Extracting prog: 15m45.753709934s
Minimizing prog: 1h23m35.496113181s
Simplifying prog options: 0s
Extracting C: 2m33.391853157s
Simplifying C: 44m52.63140567s


extracting reproducer from 52 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-get_robust_list$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-fcntl$auto-syz_genetlink_get_family_id$auto_ovs_flow-socket$nl_generic-sendmsg$auto_OVS_FLOW_CMD_GET-sendmmsg$auto-fcntl$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
fcntl$auto(0x8000000000000001, 0x5, 0x8)
r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
sendmmsg$auto(r5, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x3, 0xa505}, 0x7ff}, 0x7, 0x4008)
fcntl$auto(0x8000000000000001, 0x26, 0x8)

program did not crash
single: failed to extract reproducer
bisect: bisecting 52 programs with base timeout 30s
testing program (duration=43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8, 30, 30, 21, 30, 30, 19, 30, 4, 15, 13, 30, 30, 29, 20, 20, 29, 20, 12, 12, 30, 29, 30, 22, 30, 24, 24, 23, 29, 30, 26, 30, 30, 40, 30, 30, 40, 6, 6, 17, 6, 30, 30, 30, 25, 5, 29, 6, 25, 30, 17]
detailed listing:
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/binder/parameters/stop_on_user_error\x00', 0x2, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)='1', 0x1)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0)
read$auto(r1, 0x0, 0x39b8)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/uts\x00')
ioctl$auto(0x3, 0xc0383e04, r2)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f0000000100)={0x28, r1, 0x38f, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000)
r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r4)
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)=ANY=[@ANYBLOB="8e560000", @ANYRES16=r5, @ANYBLOB="01002ebd5100fbcbdf250100000004000180072e0180"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x42a120, 0x0)
r6 = getpid()
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r7, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000480)=ANY=[@ANYBLOB="42000000d32f9d30eedbea29a383b6ac3f338d8295d4810510763b3d7bc1913b16efa5b73e1c2a9681cf7d2ebe600d3dfe7d26927add6765975f1b08b919f9fb450a598fb7c0f25d66bf16271b7ce971306417fade772d3d82555f1fb45beb1b72ae684454153feed1578f0ea689bd3c6cce469611c724b2ff6fb1a46276fcfb20e418b098993c0ecae6f07b00bd4072c77b2411701faf426f40533e8fbd834b53b0168cfff6b046c2e90198a18001e65828e6749a680f4b34ac9666c5209113c3f1e1331e910e4b798732a28266ad60b9faf3a5930e5970e9d2a2704c46daedc9914d736d6c45acad3c9c0f7c902c57cd5993d3a733bc3140a28950ee5fc0bbc150a226e90717a2f94c43073457f80184a98f659070e113669a90ad5d6acc2a72e68eaf74e12da78cf06e768f3fc9ab511529", @ANYRES16=r8, @ANYBLOB="010029bd7000fedbdf250200000004000180200001801c002f8014004200fe8000000000000000000000000000aa0400f780"], 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000)
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1a9}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x7}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xff}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x33}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x80c1)
r9 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dsp\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r9, 0x80045017, &(0x7f0000000c00))
socket(0x1d, 0x1, 0x2300)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
ioctl$auto(0x3, 0x400454ca, 0x38)
r10 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0)
read$auto(r10, 0x0, 0x4)
ioctl$auto_TUNSETTXFILTER(r3, 0x400454d1, 0x0)
r11 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r11, 0xaf01, 0x5)
ioctl$auto(r11, 0x4004af07, 0xffffffffffffffff)
socket(0x26, 0x2, 0x100)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x40, 0x10006, 0x0)
shutdown$auto(0x200000003, 0x2)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r0, 0x0, 0x7ff, 0x400)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x0, 0x27, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xfffffffffffffffa, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
socket(0x23, 0x80805, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000)
r2 = socket(0x15, 0xa, 0xfffffffb)
getsockopt$auto(r2, 0x114, 0x2714, 0xfffffffffffffffc, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0)
read$auto_vcs_fops_vc_screen(r3, &(0x7f0000000080)=""/238, 0xffffffe9)
r4 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$auto_nvram_misc_fops_nvram(r4, &(0x7f0000000080)=""/209, 0xd1)
ioctl$auto_NVRAM_INIT(r4, 0x7040, 0x0)
membarrier$auto(0x2, 0x0, 0x9)
r5 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r5, &(0x7f0000001680)="a7", 0x80000)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
msync$auto(0xf, 0x5, 0xd362)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2b, 0x1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) (async)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x440, 0x0) (async)
r0 = socket(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b82, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram0/io-timeout-fail\x00', 0x2, 0x0) (rerun: 64)
write$auto(r2, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc7c, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x48050) (async, rerun: 64)
sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r5)
sendto$auto(r0, &(0x7f0000000300)="04cb8b0728edf11b884069e25b7e362364e7bf9b673fd5734da596556884a909e59d74cca9445100eab59b029cf8767f8564248a1b2b7f4e7bc9ac29692823c5326823bc5be7b365eb3e373fb88f6f55546eec6a151a84e5c03bd4f058834f8aab0ccbb87a363a5a7a9b0b28263780043f52272b72344f7e4ee4d71102afb99f7b80e9a1ed0572b7afa4eedb70230bff8f06694c1cf55a75f7816c75ccf3f412b949b0e7a5a4a41077", 0x8001, 0x400, &(0x7f0000000280)=@nl=@unspec, 0x7)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800cb101ab48ac98faf406b5e324160b42a74e372ee305b556f8bf05f173e640f89bd449c71a4962d2b9a2775d7138c20e7a3257233bdb95a7dc16937154cafafcf5c355f7d9d49bc9ae73b1b675f0549509a284526298724eadac8ce0030b1f8b6b162d2207594a1598ef28f32afc899fbb28d03d7f132a4c996419624ea9e1f2b1f5ca68c7dda8679b14862789e147b4851587d2c5d55e53724407ef0ee63848aee4ba858a5c479ada7b727812b461526318781269efd86da187b6ea516ef448be31b2b4be09b1da9b0a800"/218, @ANYRES16=r6, @ANYBLOB="08002abd7000fbdbdf250400000014001a80100004800c0001800500070004000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000801)
executing program 0:
mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0x87, &(0x7f0000000040)="c74e1ce1137494fde9df2f64834c6096c269be2f844fddb8680f4ae8bc2700"/40, 0x8001, 0x5f7676ca}, 0x8008}, 0x1, 0x6) (async)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) (async)
r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/zswap/pool_total_size\x00', 0x2, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) (async)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
init_module$auto(0x0, 0xffff9, 0x0) (async)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
mmap$auto(0xeffd, 0x8, 0x1000000003, 0x19, r2, 0x8000)
move_pages$auto(0x0, 0x2e747e76, 0x0, 0x0, 0x0, 0x2)
socketpair$auto(0x1d, 0x6, 0x3, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
open(0x0, 0x22240, 0x118)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x6, 0x17, 0x0, 0xfb3) (async)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000140)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
bpf$auto(0x5, 0x0, 0x7)
close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async)
socket(0x11, 0x80003, 0x300) (async)
socket(0x29, 0x5, 0x0) (async)
open(0x0, 0xea640, 0xb5d1af1605322d96)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8802, 0x0) (async)
write$auto(0x3, 0x0, 0xfdef) (async)
read$auto(r0, &(0x7f0000000000)='#.&\x00', 0xc1) (async)
madvise$auto(0x0, 0x8000000000000000, 0x15)
socket(0x18, 0x2, 0x0)
executing program 32:
mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0x87, &(0x7f0000000040)="c74e1ce1137494fde9df2f64834c6096c269be2f844fddb8680f4ae8bc2700"/40, 0x8001, 0x5f7676ca}, 0x8008}, 0x1, 0x6) (async)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) (async)
r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/zswap/pool_total_size\x00', 0x2, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) (async)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
init_module$auto(0x0, 0xffff9, 0x0) (async)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
mmap$auto(0xeffd, 0x8, 0x1000000003, 0x19, r2, 0x8000)
move_pages$auto(0x0, 0x2e747e76, 0x0, 0x0, 0x0, 0x2)
socketpair$auto(0x1d, 0x6, 0x3, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
open(0x0, 0x22240, 0x118)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x6, 0x17, 0x0, 0xfb3) (async)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000140)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
bpf$auto(0x5, 0x0, 0x7)
close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async)
socket(0x11, 0x80003, 0x300) (async)
socket(0x29, 0x5, 0x0) (async)
open(0x0, 0xea640, 0xb5d1af1605322d96)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8802, 0x0) (async)
write$auto(0x3, 0x0, 0xfdef) (async)
