Extracting prog: 11m44.436450329s
Minimizing prog: 1h15m17.095592612s
Simplifying prog options: 14m3.716142724s
Extracting C: 5m12.998115398s
Simplifying C: 0s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-socketpair$auto-setsockopt$auto-bind$auto-connect$auto-openat$auto_proc_pid_set_timerslack_ns_operations_base-socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-mmap$auto-close_range$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
connect$auto(0xffffffffffffffff, 0x0, 0x55)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 15, 15, 29, 29, 30, 22, 5, 30, 30, 22, 12, 29, 29, 5, 30, 30, 11, 20, 30, 30, 27, 15, 30]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
ioperm$auto(0x7, 0x6, 0x1005)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x4, 0x6, 0x1, 0x7, "e72171dd9872b555facc1e8f"})
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
write$auto(0x3, 0x0, 0x100082)
set_mempolicy$auto(0x4005, &(0x7f0000000000)=0x1, 0x4)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0x5}, 0x6f4)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0xc)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x192, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x1, 0x8, 0x1, 0xfffffffffffffff8})
r2 = socket(0x10, 0x2, 0x0)
umount2$auto(&(0x7f0000000100)='\x00', 0x9)
io_uring_register$auto(r2, 0x0, &(0x7f0000000300), 0xfffffff3)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, r2)
mknod$auto(&(0x7f0000000240)='./file0\x00', 0x1798, 0x4)
executing program 0:
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x4, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
epoll_create$auto(0xfffffffc)
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0)
ioctl$auto(r0, 0x2271, r0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x4aa02, 0x0)
mmap$auto(0x0, 0x40000b, 0x4, 0x9b72, 0x2, 0x8000)
socket(0x15, 0x5, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x63, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0140, 0x0)
setuid$auto(0xe)
get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0)
socket(0x10, 0x2, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4008ae89, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
executing program 0:
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b1613007984"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2)
quotactl_fd$auto(r0, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77")
get_mempolicy$auto(0x0, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ppoll$auto(&(0x7f0000000000)={r3, 0x81, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60)
io_uring_setup$auto(0x4, &(0x7f0000000280)={0x1, 0xd, 0x800ef, 0x9, 0x0, 0x6, 0xffffffffffffffff, [0x40000007, 0xc, 0x4], {0xfc, 0x4, 0x0, 0x2, 0x80007, 0x0, 0xfefffffa, 0x8, 0x23}, {0x2, 0x7, 0x1, 0x9010, 0x7f, 0x7ffffff8, 0x1, 0x8, 0x6}})
r6 = getpid()
process_vm_readv$auto(r6, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
prctl$auto(0x23, 0xe, 0x1ff, 0x68, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x80)
executing program 2:
mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0x7, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r1 = socket(0x2, 0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r2 = socket(0x2, 0x1, 0x106)
bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x103, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
write$auto_snd_pcm_oss_f_reg_pcm_oss(r3, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, r5, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000128bd7000fbdbdf255c00000008004a0007010000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4804)
openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_suspend\x00', 0x0, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x2)
socket(0x11, 0x1, 0x8)
mprotect$auto(0x8000000000000, 0xff, 0x3)
setgroups$auto(0x8, &(0x7f0000000000)=0xf)
r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x28, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x4}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800)
executing program 0:
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b16130079"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5})
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2)
quotactl_fd$auto(r0, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77")
get_mempolicy$auto(&(0x7f0000000180)=0x6, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ppoll$auto(&(0x7f0000000000)={r3, 0x81, 0x9}, 0x9, 0x0, &(0x7f00000000c0), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60)
io_uring_setup$auto(0x4, &(0x7f0000000280)={0x1, 0xd, 0x800ef, 0x9, 0x0, 0x6, 0xffffffffffffffff, [0x40000007, 0xc, 0x4], {0xfc, 0x4, 0x0, 0x2, 0x80007, 0x0, 0xfefffffa, 0x8, 0x23}, {0x2, 0x7, 0x1, 0x9010, 0x7f, 0x7ffffff8, 0x1, 0x8, 0x6}})
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
prctl$auto(0x23, 0xe, 0x1ff, 0x68, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x80)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
bpf$auto(0x5, 0x0, 0x171)
socket(0x18, 0xa, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/power/runtime_active_time\x00', 0x80000, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/version\x00', 0x40802, 0x0)
pread64$auto(r1, 0x0, 0xffff, 0xd7)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.3/usb4/devpath\x00', 0xc3100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/49, 0x31)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setrlimit$auto(0x10000686, 0x0)
userfaultfd$auto(0x1)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
unshare$auto(0x8000400)
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0)
ioctl$auto_CEC_RECEIVE(r4, 0xc0386106, 0x0)
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttye0/power/control\x00', 0x4c0080, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000)
sendfile$auto(r0, r0, 0x0, 0x3)
executing program 2:
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b16130079"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5})
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2)
quotactl_fd$auto(r0, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77")
get_mempolicy$auto(&(0x7f0000000180)=0x6, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ppoll$auto(&(0x7f0000000000)={r3, 0x81, 0x9}, 0x9, 0x0, &(0x7f00000000c0), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60)
io_uring_setup$auto(0x4, &(0x7f0000000280)={0x1, 0xd, 0x800ef, 0x9, 0x0, 0x6, 0xffffffffffffffff, [0x40000007, 0xc, 0x4], {0xfc, 0x4, 0x0, 0x2, 0x80007, 0x0, 0xfefffffa, 0x8, 0x23}, {0x2, 0x7, 0x1, 0x9010, 0x7f, 0x7ffffff8, 0x1, 0x8, 0x6}})
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
prctl$auto(0x23, 0xe, 0x1ff, 0x68, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x80)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
