [inline]
 kfree+0x2b3/0x4b0 mm/slub.c:4761
 hci_release_dev+0x4d9/0x600 net/bluetooth/hci_core.c:2758
 bt_host_release+0x6a/0xb0 net/bluetooth/hci_sysfs.c:87
 device_release+0xa1/0x240 drivers/base/core.c:2567
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x1e4/0x5a0 lib/kobject.c:737
 put_device+0x1f/0x30 drivers/base/core.c:3773
 vhci_release+0x81/0xf0 drivers/bluetooth/hci_vhci.c:665
 __fput+0x3f8/0xb60 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x2576/0x2610 kernel/signal.c:3017
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbe72185d29
Code: Unable to access opcode bytes at 0x7fbe72185cff.
RSP: 002b:00007ffcf9fdfba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: 0000000000000003 RBX: 00007fbe72375fa0 RCX: 00007fbe72185d29
RDX: 0000000000000002 RSI: 0000000020000c40 RDI: ffffffffffffff9c
RBP: 00007fbe72201b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fbe72375fa0 R14: 00007fbe72375fa0 R15: 0000000000000d32
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
ODEBUG: free active (active state 0) object: ffff888028ec1248 object type: timer_list hint: hci_devcd_timeout+0x0/0x2f0 include/linux/skbuff.h:2741
WARNING: CPU: 0 PID: 6027 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612
Modules linked in:
CPU: 0 UID: 0 PID: 6027 Comm: syz.2.18 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612
Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd e0 81 b1 8b 41 56 4c 89 e6 48 c7 c7 60 76 b1 8b e8 bf 42 bc fc 90 <0f> 0b 90 90 58 83 05 a6 47 7f 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
RSP: 0018:ffffc90003557768 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff815a1789
RDX: ffff88802ba69e00 RSI: ffffffff815a1796 RDI: 0000000000000001
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000003 R12: ffffffff8bb17d00
R13: ffffffff8b4f81a0 R14: ffffffff8a2af6e0 R15: ffffc90003557878
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffceee20e40 CR3: 000000003500e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __debug_check_no_obj_freed lib/debugobjects.c:1099 [inline]
 debug_check_no_obj_freed+0x4b7/0x600 lib/debugobjects.c:1129
 slab_free_hook mm/slub.c:2284 [inline]
 slab_free mm/slub.c:4613 [inline]
 kfree+0x2b3/0x4b0 mm/slub.c:4761
 hci_release_dev+0x4d9/0x600 net/bluetooth/hci_core.c:2758
 bt_host_release+0x6a/0xb0 net/bluetooth/hci_sysfs.c:87
 device_release+0xa1/0x240 drivers/base/core.c:2567
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x1e4/0x5a0 lib/kobject.c:737
 put_device+0x1f/0x30 drivers/base/core.c:3773
 vhci_release+0x81/0xf0 drivers/bluetooth/hci_vhci.c:665
 __fput+0x3f8/0xb60 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x2576/0x2610 kernel/signal.c:3017
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbe72185d29
Code: Unable to access opcode bytes at 0x7fbe72185cff.
RSP: 002b:00007ffcf9fdfba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: 0000000000000003 RBX: 00007fbe72375fa0 RCX: 00007fbe72185d29
RDX: 0000000000000002 RSI: 0000000020000c40 RDI: ffffffffffffff9c
RBP: 00007fbe72201b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fbe72375fa0 R14: 00007fbe72375fa0 R15: 0000000000000d32
 </TASK>