read$auto(r0, &(0x7f0000000000)='#.&\x00', 0xc1) (async)
madvise$auto(0x0, 0x8000000000000000, 0x15)
socket(0x18, 0x2, 0x0)
executing program 2:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop5/mq/0/nr_reserved_tags\x00', 0x80880, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
openat$auto_transactions_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "9e6a5f99bb0e"}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/audit\x00', 0x20080, 0x0)
read$auto_tomoyo_operations_securityfs_if(r2, 0x0, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
socket(0x11, 0x3, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_NET_GET(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000400)={0x14, r4, 0x492a92567041df2f, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
read$auto(0x3, 0x0, 0x8)
executing program 2:
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0)
r0 = socket(0x1b, 0x3, 0x76)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0xa, 0x1, 0x100)
modify_ldt$auto(0x1, 0x0, 0x10)
r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
pread64$auto(r3, 0x0, 0x7ff, 0x400)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x7, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x1, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x90000001, 0x3, 0x1, 0x5, 0x5]}, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0)
unshare$auto(0x40000080)
executing program 2:
prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x0)
executing program 2:
mmap$auto(0x0, 0x8, 0xe2, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
io_uring_setup$auto(0xc, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0)
read$auto(0x3, 0x0, 0x80)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
r2 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/timestamp_mode\x00', 0x300, 0x0)
read$auto_trace_time_stamp_mode_fops_trace(r2, &(0x7f0000008340)=""/88, 0x58)
bind$auto(0x3, 0x0, 0x6a)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x80201, 0x0)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
close_range$auto(0x2, 0xfffffffffffff000, 0x2)
bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0x9, 0x2, "cacd2dff11"}, @HWSIM_ATTR_NO_VIF={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xb06af94f6e038a6)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x2, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
read$auto(0x3, 0x0, 0x7)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x13, 0x202000a, 0x8000000000000003, 0x4000000019, r0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
close_range$auto(r1, 0x8, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';')
socket(0x21, 0x2, 0x2)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000)
prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
setgroups$auto(0x10001, &(0x7f0000000080)=0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
getpid()
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0}, 0x5)
r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r3, &(0x7f0000000040)='nbd\x00', 0x4)
setresuid$auto(0x2, 0x7, 0x8080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x6, 0x15, 0x0, 0xfb3)
executing program 33:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x13, 0x202000a, 0x8000000000000003, 0x4000000019, r0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
close_range$auto(r1, 0x8, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';')
socket(0x21, 0x2, 0x2)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000)
prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
setgroups$auto(0x10001, &(0x7f0000000080)=0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
getpid()
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0}, 0x5)
r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r3, &(0x7f0000000040)='nbd\x00', 0x4)
setresuid$auto(0x2, 0x7, 0x8080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x6, 0x15, 0x0, 0xfb3)
executing program 4:
r0 = prctl$auto(0x3a, 0x1, 0x0, 0x2, 0x203)
bind$auto(r0, 0x0, 0x7fffffff)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x1d, 0x3, 0x1)
getsockopt$auto(r3, 0x65, 0x2, 0xffffffffffffffff, 0x0)
write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
write$auto(r2, 0x0, 0x9)
mmap$auto(0x0, 0x40009, 0xdf, 0x10000000009b72, 0x7, 0x28000)
arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x1490)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
socket(0xa, 0x3, 0x3a)
semctl$auto(0x80001ff, 0x804, 0x13, 0x4)
setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567)
openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xecc6, 0x0, 0x7352, 0x2d, 0x200000000045f, 0x6, 0x7, 0x3, 0x2, 0x9, 0x36e, 0x6, 0x2, 0x3000, 0x9, 0x8, 0x10003, 0x8, 0xffffffffffffffff, 0x0, 0x5, 0x1ffb, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x4, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x3, 0x3ba0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0x11)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
memfd_create$auto(0x0, 0xb)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00'})
rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}})
r5 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r5, 0x0, 0x5, 0x100)
executing program 4:
rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000028, 0xd98, 0x2}, 0x0, 0x7ffffffff000, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10f, 0x82, 0x0, 0x14)
read$auto(r0, 0x0, 0xcefbce6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
fstat$auto(0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
ioctl$auto(0xc8, 0x401054d5, 0x0)
read$auto_nsim_dev_trap_fa_cookie_fops_dev(r0, &(0x7f0000000000)=""/156, 0x9c)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
kill$auto(0x0, 0x11)
syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 4:
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket(0x2, 0x1, 0x106)
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x101, 0x0)
ioctl$auto_EVIOCGRAB(r0, 0x40044590, &(0x7f0000000f40)=0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(r0, r0, 0x7be9)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404cc91}, 0x24040081)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r1 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x200, 0xb}, 0x800009}, 0x80005, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x802, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, 0x5, 0xcad7)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0xb)
write$auto(0x3, 0x0, 0xffd8)
executing program 4:
r0 = gettid()
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4)
ioperm$auto(0x3, 0x5, 0x149)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x4)
socket(0xa, 0x5, 0x84)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999", @raw=0x3cf51fcb})
newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, <r2=>0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0xb456, 0x9, 0x53}, 0x1)
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8)
ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x8)
kill$auto(r0, 0x11)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x3, 0x0, 0x7, 0xb, 0x3, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbf4250200080008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x14, 0x0, 0x73d, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x8010)
shmctl$auto_IPC_INFO(0x4, 0x3, &(0x7f0000000500)={{0x1, r2, 0x0, 0x7, 0xfc42, 0x10, 0x1bb3}, 0x10000, 0x9, 0x3, 0xc000000000000000, @raw=0x3, @raw=0xe28, 0x0, 0x0, &(0x7f0000000180)="d4cc8cb0", &(0x7f0000000440)="8435e1970f564d3e46aa187174d3c0e81683417238e9d2a2570430779f035010cc676306863a844115f7aeb08cb216f22560378c3203a49004f023c470f13e8b9c15a4465f27a3b5f5e55e8369bbe628699c0c85a85182ef9137c5bd538ac6010be0a6007f4e1a1c62366265b5627882d5431a8dc569d9739f6dd50a70f8ade11173183f380acbbfca53"})
r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x108800, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare$auto(0x40000080)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
select$auto(0xfff, &(0x7f00000001c0)={[0x8000000000000000, 0xff14, 0x7, 0x8, 0xb, 0x3, 0x9, 0x5, 0x9, 0x7fff, 0x7, 0x27, 0x0, 0x5, 0xfff, 0xfffffffffffffffc]}, &(0x7f00000002c0)={[0x9, 0xfe0000000, 0x3, 0xfffffffffffff05b, 0xfffffffffffffff9, 0x7fff, 0x40, 0x5, 0x4, 0x5, 0x0, 0x8000000000000000, 0x0, 0x6, 0x81, 0x81]}, &(0x7f0000000340)={[0x9, 0xf, 0x40b48540, 0x876, 0x5, 0x8, 0x8000000000000000, 0x2, 0x9, 0x8, 0x29ff, 0x8c, 0x29, 0x11ce, 0x0, 0x3]}, &(0x7f00000000c0)={0x40, 0x3})
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(0x3, 0x4038ae7a, 0x38)
executing program 4:
r0 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_thresh\x00', 0x6c0000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
eventfd$auto(0xc)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x0)
mmap$auto(0x0, 0x9, 0x2, 0x10, r0, 0xffffffffffffffff)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402082, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454da, r1)
fadvise64$auto_POSIX_FADV_WILLNEED(r0, 0x3, 0x3, 0x3)
executing program 34:
r0 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_thresh\x00', 0x6c0000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
eventfd$auto(0xc)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x0)
mmap$auto(0x0, 0x9, 0x2, 0x10, r0, 0xffffffffffffffff)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402082, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454da, r1)
fadvise64$auto_POSIX_FADV_WILLNEED(r0, 0x3, 0x3, 0x3)
executing program 5:
prctl$auto(0x27, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) (async)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x24008040)
openat$auto_objects_fops_(0xffffffffffffff9c, 0x0, 0x202200, 0x0) (async, rerun: 32)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000045480901764441b289606d51c9101931b7b0f0ce3caa17c83c2b33fc5e769e300e330cfb43a80d9a77c64094bebaa7ffac59a6e6eac1e1003f7389f9e9d88b5e1622fded80621502901f8bc69de546906084a9b93b2315318e818ce1faa22b8d59bc0d909849beb6b960af73e9e18b4820d7752eddf5dc1f0a1260f29e97d9fc0352296c9145f3255aaf6ea257ed57179625f23a18dbadedc65e8b4927b975c91fe670f84ca6a3960cad9a13b5f92150b89b5e", @ANYRES16=0x0, @ANYBLOB="e3b725bd7000fddbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) (async)
write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0xfffffffffffffffd, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
pread64$auto(r1, 0x0, 0x800003, 0x800000000000e2a) (async)
socket(0x2c, 0x80003, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80040, 0x0) (async, rerun: 64)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55) (async, rerun: 32)
socket(0x2, 0x3, 0xa) (async, rerun: 32)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) (async)
select$auto(0x981, 0x0, &(0x7f0000000980)={[0x5, 0x40, 0xffffffff, 0x72634de1, 0x4000000000, 0x9, 0x0, 0x9, 0x1, 0xd0d, 0xc76a, 0x5, 0x2, 0x2, 0x7, 0x9]}, &(0x7f0000000a00)={[0x4, 0xd, 0x5, 0x6e, 0x1, 0x8, 0x6, 0xfffffffffffff800, 0xfffffffffffffffc, 0x202, 0x7, 0x8, 0x2, 0x6, 0x9, 0x9]}, &(0x7f0000000a80)={0x100000000, 0x2})
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) (async, rerun: 64)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socket(0x11, 0x3, 0x9)
executing program 5:
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x108800, 0x0)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/saved_tgids\x00', 0x0, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x200, 0x0)
r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x40000, 0x0)
listen$auto(r1, 0x611e)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
fcntl$auto_F_SETSIG(r2, 0xa, 0xfffffffffffffeff)
poll$auto(0x0, 0x6, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
open(0x0, 0x2c3fbc, 0x12)
madvise$auto(0x0, 0x200007, 0x19)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3)
close_range$auto(r1, r0, 0x9)
socket(0x2, 0x80002, 0x73)
read$auto(0x3, 0x0, 0x80)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
r3 = socket(0x11, 0x80003, 0x300)
io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46)
sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040091}, 0x40850)
io_uring_enter$auto(r0, 0x882, 0x3ffffff7, 0x7fb, 0x0, 0x375)
io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2)
executing program 5:
r0 = socket(0x10, 0x2, 0x4)
r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="21007d9bb6a89d8db43b94bd0619eb18b171aaa2736e6d0d3977dc59472fa15983ecff6186c20ec0793db05ad94c9c35f519833067a0cb7203ff34337c14852505b023aa1f23395cf98870b0c93985b63c34668da10bc6c44c1b73efc6f89c616437bc2ad089cd109b281440b74a9c0a58023faea9fafbe63fd7d108505194975e6df18064c27d15fffbfe61f416cdfa727afcaf3137de8409041713cfa328093304f4f966764e8e2fba02d8f877fa07111ea9dc3c179ff426fd8221704f298cfdb69168abdce83a6b8b9d062bdb2d169a71bccfbe04a515fe8c66ccda98b8a52dbe70f003572cf670e391e2893b1c0611dbf5469c", @ANYRES16=r2, @ANYBLOB="00022abd7000fedbdf252800000009001f00265d26ca7b000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24008800)
sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x48090)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x600201, 0x0)
openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000040), 0x41abc0, 0x0)
r3 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/available_events\x00', 0x2000, 0x0)
close_range$auto(r3, r0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0x0, 0x2003f0, 0x15)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0)
ioctl$auto_SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/112, 0x70)
mmap$auto(0x3, 0x25, 0x800007, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, 0x0)
ioctl$auto(0x3, 0xc0303e03, r6)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 5:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
mkdir$auto(0x0, 0x353)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x2)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x4, 0xe983, 0xe6, 0xeb1, r1, 0x8001)
r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
r3 = epoll_create$auto(0x4)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={<r4=>0x9, 0x21eb, 0x7ff, 0x3ff, 0x0, 0x3, 0x5f, 0x0, 0x3}, 0x6f3)
ptrace$auto(0xce6, r4, 0x9, 0x2)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8}]}, 0x1c}}, 0x805)
executing program 5:
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2})
r3 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0)
writev$auto(r3, 0x0, 0x4)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0)
socket(0x2, 0x1, 0x106)
ioctl$auto_SCSI_IOCTL_GET_IDLUN2(r1, 0x5382, &(0x7f00000002c0)="2023aa3b8a11942cf9fae0bf2ca907cd1910a3dacf56f742ff53aae49aabd00700c8acac61bd10a779f5b3e867b95d4f5a698773f30997a24e757a962868e6845e8c6362d445342a3718f7f42c8749a07401154ea06fce09442942b587aac7d8e5aa639304e308199eabefe8d5172cfe03f64f63a8929189a4ec71dfb31cc4322c49d662bdd54cc5e5b33561b0190e996d11af86")
socket(0x2, 0x1, 0x0)
shutdown$auto(0x200000003, 0x2)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/286, 0x11e)
read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10900, 0x3ff, 0x0)
setfsgid$auto(0xee00)
listen$auto(0x3, 0x3)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x8f3b7a51b8360c21, 0x0)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0)
pwrite64$auto(r4, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5)
readahead$auto(r4, 0x4, 0x4)
sysfs$auto(0x3, 0x401, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
executing program 5:
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404cc91}, 0x24040081)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x200, 0xb}, 0x800009}, 0x80005, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x802, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, 0x5, 0xcad7)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
executing program 35:
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404cc91}, 0x24040081)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x200, 0xb}, 0x800009}, 0x80005, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x802, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, 0x5, 0xcad7)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
executing program 6:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0)
socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
mmap$auto(0x0, 0x400008, 0xb23, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = socket(0xa, 0x801, 0x106)
setsockopt$auto(r2, 0x6, 0x22, 0x0, 0x10)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xc, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
close_range$auto(0x2, 0x8, 0x0)
write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
executing program 6:
capset$auto(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b67, 0x1)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/neigh/tunl0/app_solicit\x00', 0x2000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="0600000074542d2b23739cc4090d4c1200000000007ca8625432b812bbbadf96af1012051e08a6099a0bb2cfc08d3a00"/59, @ANYRES16=r3, @ANYBLOB="1b002cbd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800)
read$auto(r1, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
unshare$auto(0x40000080)
r4 = mq_open$auto(0x0, 0xdd1, 0x8, 0x0)
mq_notify$auto(0x4, 0x0)
mmap$auto(0x7, 0x2020008, 0x3, 0x10000ebe, 0xfffffffffffffffa, 0x8000)
fsopen$auto(0x0, 0x1)
adjtimex$auto(&(0x7f00000005c0)={0xf332b72, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x400000000000001, 0x368e, 0x2, {0xf, 0x10000}, 0x6, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0x1a00, 0x101})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x400001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55)
setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b)
r5 = ioctl$auto_NS_GET_MNTNS_ID(r4, 0x8008b705, &(0x7f0000000200))