ioperm$auto(0x7, 0x6, 0x1005)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x4, 0x6, 0x1, 0x7, "e72171dd9872b555facc1e8f"})
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
write$auto(0x3, 0x0, 0x100082)
set_mempolicy$auto(0x4005, &(0x7f0000000000)=0x1, 0x4)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0x5}, 0x6f4)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0xc)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x192, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x1, 0x8, 0x1, 0xfffffffffffffff8})
r2 = socket(0x10, 0x2, 0x0)
umount2$auto(&(0x7f0000000100)='\x00', 0x9)
io_uring_register$auto(r2, 0x0, &(0x7f0000000300), 0xfffffff3)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, r2)
mknod$auto(&(0x7f0000000240)='./file0\x00', 0x1798, 0x4)
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0)
read$auto(r0, &(0x7f0000000340)='/\x00\x9br\xbb\xf8\x92\"8\xb9\t0\x1c\xe9\xcdiN\xa5\xf1\x00a\t\xc3.\x9f\xaew\x83\xd0\xde\xe0\xe9DLk\xb7\xc0\xc1\vv\xaa\xe7\'\xd7\'\xf1nL\xf1\x86s\xa2\xb0\a\x1e\x81Qa\xd7R\x18R\x86bo\x87$^\xa4:&M\x99\xd0@#S\x05\xb7\x0e\x7f}\xf0\x1a\xa4\x85=\xc4=\xb7\xf2\xc1\xcfQD\xea\xda\xf6\x03\xa8\xc1$\x0f\xd2K\b\xcd\x1c\x12\xd7\x8dFz\xe0\xbf\xad\x11a\b\x18\xaf\xa5\xf8\x8f\xc8\xcb\xbd\xb0K\x1b\xca\xc5M\xfb\x14\x87o\xca~\xbb\xce\x18\xb1Y\xda>\xbc\xdfI\xef\xaa\x81\xe8=br\xd1\xe2\x9b\x0e\x1d?,\xe0\x05\xdd%<\xec\xc3\xe2C\x9e0\xc6\xa2\a8E\x93{\xbe\xe0Z\x13\x1d\x0fB]n\x87\x89\xb8\xf1\xa6xo2\xe8\x94\xd8\xb3\xec\x9f\\\xac\x10!\x17&\x13Ik\xa5W\xdf<\x01Q\xdc,S\xc9\xbe\xf5\xc9s3I\xc1\xda\xf8\xa8K\to\xa8\xf6\xe6U\xd0\xee\xe8\a\xc2\x84\xd1\xe8\xf2\xff0n\xdf\x14\x91*!\xac\xd3g\'w`<\xd68i\x13\xa5,\x1d\x12\xd6\xcdjw\xe7\x98\xb9\xc5\xb2\xa0\xebu\x1d\xf5\x03\x84\xb2\xe3\xf6-.\x8e', 0x179)
prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff)
setreuid$auto(0x0, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x103, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
socket(0x2b, 0x1, 0x1)
r2 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r2, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x27, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x0, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffd]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0)
executing program 1:
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r1 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0)
read$auto(r1, 0x0, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x7, 0x0) (async, rerun: 64)
r2 = fsopen$auto(0x0, 0x1) (rerun: 64)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) (async)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) (async)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) (async)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0)
executing program 2:
mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0x7, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r1 = socket(0x2, 0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r2 = socket(0x2, 0x1, 0x106)
bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x103, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
write$auto_snd_pcm_oss_f_reg_pcm_oss(r3, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, r5, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000128bd7000fbdbdf255c00000008004a0007010000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4804)
openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_suspend\x00', 0x0, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x2)
socket(0x11, 0x1, 0x8)
mprotect$auto(0x8000000000000, 0xff, 0x3)
setgroups$auto(0x8, &(0x7f0000000000)=0xf)
r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x28, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x4}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800)
executing program 1:
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b1613007984"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2)
quotactl_fd$auto(r0, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77")
get_mempolicy$auto(0x0, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ppoll$auto(&(0x7f0000000000)={r3, 0x81, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60)
io_uring_setup$auto(0x4, &(0x7f0000000280)={0x1, 0xd, 0x800ef, 0x9, 0x0, 0x6, 0xffffffffffffffff, [0x40000007, 0xc, 0x4], {0xfc, 0x4, 0x0, 0x2, 0x80007, 0x0, 0xfefffffa, 0x8, 0x23}, {0x2, 0x7, 0x1, 0x9010, 0x7f, 0x7ffffff8, 0x1, 0x8, 0x6}})
r6 = getpid()
process_vm_readv$auto(r6, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
prctl$auto(0x23, 0xe, 0x1ff, 0x68, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x80)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
ioctl$auto(r1, 0x4004af07, r0) (fail_nth: 1)
executing program 0:
unshare$auto(0xcc2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400d0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40010}, 0x4040014)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff028}})
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socket(0xa, 0x6, 0x0)
mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
connect$auto(0x3, 0x0, 0x55)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu1\x00', 0x80802, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
truncate$auto(&(0x7f00000000c0)='./cgroup\x00', 0x100000000000001)
unshare$auto(0x40000080)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
epoll_create$auto(0x0)
fcntl$auto(0x0, 0x407, 0x100000)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x20040, 0x0)
mlock$auto(0x4, 0x0)
mlock$auto(0x7c89, 0x47fff)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x1a3000, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$auto(r2, 0x50434903, 0x1)
setrlimit$auto(0x1000000007, 0x0)
getsid$auto(0xffffffffffffffff)
executing program 2:
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_allowed_congestion_control\x00', 0x0, 0x0)
read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fedbdf250300000004000800100003800c00148008000100", @ANYRES32=r1, @ANYBLOB="12000100898771f1c19f1779048590822ad90000040002"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
pipe$auto(0x0)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
write$auto(r3, 0x0, 0x40)
r4 = geteuid()
setreuid$auto(r4, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r5 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0)
r6 = socket(0xa, 0x5, 0x84)
sendto$auto(r6, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa}, 0x1f)
ppoll$auto(&(0x7f0000000040)={r5, 0x9, 0x5}, 0x9, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r7 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, [0x0, 0x4, 0x0, 0xffffffffeffffffd, 0x0, 0x0, 0x0, 0x3, 0x80000001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x400200, 0x0, 0x80000000000, 0x400000000000000, 0x0, 0x8000000000000000, 0x80000000000000, 0x2, 0x0, 0x0, 0xfffffffffffffbfe, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffe, 0x80000000, 0x0, 0xd, 0x0, 0x8, 0x0, 0x0, 0x80000001, 0x1]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