write$auto(r5, &(0x7f00000006c0)='\x00\x00\x00\x00\xb7\xb9w\b\x84\x12\x00|\"\f\x85kqhYS\xf25\xc5z\xa4{\x97\x00\x1b\xfe\xa9\xf0\xcc}\x1b\"\xf7\x84\xc9\xe2\xd5\xd3\x11\xb1O\xd1\xdd\xfeKr\xc3(s\xcf\x1b6\x94\xeeP\xed\xe5\x0f\xba\x0e\x1a\xbcqT\xc8;\xe6L>X \xcc7\xb40\xd1\x85\x8d\xeb\x0ee\x9d/\x7fX\xfa^\xcf\xe4\x01S\xac\x9d\x02\xec\xb3\xa1+\xe2\x7f\xce\xc7\xa2q\xb7^~g\xc8\x8152\x80]$\xfd\r\xed\xf9\xa6\x8b\x80{\xd3^ZK\xb8\x17\xdd\xaar\x04W\x1e\xbb\xe3\xa9\xa8\xe4\xac\xf7\xd4N\xea\x18\n\xad\x00\x12>v\b5S\xc0\xf08\f\xe1\xae\xb1\x9d\xfdM14\x99\r:.\x84\x8av\xb5a\xb9\xa2o\xbfiy\xd4\x1c\xdc\xed\xab\xcd\x9aj\x0fif\x9a\xf8N\xcfr\xefr\xbb\x14`\xc1E\xdc\xf8\xa0\xa4\xe6MF\xfc\x9a\xe7\x8a\xf6X)\x9e\x9dr\xf4\xca\xad%C\xb4M\xed\x90u`\xea\xa7\xda\x9c\x8b\xfc\xd3\x91F\f<\xd8\xf8\x8d\xf5Fp\xac\xaf(\xaf\vc\x84\xa5\xf9\xe3\xbc\x1bj\x8b\x96\xea\x10\xc1\nu\xe16\xaaR\xa2Uz\xdf\v\xd2\xcd\xad\xe0\xf5\xc37b\x91\xe1\x8f\x05\xe0wr\x11\x7f\x85v>L{x\xb5\x17\x1c!\xcf&H\xc9iE\x05-\x02[\xee\x00\xf7g\xa2P\x95\xa3\x91\xfc\x18(\x88\xbe\xab&\x00\x00\xeeZ\xd6\xe4A\x16\xdf+\x85\x95\x03We\b\xae\xe1T\xbb\xa3C/\xba\xe5]\xbc\xcf\xba.\xcd\f:s\x99\xb0\x9de\x17\xda\x03\x97\n\tz\x17\xf8\xbb\xa1q\xae\r\xber\bF\x04:\x03\xef\x90\x88\xec\x7f\xbe\x8er_\xdf\a\xd7\xca\xe1\x9cJ\xff\xaa:\xabo\x9f\xb4 \xe4\x05\xaf\x8aVA\xa5\xd2\xd2h5\x9dq\x18\xe5\x90', 0xa3db)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
executing program 3:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe) (async)
statmount$auto(0x0, 0x0, 0x1fa, 0xd) (async)
r0 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r0, 0x114, 0x6, 0x0, 0x2) (async)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) (async)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080))
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000000)='/dev/media8\x00', 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x42200, 0x0) (async)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x80000000007, 0x7, 0x5, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x7ffffffd, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async)
ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x100, &(0x7f00000001c0)) (async)
r2 = pipe$auto(0x0)
splice$auto(0x4, 0x0, r2, 0x0, 0x80000001, 0x9) (async)
ioctl$auto_MON_IOCQ_URB_LEN(r2, 0x9201, 0x0) (async)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x3, 0x3a) (async)
setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) (async)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x6, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x4, 0x0, 0x3, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5, 0x6ad, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x40000, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x10, 0x100000000000]}, 0x1fe, 0x6) (async)
r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd03, &(0x7f00000001c0))
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pipe$auto(0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x2}, 0x2, 0x5)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto_SO_BUSY_POLL(r1, 0x1, 0x2e, &(0x7f0000000240)='#}#\xa7@\x00H\x8b\x9bc!\xfa\x88\xe2\x04\x00\x00\x00\x96V\xf2\x96L\x17\'\x13\xd3\x1e\x9bL\xf8\x8f\xe9\a\xc6]\'\x8fs:\xfc?*zbB\xadTqu\x16H\x95\n\\\xdd\xfd7\x02\xb2e\xf5A\x8e\f\xd6F\xd6\x97\xf6N\x0e\x8bn\x83\xf7\x02}#e\xd7Lv\xb0\xed2\x87\nt\xd0\xefc{\xd2C\xdd\x94\xe6)\x15`\x858k\xc0\xa0\x80>0\xfd\xa7\x8fd\xa0z\xc4]ZKh9\xa61\xc6\xe1\xd37OnC0\x06\x00\x8605\xd3\xab\b\x88\xd9H\xa1\x8b5\xc9\x0e\xe0\xe2\xd3\xae\xbe\xe0E\xea\xda\x9b~\x91+|\xc1\x0f0>kYH\x93\xf2\xd8]\xddV|\xab.\xa4\x1c%U.\xde\x93\xe8\x14K(\xd6\x19\xf7\x94\tig\x00\x8e\t\x14\xef\xe8`\xeaD\xb6\xadP\x98\xff\xb7\x13\x93\x925o51\x80}~Qv=\x06\xafI]$<\xff1\xab\'\xebp\x06\xcf\xcf\xab\xe2\xcc\xfe;a\xb3a\xad\x06\xe7fA{\x89\x9a\xe81\xd1\aJ\xfeD\xa4\xe8J\xa8\n\xd1\xcd,\xb5\xd39\x98\xb0s\x1dE\x92\xe9\xabg>W\'\xca\xb2t \r/;\t!\xaf\x94lj\\\x04!\x00\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\xe0=\xe2\xca\xee\xad\xda\xb6\xa9\xee\xb2(z\xbfG\xf0\xb2#\xec\x9a\xbcR%=\x97P\xf1_/^\xf3\xde\xd3>\x7f\xc9\xddU\xf6\xd2C\xc5\x01wl\xaf\xde/', 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) (async)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
pipe$auto(0x0) (async)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async)
vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x2}, 0x2, 0x5) (async)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
unshare$auto(0x40000080) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$auto_SO_BUSY_POLL(r1, 0x1, 0x2e, &(0x7f0000000240)='#}#\xa7@\x00H\x8b\x9bc!\xfa\x88\xe2\x04\x00\x00\x00\x96V\xf2\x96L\x17\'\x13\xd3\x1e\x9bL\xf8\x8f\xe9\a\xc6]\'\x8fs:\xfc?*zbB\xadTqu\x16H\x95\n\\\xdd\xfd7\x02\xb2e\xf5A\x8e\f\xd6F\xd6\x97\xf6N\x0e\x8bn\x83\xf7\x02}#e\xd7Lv\xb0\xed2\x87\nt\xd0\xefc{\xd2C\xdd\x94\xe6)\x15`\x858k\xc0\xa0\x80>0\xfd\xa7\x8fd\xa0z\xc4]ZKh9\xa61\xc6\xe1\xd37OnC0\x06\x00\x8605\xd3\xab\b\x88\xd9H\xa1\x8b5\xc9\x0e\xe0\xe2\xd3\xae\xbe\xe0E\xea\xda\x9b~\x91+|\xc1\x0f0>kYH\x93\xf2\xd8]\xddV|\xab.\xa4\x1c%U.\xde\x93\xe8\x14K(\xd6\x19\xf7\x94\tig\x00\x8e\t\x14\xef\xe8`\xeaD\xb6\xadP\x98\xff\xb7\x13\x93\x925o51\x80}~Qv=\x06\xafI]$<\xff1\xab\'\xebp\x06\xcf\xcf\xab\xe2\xcc\xfe;a\xb3a\xad\x06\xe7fA{\x89\x9a\xe81\xd1\aJ\xfeD\xa4\xe8J\xa8\n\xd1\xcd,\xb5\xd39\x98\xb0s\x1dE\x92\xe9\xabg>W\'\xca\xb2t \r/;\t!\xaf\x94lj\\\x04!\x00\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\xe0=\xe2\xca\xee\xad\xda\xb6\xa9\xee\xb2(z\xbfG\xf0\xb2#\xec\x9a\xbcR%=\x97P\xf1_/^\xf3\xde\xd3>\x7f\xc9\xddU\xf6\xd2C\xc5\x01wl\xaf\xde/', 0x9) (async)
executing program 6:
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event1\x00', 0x141300, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x200005}, 0x4000007, 0x8000000000000000, 0x3ff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r1, 0x8001)
readv$auto(r1, &(0x7f00000000c0)={0x0, 0xfffe}, 0x5)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa02842, 0x0)
close_range$auto(r0, 0x8, 0x803)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(r3, 0x3, 0xffffffffffffffff)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto(0xffffffffffffffff, 0xae41, r4)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x600d80, 0x0)
ioctl$auto_TIOCSETD2(r5, 0x5423, &(0x7f0000000080))
mmap$auto(0x0, 0x7ff, 0xdf, 0x9b70, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffe, 0x580d, 0x112f4a03, 0x8000000008011, 0x3, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20a100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x6, 0x40)
r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0)
write$auto(r0, 0x0, 0x110082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
writev$auto(0x1, 0x0, 0x1)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/geneve1/ndisc_evict_nocarrier\x00', 0xc819f3dbe3a51a17, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0)
socket(0x2, 0x3, 0xa)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/ip6_tables_targets\x00', 0x608100, 0x0)
bind$auto(0x3, 0x0, 0x6a)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
userfaultfd$auto(0x1)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0xffffffffffffff8d, 0x3, 0xeb0, 0xffffffffffffffff, 0x8000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000)
prctl$auto(0x5, 0x8, 0x0, 0x400000000001, 0x4)
epoll_pwait2$auto(r0, &(0x7f00000000c0)={0x5, 0x101}, 0x10001, &(0x7f0000000100)={0x400010000}, &(0x7f0000000140)={0x5}, 0x8)
ioctl$auto_TIOCMGET2(r2, 0x5415, 0x0)
sendmmsg$auto(r1, 0x0, 0x9a6, 0x7000000)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 6:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e)
io_uring_setup$auto(0x1, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x0, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r0, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x2, 0x7, 0xb, 0x8, 0x100, 0x2, 0x40000003, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"})
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/lp_interval\x00', 0x1e2142, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r1, 0x0, 0x1f40) (async)
read$auto(r1, 0x0, 0x1f40)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfffffdef)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) (async)
openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) (async)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
close_range$auto(0x2, 0x8, 0x40000000) (async)
close_range$auto(0x2, 0x8, 0x40000000)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0)
ioctl$auto(r3, 0xc0285629, r3)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
lsm_list_modules$auto(0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
executing program 3:
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x10, 0x2, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0)
read$auto(r0, 0x0, 0xc)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae41, r1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 64)
socket(0x2, 0x1, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_CREATE_VM(r2, 0x4018aee1, 0x1000000)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffe2, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="906f1995", @ANYRES16=0x0, @ANYBLOB="10002cbd0000fddb79a71c"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) (async, rerun: 32)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (rerun: 32)
executing program 7:
capset$auto(0x0, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0)
setsockopt$auto_SO_RCVTIMEO_OLD(r0, 0x9, 0x14, &(0x7f0000000000)='/dev/ttyS0\x00', 0x9)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