msgctl$auto_IPC_SET(0x6, 0x1, &(0x7f00000000c0)={{0x101, <r8=>0xee01, 0xffffffffffffffff, 0x4, 0x8, 0x800, 0x30}, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0xd, 0x7fffffffffffffff, 0x3ff, 0xffffffffffffff0d, 0x3, 0x0, 0xfff7, 0x4, 0x6, @raw=0x7, @inferred=0xffffffffffffffff})
msgctl$auto_IPC_SET(0x9, 0x1, &(0x7f00000001c0)={{0x8f, 0xffffffffffffffff, <r9=>0xee01, 0x6, 0x2, 0x0, 0x2}, &(0x7f0000000140), &(0x7f0000000180)=0x4, 0x1, 0x1ff, 0x4, 0x2, 0x81, 0x9, 0x7fff, 0x7, @inferred=0xffffffffffffffff, @raw=0x2a})
keyctl$auto_KEYCTL_DH_COMPUTE(0x17, r4, r8, r9, 0x7)
executing program 1:
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8)
r0 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/sessionid\x00', 0x80000, 0x0)
r1 = semctl$auto_IPC_RMID(0xf, 0x7, 0x0, 0x3)
fcntl$auto_F_SETPIPE_SZ(r0, 0x407, r1)
r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
socket(0x2, 0x3, 0x1)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(0x3, 0x89e0, 0x91)
ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, 0xfffffffffffffffd)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
close_range$auto(r0, r0, 0x400)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
r2 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/8:0/wb_stats\x00', 0x2080, 0x0)
mmap$auto(0x7fffffff, 0x100000000040009, 0x8, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000005780)=ANY=[@ANYBLOB='dT\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x5464}, 0x1, 0x0, 0x0, 0xc000}, 0x4010)
r5 = io_uring_setup$auto(0x6, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYBLOB="2e00f5"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000640)={{0xffffffffffffffff, &(0x7f0000000300)="cf61e5a5a45b2d41748194a28e85c574be448a9c7e5307bb7aeb8acbeec6da15c66f536fb46b282f1671ee7059d990f96381404482bfcc331516b212dcf094491a9c0f97c5867a4272dac40c127849f97e3760dd775409923b949f9a4c4ace8ce10290266882696a57502202c266ff9b07299e3d84f9431009733c4c9844a05cf4b2c748af843e21f9b12cab1dc9056dae97f10c98cfd573516bd8ce6845115ca61d5db953bca45db380560f5990b0ca5e1c823617dbe016", 0x6, &(0x7f00000003c0)="804f4b5e113e0b3950d65bd9472f82b9bf6e9a0a86eef44f5873bf6d95e6676f2d0770463243628f01d0b3b6a3db310e0182ac03fc8dc8d7b64882536059cedf2ea292718a21076938822ea1e652ccca9b0d38c2f0262754", 0xf40, &(0x7f0000000440)="e2eb06921b1210e551b39f2929d8a9f1fd0e9adbbbe497543d03f80ce0e7c8c0c25d2d732e22b2b985930e705cfdfb76fa32c64eaa0bfa0c108eb88ff9b5d35bca37ba5b0bb14c7abb156f9fe3134d308bcd", &(0x7f00000004c0)=0x80000000}, 0x1, &(0x7f0000000600)={0x18, 0x56e, &(0x7f0000000500)="efd7bfe016953d94fa9904a558d3cac2d153d68b128dfb6da457ac98861979aaa425ec20b30a34d69e355ed0ed26b6ff451a1d108b0ba07b77a1d980043aac559b89e74929efc0383a905c7db39d7352187fc5ef26c1ef0f1f997d8a5416abc58f4aeadc777a37460910ee139ab7e72c49a60bfdc97e3b207d3f4493912b627dda08ca03b390d842f78a9cf9085bd6513832f259a3", &(0x7f00000005c0)="73435806c32997dc8e77f1fb4c5b15f996135a8ffb4709", 0x7ff, 0x7f}})
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto_cgwb_debug_stats_fops_(r2, &(0x7f0000000040)=""/185, 0xb9)
ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f0000000100)={<r6=>r1, 0x5})
ioctl$auto(r6, 0x0, r1)
executing program 3:
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b16130079"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5})
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2)
quotactl_fd$auto(r0, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77")
get_mempolicy$auto(&(0x7f0000000180)=0x6, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ppoll$auto(&(0x7f0000000000)={r3, 0x81, 0x9}, 0x9, 0x0, &(0x7f00000000c0), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60)
io_uring_setup$auto(0x4, &(0x7f0000000280)={0x1, 0xd, 0x800ef, 0x9, 0x0, 0x6, 0xffffffffffffffff, [0x40000007, 0xc, 0x4], {0xfc, 0x4, 0x0, 0x2, 0x80007, 0x0, 0xfefffffa, 0x8, 0x23}, {0x2, 0x7, 0x1, 0x9010, 0x7f, 0x7ffffff8, 0x1, 0x8, 0x6}})
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
prctl$auto(0x23, 0xe, 0x1ff, 0x68, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210026bd7000fedbdf250100100014000200776730000000000000000000000076a6ed4427050000000000000080002e023a69d4270056b37a195cbfad7d24b3e91cfdb349199089e738eb4b792e87d6afac6d39c5a1dc2d8944df86515234f31371c0dcccddc6b78c8f20e76e9786e6ab953025e660a3eb75d7e9d31791f3823eeab3755db6bce4e93328d79c5df0bbefa7b6c5627e9d6f424174f009060b8e5b96095ffb6f6e979b62f4633e891bf68edfc316b5a96a7b61784c35d92bae90ae396d868f66e4f6e820a3cc90b7149d2705f38d6e442ee9fb954511e048a3f57473bfb159062b4f51cdf653b8aa5997c2bdd4e5798475999fda56d30fb290bce9474f45a612c2781ec70a230c51cabd86c1e168d60b46a46d60243152733c41988d0b2b44b69ea2b247e072f556b7b92e9d988676829d6577293216cc5af12de4394616bebedbaaba298e60ef9176b6c5c61c8f95f8fd8b59ca006f0ddaecbb67bf00151ad3af21327a4ccb33f5a2bfc8d8db3618e9ec77ac82f5954cf2ffd3cb28b7e3950d9035c93c7b06dba0e84bb29aa01e63bfb1010a9519678815f9cc45a569080c769233558b1c600761220d592e8f0f1330352d974be38bac4c67d77a30fb250cb4736fad293fcf40040c2d9646463231f4a838de38d7309acd0658317a8876ddf27df1b8d3f042129671a0e37a4a6a878bd4b6c66f0595f8c2a0a5e902cb69294f7748d35de6685cc600"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x80)
executing program 1:
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b16130079"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5})
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2)
quotactl_fd$auto(r0, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77")
get_mempolicy$auto(&(0x7f0000000180)=0x6, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ppoll$auto(&(0x7f0000000000)={r3, 0x81, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60)
io_uring_setup$auto(0x4, &(0x7f0000000280)={0x1, 0xd, 0x800ef, 0x9, 0x0, 0x6, 0xffffffffffffffff, [0x40000007, 0xc, 0x4], {0xfc, 0x4, 0x0, 0x2, 0x80007, 0x0, 0xfefffffa, 0x8, 0x23}, {0x2, 0x7, 0x1, 0x9010, 0x7f, 0x7ffffff8, 0x1, 0x8, 0x6}})
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
prctl$auto(0x23, 0xe, 0x1ff, 0x68, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x80)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
connect$auto(0xffffffffffffffff, 0x0, 0x55)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited\x00', 0xa000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000)
clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf)
semctl$auto(0x80001ff, 0x804, 0x3, 0x4)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r0, 0x4048aecb, 0x0)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
ioperm$auto(0x7, 0x6, 0x1005)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x4, 0x6, 0x1, 0x7, "e72171dd9872b555facc1e8f"})
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
write$auto(0x3, 0x0, 0x100082)