ioctl$auto(r0, 0x540a, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0)
pread64$auto(r3, 0x0, 0x10001, 0x830)
write$auto(r2, 0x0, 0x30fe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket(0x2, 0x1, 0x0)
io_uring_setup$auto(0x1, 0x0)
socket(0x1f, 0x80000, 0x6)
sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r4, 0x0, 0x4008080)
socketpair$auto(0xffff, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0xfff, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$dir(0xffffffffffffff9c, 0x0, 0x525c00, 0x100)
mmap$auto(0x0, 0x4020009, 0xdf, 0x10000000000eb1, 0x401, 0x8000)
capset$auto(0x0, 0x0)
mprotect$auto(0x0, 0x806121, 0x6)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r5, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
executing program 3:
capset$auto(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0xa, 0x6, 0x5, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000041}, 0x800)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b67, 0x1)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) (async)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000200", @ANYRES16=r3, @ANYBLOB="1b002cbd7000fedbdf2503000000040003800c000b00ffffffffffffffff0400028012000100898035000000000000000000000000000c000380050017801f000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) (async)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000200", @ANYRES16=r3, @ANYBLOB="1b002cbd7000fedbdf2503000000040003800c000b00ffffffffffffffff0400028012000100898035000000000000000000000000000c000380050017801f000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800)
read$auto(r1, 0x0, 0x1ff) (async)
read$auto(r1, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
r4 = mq_open$auto(0x0, 0xdd1, 0x8, 0x0)
mq_notify$auto(0x4, 0x0)
mq_notify$auto(0x4, 0x0) (async)
mq_notify$auto(0x4, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
fsopen$auto(0x0, 0x1) (async)
fsopen$auto(0x0, 0x1)
adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0xdeb1, 0x808})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r6, 0x401870cb, r6)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x381800, 0x0)
read$auto_proc_uid_map_operations_base(r4, &(0x7f0000000140)=""/163, 0xa3) (async)
read$auto_proc_uid_map_operations_base(r4, &(0x7f0000000140)=""/163, 0xa3)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0)
sendfile$auto(r7, r7, 0x0, 0x7ffff000)
executing program 1:
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/15/per_cpu_count\x00', 0x0, 0x0)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c028379dd", 0xbb)
read$auto(r0, 0x0, 0x20)
executing program 1:
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/15/per_cpu_count\x00', 0x0, 0x0)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a", 0x9c)
read$auto(r0, 0x0, 0x20)
executing program 7:
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/arch_status\x00', 0x120682, 0x0)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1d, &(0x7f0000000040)='!\x00', 0x1ff)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYRES8=r1], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0)
ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, 0x0)
ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0)
executing program 1:
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/15/per_cpu_count\x00', 0x0, 0x0)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c028379dd", 0xbb)
read$auto(r0, 0x0, 0x20) (fail_nth: 1)
executing program 7:
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404cc91}, 0x24040081)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x200, 0xb}, 0x800009}, 0x80005, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x802, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, 0x5, 0xcad7)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
bind$auto(0x3, 0x0, 0x6a)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
statmount$auto(&(0x7f0000000140)={0x9, @inferred=r3, 0x2, 0x3ff, 0x7f}, &(0x7f0000000440)={0x6, 0x6, 0x53, 0x4, 0x3, 0x101, 0x2, 0x3, 0x5, 0xffffffff80000001, 0x57d6, 0x8, 0x3, 0x1, 0x8, 0x3, 0x1, 0x8001, 0x400, 0x1ff, 0xfff, 0xd8, 0x4, 0x2, 0x9, 0xbef3, 0x411, 0x7, 0x0, 0x7, 0x7, [0x6, 0x7f, 0xbce7, 0x599, 0x56, 0x7, 0x6, 0x8, 0xffffffffffffffff, 0x0, 0x200000000000, 0x2, 0x1, 0x9, 0x100, 0x40004545, 0x4, 0xa, 0xb, 0xf5fd, 0x7, 0x4, 0x7fffffff, 0x1fc, 0x2, 0x5, 0x8, 0x4, 0x4, 0x7fffffff, 0x4, 0x0, 0x7, 0x80, 0x6, 0x4, 0x7, 0x4, 0xffc0000000000000, 0x1, 0x9, 0x8, 0x80000001], "73e9b0abe71d1e2aee680f7f0e812f294220578764aaba215588c48129939d0d8c6c8dcb488aeb5a653cee9f3407b9069269"}, 0x40, 0x36)
msync$auto(0x2, 0x9, 0x40)
select$auto(0x9, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb})
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
executing program 6:
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/dev_mcast\x00', 0x404080, 0x0)
write$auto(r3, 0x0, 0x7ef)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/type\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/116, 0x74)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0xa, 0x1, 0x100)
modify_ldt$auto(0x1, 0x0, 0x10)
pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400)
socket(0x2, 0x1, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x12, 0x0, 0x0, 0x0, 0x0)
write$auto(r5, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1\x05\x00\x00\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\x89C:\xc3\xcbx*=\x12\xb4q\xeeC\x81\n\\_\x04D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\x9e\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x8cec, 0x6]}, 0x0)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0)
sendfile$auto(r6, r6, 0x0, 0x0)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x80400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0xffffffffffffbfff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
madvise$auto(0x0, 0x200007, 0x19)
executing program 1:
r0 = prctl$auto(0x3a, 0x1, 0x0, 0x2, 0x203)
bind$auto(r0, 0x0, 0x7fffffff)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x1d, 0x3, 0x1)
getsockopt$auto(r3, 0x65, 0x2, 0xffffffffffffffff, 0x0)
write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
write$auto(r2, 0x0, 0x9)
mmap$auto(0x0, 0x40009, 0xdf, 0x10000000009b72, 0x7, 0x28000)
arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x1490)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
socket(0xa, 0x3, 0x3a)
semctl$auto(0x80001ff, 0x804, 0x13, 0x4)
setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567)
openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xecc6, 0x0, 0x7352, 0x2d, 0x200000000045f, 0x6, 0x7, 0x3, 0x2, 0x9, 0x36e, 0x6, 0x2, 0x3000, 0x9, 0x8, 0x10003, 0x8, 0xffffffffffffffff, 0x0, 0x5, 0x1ffb, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x4, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x3, 0x3ba0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0x11)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r5 = memfd_create$auto(0x0, 0xb)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00'})
rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}})
r6 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r6, 0x0, 0x5, 0x100)
executing program 3:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00')
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
r1 = socket(0x2b, 0x2, 0xfffffffd)
r2 = socket(0x2, 0x801, 0x106)
r3 = socket(0x26, 0x80805, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'erspan0\x00', <r5=>0x0})
bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f0000000700)=@bpf_attr_0={0xb, 0xee6a, 0x4, 0x900000, 0x0, r0, 0x9, "a8fe22a3a53467643c21c27df6b15218", r5, r3, 0x1000, 0x7fffffff, 0x477b6c73, 0x173, r4, r2}, 0x6)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
readv$auto(0x0, &(0x7f0000000080)={0x0, 0x1e}, 0x3)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
write$auto(r6, 0x0, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf)
r7 = socket(0x2, 0x3, 0x1)
connect$auto(r7, &(0x7f0000000000), 0x55)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
shmctl$auto_SHM_STAT_ANY(0x3, 0xf, &(0x7f0000000240)={{0x10, <r9=>0x0, 0x0, 0x0, 0x0, 0xc1, 0x5}, 0x101, 0x8, 0x3, 0x0, @raw=0xffffffa1, @raw=0x81, 0xd, 0x0, &(0x7f00000000c0)="abc1b8a92c753e4112903c89bcef952362c4682f3209575d831da3f3316575b6043cf7564f", &(0x7f0000000100)="431218aa2ada6617a975f17db8a6032b6470de07b2f3aa97112936393cf4ac878fea2c0668d6a05ac6a0fbd5cde6b1c77a7347a3aa12ca85b23afe9277767562f5b2a29a100e68d1b1abd88d3a334052e93d8172a65ac531ec574f7db0904849d9ed93b382da7fe328cdf7960f46c41ada2eea19b0e52d47eed8c8d770a320370d683c8c1fe1c9512d71e0c2e5849f8499105a06b75595bea01bce127707ee28be8bc960fb7dec83ae2099e4ffe16b690e8d0b48de03bb3416016f8cecbae7a62cb6f09d1f8d28c99d9b7ce77ba3d8b38805b2f55c3485ce741517dfc6800f432e51008dc6"})
msgctl$auto_IPC_STAT(0xd7f, 0x2, &(0x7f0000000340)={{0x5, <r10=>0x0, 0xffffffffffffffff, 0xc, 0x2}, &(0x7f00000002c0)=0xb, &(0x7f0000000300), 0x9, 0xfffffffffffffff8, 0x8, 0x1, 0x2, 0x101, 0x8, 0x2, @raw=0x7})
sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x258, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_CQM={0x241, 0x5e, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @uid=r9}, @typed={0x8, 0xf5, 0x0, 0x0, @uid=r10}, @generic="debd3e77f8f5a518065e97b50a26439114e3", @generic="4844b5326bbe025f487e09a652a1ada98cf60c6e4ce896d24508a189516238c254f682c43e453d7a49200f6401eb7fb390b389efec4bd35e8c338b91666116ff1ce297c8da4efdddbb8b6247da061502e558a11d8793303e9a71b5c5ff3d5ac3d7f6cebe26945e54ea3f915e4239867225f66b27881fdaab9e8fd264e78cbb6c78c886fc6ad42dd2184ee9329148fa9c3f363719129be2843d0c6b8a5cb893adba0a5416ccdeeca497316021ed951bb6d1c7741b0031c56fea38ec", @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x81}, @generic="2edb1e61a8f062a5b45035b7c72dfcf87c6adfe8", @nested={0x144, 0x124, 0x0, 0x1, [@generic="eb932c7438149160e232160a21af5500a899c39d70c0eb4362383e9c72cc30c1b01a558c325efe341564ba6dcc15f44d3709d7f3ff239464bc7e16ec4614da5c6405ea95f0f0150783544fb6eb280026370e4f20d8a222dc3dc3d4db404faab39fbc16ab031cf573cbd12661b534ff1b953dcf64756cf9160a14d6fc0ca5974ff7d7970f53053e16d0c331e2dc4ae078dd4b00e6293aa9bd1697c18da61785cc7446737f19f5c6b61830549c9fd606e51e3af24d289d52102ac75330", @generic="4bd9977de0697a698c13d538d5769bceac2efcf9ea7547dc4eb0b8fc7d895881754f9d9e13b08f3e67b1ab2e76749c8c61164c0e7c71e39c1f46a1176b0449337828d487058269c073aa00c9abc43e58061e0a6d40ce14242fadc0bdef352cf915fb57f8b6ce230b95f8b319403a1161d47b0c59997c196582f3ec0330cc9302ab0a76af"]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000880}, 0x4040000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
executing program 1:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r0, 0x110, 0x5, 0x0, 0x4) (async)
mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) (async)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
mremap$auto(0x0, 0x2, 0x9, 0x3, 0x7fffffffb000)
executing program 7:
openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r0 = epoll_create$auto(0x3e)
epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_GTP_CMD_DELPDP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mmap$auto(0xfffffffffffffffe, 0x99, 0xdf, 0x200000000000eb2, r0, 0x8004)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0)
read$auto(r2, 0x0, 0x7)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
socketpair$auto(0xffffffff, 0x10000, 0x9, 0x0)
openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x12100, 0x0)
fstatfs$auto(r3, &(0x7f0000000240)={0x1, 0x401, 0x72, 0x7fffffff, 0x4, 0x8000, 0x1, {[0x3, 0x3]}, 0xc2, 0xb23, 0x1eda, [0x10, 0x7, 0x100, 0xc]})
mmap$auto(0x100000000000000, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x80a42, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x2, 0x0, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xff7fffff, &(0x7f0000000100)={0x0, 0xc4}, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x9)
r5 = gettid()
mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0xa)
rt_sigqueueinfo$auto(r5, 0x1, 0x0)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x401, 0x8000)
writev$auto(r4, 0x0, 0x3)
symlink$auto(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='./file0\x00')
executing program 7:
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/15/per_cpu_count\x00', 0x0, 0x0)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c028379dd", 0xbb)
read$auto(r0, 0x0, 0x20)
executing program 1:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
fcntl$auto(0x8000000000000001, 0x5, 0x8)
r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
sendmmsg$auto(r5, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x3, 0xa505}, 0x7ff}, 0x7, 0x4008)
fcntl$auto(0x8000000000000001, 0x26, 0x8)
executing program 6:
capset$auto(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000041}, 0x800)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b67, 0x1)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/neigh/tunl0/app_solicit\x00', 0x2000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r3, 0x1b, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800)
read$auto(r1, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
unshare$auto(0x40000080)
r4 = mq_open$auto(0x0, 0xdd1, 0x8, 0x0)
mq_notify$auto(0x4, 0x0)
mmap$auto(0x7, 0x2020008, 0x3, 0x10000ebe, 0xfffffffffffffffa, 0x8000)
fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4)
bpf$auto(0x2, 0x0, 0x103)
adjtimex$auto(&(0x7f00000005c0)={0xf332b72, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x400000000000001, 0x368e, 0x2, {0xf, 0x10000}, 0x6, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0x1a00, 0x101})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
r5 = ioctl$auto_NS_GET_MNTNS_ID(r4, 0x8008b705, &(0x7f0000000200))
write$auto(r5, &(0x7f00000006c0)='\x00\x00\x00\x00\xb7\xb9w\b\x84\x12\x00|\"\f\x85kqhYS\xf25\xc5z\xa4{\x97\x00\x1b\xfe\xa9\xf0\xcc}\x1b\"\xf7\x84\xc9\xe2\xd5\xd3\x11\xb1O\xd1\xdd\xfeKr\xc3(s\xcf\x1b6\x94\xeeP\xed\xe5\x0f\xba\x0e\x1a\xbcqT\xc8;\xe6L>X \xcc7\xb40\xd1\x85\x8d\xeb\x0ee\x9d/\x7fX\xfa^\xcf\xe4\x01S\xac\x9d\x02\xec\xb3\xa1+\xe2\x7f\xce\xc7\xa2q\xb7^~g\xc8\x8152\x80]$\xfd\r\xed\xf9\xa6\x8b\x80{\xd3^ZK\xb8\x17\xdd\xaar\x04W\x1e\xbb\xe3\xa9\xa8\xe4\xac\xf7\xd4N\xea\x18\n\xad\x00\x12>v\b5S\xc0\xf08\f\xe1\xae\xb1\x9d\xfdM14\x99\r:.\x84\x8av\xb5a\xb9\xa2o\xbfiy\xd4\x1c\xdc\xed\xab\xcd\x9aj\x0fif\x9a\xf8N\xcfr\xefr\xbb\x14`\xc1E\xdc\xf8\xa0\xa4\xe6MF\xfc\x9a\xe7\x8a\xf6X)\x9e\x9dr\xf4\xca\xad%C\xb4M\xed\x90u`\xea\xa7\xda\x9c\x8b\xfc\xd3\x91F\f<\xd8\xf8\x8d\xf5Fp\xac\xaf(\xaf\vc\x84\xa5\xf9\xe3\xbc\x1bj\x8b\x96\xea\x10\xc1\nu\xe16\xaaR\xa2Uz\xdf\v\xd2\xcd\xad\xe0\xf5\xc37b\x91\xe1\x8f\x05\xe0wr\x11\x7f\x85v>L{x\xb5\x17\x1c!\xcf&H\xc9iE\x05-\x02[\xee\x00\xf7g\xa2P\x95\xa3\x91\xfc\x18(\x88\xbe\xab&\x00\x00\xeeZ\xd6\xe4A\x16\xdf+\x85\x95\x03We\b\xae\xe1T\xbb\xa3C/\xba\xe5]\xbc\xcf\xba.\xcd\f:s\x99\xb0\x9de\x17\xda\x03\x97\n\tz\x17\xf8\xbb\xa1q\xae\r\xber\bF\x04:\x03\xef\x90\x88\xec\x7f\xbe\x8er_\xdf\a\xd7\xca\xe1\x9cJ\xff\xaa:\xabo\x9f\xb4 \xe4\x05\xaf\x8aVA\xa5\xd2\xd2h5\x9dq\x18\xe5\x90', 0xa3db)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r6, 0x401870cb, r6)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x781902, 0x0)
executing program 7:
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/arch_status\x00', 0x120682, 0x0)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1d, &(0x7f0000000040)='!\x00', 0x1ff)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYRES8=r1], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0)
ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, 0x0)
ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-get_robust_list$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-fcntl$auto-syz_genetlink_get_family_id$auto_ovs_flow-socket$nl_generic-sendmsg$auto_OVS_FLOW_CMD_GET-sendmmsg$auto-fcntl$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
fcntl$auto(0x8000000000000001, 0x5, 0x8)
r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
sendmmsg$auto(r5, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x3, 0xa505}, 0x7ff}, 0x7, 0x4008)
fcntl$auto(0x8000000000000001, 0x26, 0x8)

program did not crash
single: failed to extract reproducer
bisect: bisecting 52 programs with base timeout 1m40s
testing program (duration=1m53s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8, 30, 30, 21, 30, 30, 19, 30, 4, 15, 13, 30, 30, 29, 20, 20, 29, 20, 12, 12, 30, 29, 30, 22, 30, 24, 24, 23, 29, 30, 26, 30, 30, 40, 30, 30, 40, 6, 6, 17, 6, 30, 30, 30, 25, 5, 29, 6, 25, 30, 17]
detailed listing:
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/binder/parameters/stop_on_user_error\x00', 0x2, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)='1', 0x1)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0)
read$auto(r1, 0x0, 0x39b8)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/uts\x00')
ioctl$auto(0x3, 0xc0383e04, r2)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f0000000100)={0x28, r1, 0x38f, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000)
r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r4)
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)=ANY=[@ANYBLOB="8e560000", @ANYRES16=r5, @ANYBLOB="01002ebd5100fbcbdf250100000004000180072e0180"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x42a120, 0x0)
r6 = getpid()
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r7, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="010029bd7000fedbdf250200000004000180200001801c002f8014004200fe8000000000000000000000000000aa0400f780"], 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000)
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1a9}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x7}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xff}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x33}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x80c1)
r9 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dsp\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r9, 0x80045017, &(0x7f0000000c00))
socket(0x1d, 0x1, 0x2300)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
ioctl$auto(0x3, 0x400454ca, 0x38)
r10 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0)