set_mempolicy$auto(0x4005, &(0x7f0000000000)=0x1, 0x4)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0x5}, 0x6f4)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0xc)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x192, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x1, 0x8, 0x1, 0xfffffffffffffff8})
r2 = socket(0x10, 0x2, 0x0)
umount2$auto(&(0x7f0000000100)='\x00', 0x9)
io_uring_register$auto(r2, 0x0, &(0x7f0000000300), 0xfffffff3)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, r2)
mknod$auto(&(0x7f0000000240)='./file0\x00', 0x1798, 0x4)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-socketpair$auto-setsockopt$auto-bind$auto-connect$auto-openat$auto_proc_pid_set_timerslack_ns_operations_base-socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-mmap$auto-close_range$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
connect$auto(0xffffffffffffffff, 0x0, 0x55)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 1m40s
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 15, 15, 29, 29, 30, 22, 5, 30, 30, 22, 12, 29, 29, 5, 30, 30, 11, 20, 30, 30, 27, 15, 30]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
ioperm$auto(0x7, 0x6, 0x1005)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x4, 0x6, 0x1, 0x7, "e72171dd9872b555facc1e8f"})
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
write$auto(0x3, 0x0, 0x100082)
set_mempolicy$auto(0x4005, &(0x7f0000000000)=0x1, 0x4)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0x5}, 0x6f4)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0xc)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x192, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x1, 0x8, 0x1, 0xfffffffffffffff8})
r2 = socket(0x10, 0x2, 0x0)
umount2$auto(&(0x7f0000000100)='\x00', 0x9)
io_uring_register$auto(r2, 0x0, &(0x7f0000000300), 0xfffffff3)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, r2)
mknod$auto(&(0x7f0000000240)='./file0\x00', 0x1798, 0x4)
executing program 0:
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x4, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
epoll_create$auto(0xfffffffc)
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0)
ioctl$auto(r0, 0x2271, r0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x4aa02, 0x0)
mmap$auto(0x0, 0x40000b, 0x4, 0x9b72, 0x2, 0x8000)
socket(0x15, 0x5, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x63, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0140, 0x0)
setuid$auto(0xe)
get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0)
socket(0x10, 0x2, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4008ae89, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
executing program 0:
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b1613007984"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2)
quotactl_fd$auto(r0, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77")
get_mempolicy$auto(0x0, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ppoll$auto(&(0x7f0000000000)={r3, 0x81, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60)
io_uring_setup$auto(0x4, &(0x7f0000000280)={0x1, 0xd, 0x800ef, 0x9, 0x0, 0x6, 0xffffffffffffffff, [0x40000007, 0xc, 0x4], {0xfc, 0x4, 0x0, 0x2, 0x80007, 0x0, 0xfefffffa, 0x8, 0x23}, {0x2, 0x7, 0x1, 0x9010, 0x7f, 0x7ffffff8, 0x1, 0x8, 0x6}})
r6 = getpid()
process_vm_readv$auto(r6, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
prctl$auto(0x23, 0xe, 0x1ff, 0x68, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210026bd7000fedbdf250100100014000200776730000000000000000000000076a6ed4427050000000000000080002e023a69d4270056b37a195cbfad7d24b3e91cfdb349199089e738eb4b792e87d6afac6d39c5a1dc2d8944df86515234f31371c0dcccddc6b78c8f20e76e9786e6ab953025e660a3eb75d7e9d31791f3823eeab3755db6bce4e93328d79c5df0bbefa7b6c5627e9d6f424174f009060b8e5b96095ffb6f6e979b62f4633e891bf68edfc316b5a96a7b61784c35d92bae90ae396d868f66e4f6e820a3cc90b7149d2705f38d6e442ee9fb954511e048a3f57473bfb159062b4f51cdf653b8aa5997c2bdd4e5798475999fda56d30fb290bce9474f45a612c2781ec70a230c51cabd86c1e168d60b46a46d60243152733c41988d0b2b44b69ea2b247e072f556b7b92e9d988676829d6577293216cc5af12de4394616bebedbaaba298e60ef9176b6c5c61c8f95f8fd8b59ca006f0ddaecbb67bf00151ad3af21327a4ccb33f5a2bfc8d8db3618e9ec77ac82f5954cf2ffd3cb28b7e3950d9035c93c7b06dba0e84bb29aa01e63bfb1010a9519678815f9cc45a569080c769233558b1c600761220d592e8f0f1330352d974be38bac4c67d77a30fb250cb4736fad293fcf40040c2d9646463231f4a838de38d7309acd0658317a8876ddf27df1b8d3f042129671a0e37a4a6a878bd4b6c66f0595f8c2a0a5e902cb69294f7748d35de6685cc600"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x80)
executing program 2:
mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0x7, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r1 = socket(0x2, 0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r2 = socket(0x2, 0x1, 0x106)
bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x103, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
write$auto_snd_pcm_oss_f_reg_pcm_oss(r3, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, r5, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000128bd7000fbdbdf255c00000008004a0007010000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4804)
openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_suspend\x00', 0x0, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x2)
socket(0x11, 0x1, 0x8)
mprotect$auto(0x8000000000000, 0xff, 0x3)
setgroups$auto(0x8, &(0x7f0000000000)=0xf)
r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x28, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x4}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800)
executing program 0:
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b16130079"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5})
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2)
quotactl_fd$auto(r0, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77")
get_mempolicy$auto(&(0x7f0000000180)=0x6, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ppoll$auto(&(0x7f0000000000)={r3, 0x81, 0x9}, 0x9, 0x0, &(0x7f00000000c0), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60)
io_uring_setup$auto(0x4, &(0x7f0000000280)={0x1, 0xd, 0x800ef, 0x9, 0x0, 0x6, 0xffffffffffffffff, [0x40000007, 0xc, 0x4], {0xfc, 0x4, 0x0, 0x2, 0x80007, 0x0, 0xfefffffa, 0x8, 0x23}, {0x2, 0x7, 0x1, 0x9010, 0x7f, 0x7ffffff8, 0x1, 0x8, 0x6}})
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
prctl$auto(0x23, 0xe, 0x1ff, 0x68, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210026bd7000fedbdf250100100014000200776730000000000000000000000076a6ed4427050000000000000080002e023a69d4270056b37a195cbfad7d24b3e91cfdb349199089e738eb4b792e87d6afac6d39c5a1dc2d8944df86515234f31371c0dcccddc6b78c8f20e76e9786e6ab953025e660a3eb75d7e9d31791f3823eeab3755db6bce4e93328d79c5df0bbefa7b6c5627e9d6f424174f009060b8e5b96095ffb6f6e979b62f4633e891bf68edfc316b5a96a7b61784c35d92bae90ae396d868f66e4f6e820a3cc90b7149d2705f38d6e442ee9fb954511e048a3f57473bfb159062b4f51cdf653b8aa5997c2bdd4e5798475999fda56d30fb290bce9474f45a612c2781ec70a230c51cabd86c1e168d60b46a46d60243152733c41988d0b2b44b69ea2b247e072f556b7b92e9d988676829d6577293216cc5af12de4394616bebedbaaba298e60ef9176b6c5c61c8f95f8fd8b59ca006f0ddaecbb67bf00151ad3af21327a4ccb33f5a2bfc8d8db3618e9ec77ac82f5954cf2ffd3cb28b7e3950d9035c93c7b06dba0e84bb29aa01e63bfb1010a9519678815f9cc45a569080c769233558b1c600761220d592e8f0f1330352d974be38bac4c67d77a30fb250cb4736fad293fcf40040c2d9646463231f4a838de38d7309acd0658317a8876ddf27df1b8d3f042129671a0e37a4a6a878bd4b6c66f0595f8c2a0a5e902cb69294f7748d35de6685cc600"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x80)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
bpf$auto(0x5, 0x0, 0x171)
socket(0x18, 0xa, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/power/runtime_active_time\x00', 0x80000, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/version\x00', 0x40802, 0x0)
pread64$auto(r1, 0x0, 0xffff, 0xd7)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.3/usb4/devpath\x00', 0xc3100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/49, 0x31)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setrlimit$auto(0x10000686, 0x0)
userfaultfd$auto(0x1)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
unshare$auto(0x8000400)
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0)
ioctl$auto_CEC_RECEIVE(r4, 0xc0386106, 0x0)
executing program 3:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttye0/power/control\x00', 0x4c0080, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000)
sendfile$auto(r0, r0, 0x0, 0x3)
executing program 2:
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b16130079"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5})
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2)
quotactl_fd$auto(r0, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77")
get_mempolicy$auto(&(0x7f0000000180)=0x6, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ppoll$auto(&(0x7f0000000000)={r3, 0x81, 0x9}, 0x9, 0x0, &(0x7f00000000c0), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60)
io_uring_setup$auto(0x4, &(0x7f0000000280)={0x1, 0xd, 0x800ef, 0x9, 0x0, 0x6, 0xffffffffffffffff, [0x40000007, 0xc, 0x4], {0xfc, 0x4, 0x0, 0x2, 0x80007, 0x0, 0xfefffffa, 0x8, 0x23}, {0x2, 0x7, 0x1, 0x9010, 0x7f, 0x7ffffff8, 0x1, 0x8, 0x6}})
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
prctl$auto(0x23, 0xe, 0x1ff, 0x68, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210026bd7000fedbdf250100100014000200776730000000000000000000000076a6ed4427050000000000000080002e023a69d4270056b37a195cbfad7d24b3e91cfdb349199089e738eb4b792e87d6afac6d39c5a1dc2d8944df86515234f31371c0dcccddc6b78c8f20e76e9786e6ab953025e660a3eb75d7e9d31791f3823eeab3755db6bce4e93328d79c5df0bbefa7b6c5627e9d6f424174f009060b8e5b96095ffb6f6e979b62f4633e891bf68edfc316b5a96a7b61784c35d92bae90ae396d868f66e4f6e820a3cc90b7149d2705f38d6e442ee9fb954511e048a3f57473bfb159062b4f51cdf653b8aa5997c2bdd4e5798475999fda56d30fb290bce9474f45a612c2781ec70a230c51cabd86c1e168d60b46a46d60243152733c41988d0b2b44b69ea2b247e072f556b7b92e9d988676829d6577293216cc5af12de4394616bebedbaaba298e60ef9176b6c5c61c8f95f8fd8b59ca006f0ddaecbb67bf00151ad3af21327a4ccb33f5a2bfc8d8db3618e9ec77ac82f5954cf2ffd3cb28b7e3950d9035c93c7b06dba0e84bb29aa01e63bfb1010a9519678815f9cc45a569080c769233558b1c600761220d592e8f0f1330352d974be38bac4c67d77a30fb250cb4736fad293fcf40040c2d9646463231f4a838de38d7309acd0658317a8876ddf27df1b8d3f042129671a0e37a4a6a878bd4b6c66f0595f8c2a0a5e902cb69294f7748d35de6685cc600"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x80)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
ioperm$auto(0x7, 0x6, 0x1005)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x4, 0x6, 0x1, 0x7, "e72171dd9872b555facc1e8f"})
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
write$auto(0x3, 0x0, 0x100082)
set_mempolicy$auto(0x4005, &(0x7f0000000000)=0x1, 0x4)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0x5}, 0x6f4)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0xc)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x192, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x1, 0x8, 0x1, 0xfffffffffffffff8})
r2 = socket(0x10, 0x2, 0x0)
umount2$auto(&(0x7f0000000100)='\x00', 0x9)
io_uring_register$auto(r2, 0x0, &(0x7f0000000300), 0xfffffff3)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, r2)
mknod$auto(&(0x7f0000000240)='./file0\x00', 0x1798, 0x4)
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0)
read$auto(r0, &(0x7f0000000340)='/\x00\x9br\xbb\xf8\x92\"8\xb9\t0\x1c\xe9\xcdiN\xa5\xf1\x00a\t\xc3.\x9f\xaew\x83\xd0\xde\xe0\xe9DLk\xb7\xc0\xc1\vv\xaa\xe7\'\xd7\'\xf1nL\xf1\x86s\xa2\xb0\a\x1e\x81Qa\xd7R\x18R\x86bo\x87$^\xa4:&M\x99\xd0@#S\x05\xb7\x0e\x7f}\xf0\x1a\xa4\x85=\xc4=\xb7\xf2\xc1\xcfQD\xea\xda\xf6\x03\xa8\xc1$\x0f\xd2K\b\xcd\x1c\x12\xd7\x8dFz\xe0\xbf\xad\x11a\b\x18\xaf\xa5\xf8\x8f\xc8\xcb\xbd\xb0K\x1b\xca\xc5M\xfb\x14\x87o\xca~\xbb\xce\x18\xb1Y\xda>\xbc\xdfI\xef\xaa\x81\xe8=br\xd1\xe2\x9b\x0e\x1d?,\xe0\x05\xdd%<\xec\xc3\xe2C\x9e0\xc6\xa2\a8E\x93{\xbe\xe0Z\x13\x1d\x0fB]n\x87\x89\xb8\xf1\xa6xo2\xe8\x94\xd8\xb3\xec\x9f\\\xac\x10!\x17&\x13Ik\xa5W\xdf<\x01Q\xdc,S\xc9\xbe\xf5\xc9s3I\xc1\xda\xf8\xa8K\to\xa8\xf6\xe6U\xd0\xee\xe8\a\xc2\x84\xd1\xe8\xf2\xff0n\xdf\x14\x91*!\xac\xd3g\'w`<\xd68i\x13\xa5,\x1d\x12\xd6\xcdjw\xe7\x98\xb9\xc5\xb2\xa0\xebu\x1d\xf5\x03\x84\xb2\xe3\xf6-.\x8e', 0x179)
prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff)
setreuid$auto(0x0, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x103, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
socket(0x2b, 0x1, 0x1)
r2 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r2, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x27, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x0, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffd]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0)
executing program 1:
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r1 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0)
read$auto(r1, 0x0, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x7, 0x0) (async, rerun: 64)
r2 = fsopen$auto(0x0, 0x1) (rerun: 64)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) (async)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) (async)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) (async)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0)
executing program 2:
mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0x7, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r1 = socket(0x2, 0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r2 = socket(0x2, 0x1, 0x106)
bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x103, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