read$auto(r10, 0x0, 0x4)
ioctl$auto_TUNSETTXFILTER(r3, 0x400454d1, 0x0)
r11 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r11, 0xaf01, 0x5)
ioctl$auto(r11, 0x4004af07, 0xffffffffffffffff)
socket(0x26, 0x2, 0x100)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x40, 0x10006, 0x0)
shutdown$auto(0x200000003, 0x2)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r0, 0x0, 0x7ff, 0x400)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x0, 0x27, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xfffffffffffffffa, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
socket(0x23, 0x80805, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000)
r2 = socket(0x15, 0xa, 0xfffffffb)
getsockopt$auto(r2, 0x114, 0x2714, 0xfffffffffffffffc, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0)
read$auto_vcs_fops_vc_screen(r3, &(0x7f0000000080)=""/238, 0xffffffe9)
r4 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$auto_nvram_misc_fops_nvram(r4, &(0x7f0000000080)=""/209, 0xd1)
ioctl$auto_NVRAM_INIT(r4, 0x7040, 0x0)
membarrier$auto(0x2, 0x0, 0x9)
r5 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r5, &(0x7f0000001680)="a7", 0x80000)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
msync$auto(0xf, 0x5, 0xd362)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2b, 0x1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) (async)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x440, 0x0) (async)
r0 = socket(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b82, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram0/io-timeout-fail\x00', 0x2, 0x0) (rerun: 64)
write$auto(r2, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc7c, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x48050) (async, rerun: 64)
sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r5)
sendto$auto(r0, &(0x7f0000000300)="04cb8b0728edf11b884069e25b7e362364e7bf9b673fd5734da596556884a909e59d74cca9445100eab59b029cf8767f8564248a1b2b7f4e7bc9ac29692823c5326823bc5be7b365eb3e373fb88f6f55546eec6a151a84e5c03bd4f058834f8aab0ccbb87a363a5a7a9b0b28263780043f52272b72344f7e4ee4d71102afb99f7b80e9a1ed0572b7afa4eedb70230bff8f06694c1cf55a75f7816c75ccf3f412b949b0e7a5a4a41077", 0x8001, 0x400, &(0x7f0000000280)=@nl=@unspec, 0x7)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800cb101ab48ac98faf406b5e324160b42a74e372ee305b556f8bf05f173e640f89bd449c71a4962d2b9a2775d7138c20e7a3257233bdb95a7dc16937154cafafcf5c355f7d9d49bc9ae73b1b675f0549509a284526298724eadac8ce0030b1f8b6b162d2207594a1598ef28f32afc899fbb28d03d7f132a4c996419624ea9e1f2b1f5ca68c7dda8679b14862789e147b4851587d2c5d55e53724407ef0ee63848aee4ba858a5c479ada7b727812b461526318781269efd86da187b6ea516ef448be31b2b4be09b1da9b0a800"/218, @ANYRES16=r6, @ANYBLOB="08002abd7000fbdbdf250400000014001a80100004800c0001800500070004000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000801)
executing program 0:
mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0x87, &(0x7f0000000040)="c74e1ce1137494fde9df2f64834c6096c269be2f844fddb8680f4ae8bc2700"/40, 0x8001, 0x5f7676ca}, 0x8008}, 0x1, 0x6) (async)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) (async)
r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/zswap/pool_total_size\x00', 0x2, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) (async)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
init_module$auto(0x0, 0xffff9, 0x0) (async)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
mmap$auto(0xeffd, 0x8, 0x1000000003, 0x19, r2, 0x8000)
move_pages$auto(0x0, 0x2e747e76, 0x0, 0x0, 0x0, 0x2)
socketpair$auto(0x1d, 0x6, 0x3, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
open(0x0, 0x22240, 0x118)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x6, 0x17, 0x0, 0xfb3) (async)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000140)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
bpf$auto(0x5, 0x0, 0x7)
close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async)
socket(0x11, 0x80003, 0x300) (async)
socket(0x29, 0x5, 0x0) (async)
open(0x0, 0xea640, 0xb5d1af1605322d96)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8802, 0x0) (async)
write$auto(0x3, 0x0, 0xfdef) (async)
read$auto(r0, &(0x7f0000000000)='#.&\x00', 0xc1) (async)
madvise$auto(0x0, 0x8000000000000000, 0x15)
socket(0x18, 0x2, 0x0)
executing program 32:
mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0x87, &(0x7f0000000040)="c74e1ce1137494fde9df2f64834c6096c269be2f844fddb8680f4ae8bc2700"/40, 0x8001, 0x5f7676ca}, 0x8008}, 0x1, 0x6) (async)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) (async)
r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/zswap/pool_total_size\x00', 0x2, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) (async)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
init_module$auto(0x0, 0xffff9, 0x0) (async)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
mmap$auto(0xeffd, 0x8, 0x1000000003, 0x19, r2, 0x8000)
move_pages$auto(0x0, 0x2e747e76, 0x0, 0x0, 0x0, 0x2)
socketpair$auto(0x1d, 0x6, 0x3, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
open(0x0, 0x22240, 0x118)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x6, 0x17, 0x0, 0xfb3) (async)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000140)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
bpf$auto(0x5, 0x0, 0x7)
close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async)
socket(0x11, 0x80003, 0x300) (async)
socket(0x29, 0x5, 0x0) (async)
open(0x0, 0xea640, 0xb5d1af1605322d96)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8802, 0x0) (async)
write$auto(0x3, 0x0, 0xfdef) (async)
read$auto(r0, &(0x7f0000000000)='#.&\x00', 0xc1) (async)
madvise$auto(0x0, 0x8000000000000000, 0x15)
socket(0x18, 0x2, 0x0)
executing program 2:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop5/mq/0/nr_reserved_tags\x00', 0x80880, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
openat$auto_transactions_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "9e6a5f99bb0e"}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/audit\x00', 0x20080, 0x0)
read$auto_tomoyo_operations_securityfs_if(r2, 0x0, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
socket(0x11, 0x3, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_NET_GET(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000400)={0x14, r4, 0x492a92567041df2f, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
read$auto(0x3, 0x0, 0x8)
executing program 2:
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0)
r0 = socket(0x1b, 0x3, 0x76)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0xa, 0x1, 0x100)
modify_ldt$auto(0x1, 0x0, 0x10)
r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
pread64$auto(r3, 0x0, 0x7ff, 0x400)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x7, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x1, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x90000001, 0x3, 0x1, 0x5, 0x5]}, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0)
unshare$auto(0x40000080)
executing program 2:
prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x0)
executing program 2:
mmap$auto(0x0, 0x8, 0xe2, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
io_uring_setup$auto(0xc, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0)
read$auto(0x3, 0x0, 0x80)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
r2 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/timestamp_mode\x00', 0x300, 0x0)
read$auto_trace_time_stamp_mode_fops_trace(r2, &(0x7f0000008340)=""/88, 0x58)
bind$auto(0x3, 0x0, 0x6a)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x80201, 0x0)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
close_range$auto(0x2, 0xfffffffffffff000, 0x2)
bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0x9, 0x2, "cacd2dff11"}, @HWSIM_ATTR_NO_VIF={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xb06af94f6e038a6)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x2, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
read$auto(0x3, 0x0, 0x7)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x13, 0x202000a, 0x8000000000000003, 0x4000000019, r0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
close_range$auto(r1, 0x8, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';')
socket(0x21, 0x2, 0x2)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000)
prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
setgroups$auto(0x10001, &(0x7f0000000080)=0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
getpid()
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0}, 0x5)
r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r3, &(0x7f0000000040)='nbd\x00', 0x4)
setresuid$auto(0x2, 0x7, 0x8080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x6, 0x15, 0x0, 0xfb3)
executing program 33:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x13, 0x202000a, 0x8000000000000003, 0x4000000019, r0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
close_range$auto(r1, 0x8, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';')