write$auto_snd_pcm_oss_f_reg_pcm_oss(r3, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, r5, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000128bd7000fbdbdf255c00000008004a0007010000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4804)
openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_suspend\x00', 0x0, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x2)
socket(0x11, 0x1, 0x8)
mprotect$auto(0x8000000000000, 0xff, 0x3)
setgroups$auto(0x8, &(0x7f0000000000)=0xf)
r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x28, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x4}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800)
executing program 1:
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b1613007984"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2)
quotactl_fd$auto(r0, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77")
get_mempolicy$auto(0x0, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ppoll$auto(&(0x7f0000000000)={r3, 0x81, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60)
io_uring_setup$auto(0x4, &(0x7f0000000280)={0x1, 0xd, 0x800ef, 0x9, 0x0, 0x6, 0xffffffffffffffff, [0x40000007, 0xc, 0x4], {0xfc, 0x4, 0x0, 0x2, 0x80007, 0x0, 0xfefffffa, 0x8, 0x23}, {0x2, 0x7, 0x1, 0x9010, 0x7f, 0x7ffffff8, 0x1, 0x8, 0x6}})
r6 = getpid()
process_vm_readv$auto(r6, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
prctl$auto(0x23, 0xe, 0x1ff, 0x68, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210026bd7000fedbdf250100100014000200776730000000000000000000000076a6ed4427050000000000000080002e023a69d4270056b37a195cbfad7d24b3e91cfdb349199089e738eb4b792e87d6afac6d39c5a1dc2d8944df86515234f31371c0dcccddc6b78c8f20e76e9786e6ab953025e660a3eb75d7e9d31791f3823eeab3755db6bce4e93328d79c5df0bbefa7b6c5627e9d6f424174f009060b8e5b96095ffb6f6e979b62f4633e891bf68edfc316b5a96a7b61784c35d92bae90ae396d868f66e4f6e820a3cc90b7149d2705f38d6e442ee9fb954511e048a3f57473bfb159062b4f51cdf653b8aa5997c2bdd4e5798475999fda56d30fb290bce9474f45a612c2781ec70a230c51cabd86c1e168d60b46a46d60243152733c41988d0b2b44b69ea2b247e072f556b7b92e9d988676829d6577293216cc5af12de4394616bebedbaaba298e60ef9176b6c5c61c8f95f8fd8b59ca006f0ddaecbb67bf00151ad3af21327a4ccb33f5a2bfc8d8db3618e9ec77ac82f5954cf2ffd3cb28b7e3950d9035c93c7b06dba0e84bb29aa01e63bfb1010a9519678815f9cc45a569080c769233558b1c600761220d592e8f0f1330352d974be38bac4c67d77a30fb250cb4736fad293fcf40040c2d9646463231f4a838de38d7309acd0658317a8876ddf27df1b8d3f042129671a0e37a4a6a878bd4b6c66f0595f8c2a0a5e902cb69294f7748d35de6685cc600"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x80)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
ioctl$auto(r1, 0x4004af07, r0) (fail_nth: 1)
executing program 0:
unshare$auto(0xcc2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400d0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40010}, 0x4040014)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff028}})
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socket(0xa, 0x6, 0x0)
mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
connect$auto(0x3, 0x0, 0x55)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu1\x00', 0x80802, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
truncate$auto(&(0x7f00000000c0)='./cgroup\x00', 0x100000000000001)
unshare$auto(0x40000080)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
epoll_create$auto(0x0)
fcntl$auto(0x0, 0x407, 0x100000)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x20040, 0x0)
mlock$auto(0x4, 0x0)
mlock$auto(0x7c89, 0x47fff)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x1a3000, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$auto(r2, 0x50434903, 0x1)
setrlimit$auto(0x1000000007, 0x0)
getsid$auto(0xffffffffffffffff)
executing program 2:
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_allowed_congestion_control\x00', 0x0, 0x0)
read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fedbdf250300000004000800100003800c00148008000100", @ANYRES32=r1, @ANYBLOB="12000100898771f1c19f1779048590822ad90000040002"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
pipe$auto(0x0)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
write$auto(r3, 0x0, 0x40)
r4 = geteuid()
setreuid$auto(r4, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r5 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0)
r6 = socket(0xa, 0x5, 0x84)
sendto$auto(r6, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa}, 0x1f)
ppoll$auto(&(0x7f0000000040)={r5, 0x9, 0x5}, 0x9, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r7 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, [0x0, 0x4, 0x0, 0xffffffffeffffffd, 0x0, 0x0, 0x0, 0x3, 0x80000001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x400200, 0x0, 0x80000000000, 0x400000000000000, 0x0, 0x8000000000000000, 0x80000000000000, 0x2, 0x0, 0x0, 0xfffffffffffffbfe, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffe, 0x80000000, 0x0, 0xd, 0x0, 0x8, 0x0, 0x0, 0x80000001, 0x1]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
msgctl$auto_IPC_SET(0x6, 0x1, &(0x7f00000000c0)={{0x101, <r8=>0xee01, 0xffffffffffffffff, 0x4, 0x8, 0x800, 0x30}, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0xd, 0x7fffffffffffffff, 0x3ff, 0xffffffffffffff0d, 0x3, 0x0, 0xfff7, 0x4, 0x6, @raw=0x7, @inferred=0xffffffffffffffff})
msgctl$auto_IPC_SET(0x9, 0x1, &(0x7f00000001c0)={{0x8f, 0xffffffffffffffff, <r9=>0xee01, 0x6, 0x2, 0x0, 0x2}, &(0x7f0000000140), &(0x7f0000000180)=0x4, 0x1, 0x1ff, 0x4, 0x2, 0x81, 0x9, 0x7fff, 0x7, @inferred=0xffffffffffffffff, @raw=0x2a})
keyctl$auto_KEYCTL_DH_COMPUTE(0x17, r4, r8, r9, 0x7)
executing program 1:
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8)
r0 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/sessionid\x00', 0x80000, 0x0)
r1 = semctl$auto_IPC_RMID(0xf, 0x7, 0x0, 0x3)
fcntl$auto_F_SETPIPE_SZ(r0, 0x407, r1)
r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
socket(0x2, 0x3, 0x1)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(0x3, 0x89e0, 0x91)
ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, 0xfffffffffffffffd)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
close_range$auto(r0, r0, 0x400)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
r2 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/8:0/wb_stats\x00', 0x2080, 0x0)
mmap$auto(0x7fffffff, 0x100000000040009, 0x8, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000005780)=ANY=[@ANYBLOB='dT\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x5464}, 0x1, 0x0, 0x0, 0xc000}, 0x4010)
r5 = io_uring_setup$auto(0x6, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYBLOB="2e00f5"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000640)={{0xffffffffffffffff, &(0x7f0000000300)="cf61e5a5a45b2d41748194a28e85c574be448a9c7e5307bb7aeb8acbeec6da15c66f536fb46b282f1671ee7059d990f96381404482bfcc331516b212dcf094491a9c0f97c5867a4272dac40c127849f97e3760dd775409923b949f9a4c4ace8ce10290266882696a57502202c266ff9b07299e3d84f9431009733c4c9844a05cf4b2c748af843e21f9b12cab1dc9056dae97f10c98cfd573516bd8ce6845115ca61d5db953bca45db380560f5990b0ca5e1c823617dbe016", 0x6, &(0x7f00000003c0)="804f4b5e113e0b3950d65bd9472f82b9bf6e9a0a86eef44f5873bf6d95e6676f2d0770463243628f01d0b3b6a3db310e0182ac03fc8dc8d7b64882536059cedf2ea292718a21076938822ea1e652ccca9b0d38c2f0262754", 0xf40, &(0x7f0000000440)="e2eb06921b1210e551b39f2929d8a9f1fd0e9adbbbe497543d03f80ce0e7c8c0c25d2d732e22b2b985930e705cfdfb76fa32c64eaa0bfa0c108eb88ff9b5d35bca37ba5b0bb14c7abb156f9fe3134d308bcd", &(0x7f00000004c0)=0x80000000}, 0x1, &(0x7f0000000600)={0x18, 0x56e, &(0x7f0000000500)="efd7bfe016953d94fa9904a558d3cac2d153d68b128dfb6da457ac98861979aaa425ec20b30a34d69e355ed0ed26b6ff451a1d108b0ba07b77a1d980043aac559b89e74929efc0383a905c7db39d7352187fc5ef26c1ef0f1f997d8a5416abc58f4aeadc777a37460910ee139ab7e72c49a60bfdc97e3b207d3f4493912b627dda08ca03b390d842f78a9cf9085bd6513832f259a3", &(0x7f00000005c0)="73435806c32997dc8e77f1fb4c5b15f996135a8ffb4709", 0x7ff, 0x7f}})
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto_cgwb_debug_stats_fops_(r2, &(0x7f0000000040)=""/185, 0xb9)
ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f0000000100)={<r6=>r1, 0x5})
ioctl$auto(r6, 0x0, r1)
executing program 3:
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b16130079"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5})
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2)
quotactl_fd$auto(r0, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77")
get_mempolicy$auto(&(0x7f0000000180)=0x6, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ppoll$auto(&(0x7f0000000000)={r3, 0x81, 0x9}, 0x9, 0x0, &(0x7f00000000c0), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60)
io_uring_setup$auto(0x4, &(0x7f0000000280)={0x1, 0xd, 0x800ef, 0x9, 0x0, 0x6, 0xffffffffffffffff, [0x40000007, 0xc, 0x4], {0xfc, 0x4, 0x0, 0x2, 0x80007, 0x0, 0xfefffffa, 0x8, 0x23}, {0x2, 0x7, 0x1, 0x9010, 0x7f, 0x7ffffff8, 0x1, 0x8, 0x6}})
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
prctl$auto(0x23, 0xe, 0x1ff, 0x68, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x80)
executing program 1:
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b16130079"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5})
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2)
quotactl_fd$auto(r0, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77")
get_mempolicy$auto(&(0x7f0000000180)=0x6, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ppoll$auto(&(0x7f0000000000)={r3, 0x81, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60)
io_uring_setup$auto(0x4, &(0x7f0000000280)={0x1, 0xd, 0x800ef, 0x9, 0x0, 0x6, 0xffffffffffffffff, [0x40000007, 0xc, 0x4], {0xfc, 0x4, 0x0, 0x2, 0x80007, 0x0, 0xfefffffa, 0x8, 0x23}, {0x2, 0x7, 0x1, 0x9010, 0x7f, 0x7ffffff8, 0x1, 0x8, 0x6}})
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
prctl$auto(0x23, 0xe, 0x1ff, 0x68, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x80)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
connect$auto(0xffffffffffffffff, 0x0, 0x55)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited\x00', 0xa000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000)
clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf)
semctl$auto(0x80001ff, 0x804, 0x3, 0x4)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r0, 0x4048aecb, 0x0)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
ioperm$auto(0x7, 0x6, 0x1005)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x4, 0x6, 0x1, 0x7, "e72171dd9872b555facc1e8f"})
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
write$auto(0x3, 0x0, 0x100082)
set_mempolicy$auto(0x4005, &(0x7f0000000000)=0x1, 0x4)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0x5}, 0x6f4)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0xc)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x192, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x1, 0x8, 0x1, 0xfffffffffffffff8})
r2 = socket(0x10, 0x2, 0x0)
umount2$auto(&(0x7f0000000100)='\x00', 0x9)
io_uring_register$auto(r2, 0x0, &(0x7f0000000300), 0xfffffff3)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, r2)
mknod$auto(&(0x7f0000000240)='./file0\x00', 0x1798, 0x4)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-socketpair$auto-setsockopt$auto-bind$auto-connect$auto-openat$auto_proc_pid_set_timerslack_ns_operations_base-socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-mmap$auto-close_range$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
connect$auto(0xffffffffffffffff, 0x0, 0x55)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
single: successfully extracted reproducer
found reproducer with 27 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-socketpair$auto-setsockopt$auto-bind$auto-connect$auto-openat$auto_proc_pid_set_timerslack_ns_operations_base-socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-mmap$auto-close_range$auto-openat$auto_force_devcoredump_fops_hci_vhci
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
connect$auto(0xffffffffffffffff, 0x0, 0x55)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-socketpair$auto-setsockopt$auto-bind$auto-connect$auto-openat$auto_proc_pid_set_timerslack_ns_operations_base-socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-mmap$auto-close_range$auto-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
connect$auto(0xffffffffffffffff, 0x0, 0x55)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-socketpair$auto-setsockopt$auto-bind$auto-connect$auto-openat$auto_proc_pid_set_timerslack_ns_operations_base-socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
connect$auto(0xffffffffffffffff, 0x0, 0x55)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: WARNING in hci_devcd_init
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-socketpair$auto-setsockopt$auto-bind$auto-connect$auto-openat$auto_proc_pid_set_timerslack_ns_operations_base-socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
connect$auto(0xffffffffffffffff, 0x0, 0x55)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-socketpair$auto-setsockopt$auto-bind$auto-connect$auto-openat$auto_proc_pid_set_timerslack_ns_operations_base-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
connect$auto(0xffffffffffffffff, 0x0, 0x55)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-socketpair$auto-setsockopt$auto-bind$auto-connect$auto-openat$auto_proc_pid_set_timerslack_ns_operations_base-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
connect$auto(0xffffffffffffffff, 0x0, 0x55)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-socketpair$auto-setsockopt$auto-bind$auto-connect$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
connect$auto(0xffffffffffffffff, 0x0, 0x55)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-socketpair$auto-setsockopt$auto-bind$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-socketpair$auto-setsockopt$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_rtc_dev_fops_dev-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x2, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-io_uring_setup$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
io_uring_setup$auto(0x2, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: WARNING in hci_devcd_init
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-close_range$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0x3)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-socket-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nl80211-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
reproducing took 1h46m20.065350558s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff8880681fc800 by task syz.0.616/6818

CPU: 0 UID: 0 PID: 6818 Comm: syz.0.616 Not tainted 6.14.0-rc2-syzkaller-00346-gba643b6d8440 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:398
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fce6678cde9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffea548df98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fce669a5fa0 RCX: 00007fce6678cde9
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007fce6680e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fce669a5fa0 R14: 00007fce669a5fa0 R15: 0000000000000003
 </TASK>

Allocated by task 5994:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:179
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x735/0x1c40 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5994:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x2c4/0x4d0 mm/slub.c:4757
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3ff/0xb70 fs/file_table.c:464
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x24ed/0x26c0 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff8880681fc800
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff8880681fc800, ffff8880681fcc00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x681f8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000003 ffffea0001a07e01 ffffffffffffffff 0000000000000000
head: 0000000700000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5989, tgid 5989 (syz-executor), ts 763336235346, free_ts 762419833053
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4739
 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xc5d/0x1720 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __kmalloc_cache_noprof+0xfa/0x410 mm/slub.c:4320
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 tipc_link_create+0x17a/0x1040 net/tipc/link.c:490
 tipc_link_bc_create+0x114/0x480 net/tipc/link.c:564
 tipc_bcast_init+0x1c7/0x370 net/tipc/bcast.c:701
 tipc_init_net+0x36b/0x430 net/tipc/core.c:84
 ops_init+0x1df/0x5f0 net/core/net_namespace.c:138
 setup_net+0x21f/0x860 net/core/net_namespace.c:362
 copy_net_ns+0x2b4/0x6c0 net/core/net_namespace.c:516
 create_new_namespaces+0x3ea/0xad0 kernel/nsproxy.c:110
page last free pid 5952 tgid 5952 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660
 vfree+0x174/0x950 mm/vmalloc.c:3383
 kcov_put kernel/kcov.c:439 [inline]
 kcov_put+0x2a/0x40 kernel/kcov.c:435
 kcov_close+0xd/0x20 kernel/kcov.c:535
 __fput+0x3ff/0xb70 fs/file_table.c:464
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x24ed/0x26c0 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff8880681fc700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff8880681fc780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff8880681fc800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff8880681fc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff8880681fc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff8880681fc800 by task syz.0.616/6818

CPU: 0 UID: 0 PID: 6818 Comm: syz.0.616 Not tainted 6.14.0-rc2-syzkaller-00346-gba643b6d8440 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 force_devcd_write+0x317/0x330 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:398
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fce6678cde9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffea548df98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fce669a5fa0 RCX: 00007fce6678cde9
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007fce6680e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fce669a5fa0 R14: 00007fce669a5fa0 R15: 0000000000000003
 </TASK>

Allocated by task 5994:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:179
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x735/0x1c40 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5994:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x2c4/0x4d0 mm/slub.c:4757
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3ff/0xb70 fs/file_table.c:464
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x24ed/0x26c0 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff8880681fc800
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff8880681fc800, ffff8880681fcc00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x681f8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000003 ffffea0001a07e01 ffffffffffffffff 0000000000000000
head: 0000000700000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5989, tgid 5989 (syz-executor), ts 763336235346, free_ts 762419833053
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4739
 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xc5d/0x1720 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __kmalloc_cache_noprof+0xfa/0x410 mm/slub.c:4320
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 tipc_link_create+0x17a/0x1040 net/tipc/link.c:490
 tipc_link_bc_create+0x114/0x480 net/tipc/link.c:564
 tipc_bcast_init+0x1c7/0x370 net/tipc/bcast.c:701
 tipc_init_net+0x36b/0x430 net/tipc/core.c:84
 ops_init+0x1df/0x5f0 net/core/net_namespace.c:138
 setup_net+0x21f/0x860 net/core/net_namespace.c:362
 copy_net_ns+0x2b4/0x6c0 net/core/net_namespace.c:516
 create_new_namespaces+0x3ea/0xad0 kernel/nsproxy.c:110
page last free pid 5952 tgid 5952 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660
 vfree+0x174/0x950 mm/vmalloc.c:3383
 kcov_put kernel/kcov.c:439 [inline]
 kcov_put+0x2a/0x40 kernel/kcov.c:435
 kcov_close+0xd/0x20 kernel/kcov.c:535
 __fput+0x3ff/0xb70 fs/file_table.c:464
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x24ed/0x26c0 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff8880681fc700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff8880681fc780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff8880681fc800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff8880681fc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff8880681fc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================