socket(0x21, 0x2, 0x2)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000)
prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
setgroups$auto(0x10001, &(0x7f0000000080)=0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
getpid()
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0}, 0x5)
r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r3, &(0x7f0000000040)='nbd\x00', 0x4)
setresuid$auto(0x2, 0x7, 0x8080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x6, 0x15, 0x0, 0xfb3)
executing program 4:
r0 = prctl$auto(0x3a, 0x1, 0x0, 0x2, 0x203)
bind$auto(r0, 0x0, 0x7fffffff)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x1d, 0x3, 0x1)
getsockopt$auto(r3, 0x65, 0x2, 0xffffffffffffffff, 0x0)
write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
write$auto(r2, 0x0, 0x9)
mmap$auto(0x0, 0x40009, 0xdf, 0x10000000009b72, 0x7, 0x28000)
arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x1490)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
socket(0xa, 0x3, 0x3a)
semctl$auto(0x80001ff, 0x804, 0x13, 0x4)
setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567)
openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xecc6, 0x0, 0x7352, 0x2d, 0x200000000045f, 0x6, 0x7, 0x3, 0x2, 0x9, 0x36e, 0x6, 0x2, 0x3000, 0x9, 0x8, 0x10003, 0x8, 0xffffffffffffffff, 0x0, 0x5, 0x1ffb, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x4, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x3, 0x3ba0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0x11)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
memfd_create$auto(0x0, 0xb)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00'})
rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}})
r5 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r5, 0x0, 0x5, 0x100)
executing program 4:
rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000028, 0xd98, 0x2}, 0x0, 0x7ffffffff000, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10f, 0x82, 0x0, 0x14)
read$auto(r0, 0x0, 0xcefbce6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
fstat$auto(0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
ioctl$auto(0xc8, 0x401054d5, 0x0)
read$auto_nsim_dev_trap_fa_cookie_fops_dev(r0, &(0x7f0000000000)=""/156, 0x9c)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
kill$auto(0x0, 0x11)
syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 4:
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket(0x2, 0x1, 0x106)
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x101, 0x0)
ioctl$auto_EVIOCGRAB(r0, 0x40044590, &(0x7f0000000f40)=0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(r0, r0, 0x7be9)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404cc91}, 0x24040081)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r1 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x200, 0xb}, 0x800009}, 0x80005, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x802, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, 0x5, 0xcad7)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0xb)
write$auto(0x3, 0x0, 0xffd8)
executing program 4:
r0 = gettid()
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4)
ioperm$auto(0x3, 0x5, 0x149)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x4)
socket(0xa, 0x5, 0x84)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999", @raw=0x3cf51fcb})
newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, <r2=>0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0xb456, 0x9, 0x53}, 0x1)
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8)
ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x8)
kill$auto(r0, 0x11)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x3, 0x0, 0x7, 0xb, 0x3, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbf4250200080008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x14, 0x0, 0x73d, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x8010)
shmctl$auto_IPC_INFO(0x4, 0x3, &(0x7f0000000500)={{0x1, r2, 0x0, 0x7, 0xfc42, 0x10, 0x1bb3}, 0x10000, 0x9, 0x3, 0xc000000000000000, @raw=0x3, @raw=0xe28, 0x0, 0x0, &(0x7f0000000180)="d4cc8cb0", &(0x7f0000000440)="8435e1970f564d3e46aa187174d3c0e81683417238e9d2a2570430779f035010cc676306863a844115f7aeb08cb216f22560378c3203a49004f023c470f13e8b9c15a4465f27a3b5f5e55e8369bbe628699c0c85a85182ef9137c5bd538ac6010be0a6007f4e1a1c62366265b5627882d5431a8dc569d9739f6dd50a70f8ade11173183f380acbbfca53"})
r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x108800, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare$auto(0x40000080)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
select$auto(0xfff, &(0x7f00000001c0)={[0x8000000000000000, 0xff14, 0x7, 0x8, 0xb, 0x3, 0x9, 0x5, 0x9, 0x7fff, 0x7, 0x27, 0x0, 0x5, 0xfff, 0xfffffffffffffffc]}, &(0x7f00000002c0)={[0x9, 0xfe0000000, 0x3, 0xfffffffffffff05b, 0xfffffffffffffff9, 0x7fff, 0x40, 0x5, 0x4, 0x5, 0x0, 0x8000000000000000, 0x0, 0x6, 0x81, 0x81]}, &(0x7f0000000340)={[0x9, 0xf, 0x40b48540, 0x876, 0x5, 0x8, 0x8000000000000000, 0x2, 0x9, 0x8, 0x29ff, 0x8c, 0x29, 0x11ce, 0x0, 0x3]}, &(0x7f00000000c0)={0x40, 0x3})
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(0x3, 0x4038ae7a, 0x38)
executing program 4:
r0 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_thresh\x00', 0x6c0000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
eventfd$auto(0xc)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x0)
mmap$auto(0x0, 0x9, 0x2, 0x10, r0, 0xffffffffffffffff)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402082, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454da, r1)
fadvise64$auto_POSIX_FADV_WILLNEED(r0, 0x3, 0x3, 0x3)
executing program 34:
r0 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_thresh\x00', 0x6c0000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
eventfd$auto(0xc)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x0)
mmap$auto(0x0, 0x9, 0x2, 0x10, r0, 0xffffffffffffffff)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402082, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454da, r1)
fadvise64$auto_POSIX_FADV_WILLNEED(r0, 0x3, 0x3, 0x3)
executing program 5:
prctl$auto(0x27, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) (async)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x24008040)
openat$auto_objects_fops_(0xffffffffffffff9c, 0x0, 0x202200, 0x0) (async, rerun: 32)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000045480901764441b289606d51c9101931b7b0f0ce3caa17c83c2b33fc5e769e300e330cfb43a80d9a77c64094bebaa7ffac59a6e6eac1e1003f7389f9e9d88b5e1622fded80621502901f8bc69de546906084a9b93b2315318e818ce1faa22b8d59bc0d909849beb6b960af73e9e18b4820d7752eddf5dc1f0a1260f29e97d9fc0352296c9145f3255aaf6ea257ed57179625f23a18dbadedc65e8b4927b975c91fe670f84ca6a3960cad9a13b5f92150b89b5e", @ANYRES16=0x0, @ANYBLOB="e3b725bd7000fddbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) (async)
write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0xfffffffffffffffd, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
pread64$auto(r1, 0x0, 0x800003, 0x800000000000e2a) (async)
socket(0x2c, 0x80003, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80040, 0x0) (async, rerun: 64)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55) (async, rerun: 32)
socket(0x2, 0x3, 0xa) (async, rerun: 32)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) (async)
select$auto(0x981, 0x0, &(0x7f0000000980)={[0x5, 0x40, 0xffffffff, 0x72634de1, 0x4000000000, 0x9, 0x0, 0x9, 0x1, 0xd0d, 0xc76a, 0x5, 0x2, 0x2, 0x7, 0x9]}, &(0x7f0000000a00)={[0x4, 0xd, 0x5, 0x6e, 0x1, 0x8, 0x6, 0xfffffffffffff800, 0xfffffffffffffffc, 0x202, 0x7, 0x8, 0x2, 0x6, 0x9, 0x9]}, &(0x7f0000000a80)={0x100000000, 0x2})
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) (async, rerun: 64)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socket(0x11, 0x3, 0x9)
executing program 5:
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x108800, 0x0)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/saved_tgids\x00', 0x0, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x200, 0x0)
r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x40000, 0x0)
listen$auto(r1, 0x611e)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
fcntl$auto_F_SETSIG(r2, 0xa, 0xfffffffffffffeff)
poll$auto(0x0, 0x6, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
open(0x0, 0x2c3fbc, 0x12)
madvise$auto(0x0, 0x200007, 0x19)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3)
close_range$auto(r1, r0, 0x9)
socket(0x2, 0x80002, 0x73)
read$auto(0x3, 0x0, 0x80)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
r3 = socket(0x11, 0x80003, 0x300)
io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46)
sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040091}, 0x40850)
io_uring_enter$auto(r0, 0x882, 0x3ffffff7, 0x7fb, 0x0, 0x375)
io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2)
executing program 5:
r0 = socket(0x10, 0x2, 0x4)
r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="21007d9bb6a89d8db43b94bd0619eb18b171aaa2736e6d0d3977dc59472fa15983ecff6186c20ec0793db05ad94c9c35f519833067a0cb7203ff34337c14852505b023aa1f23395cf98870b0c93985b63c34668da10bc6c44c1b73efc6f89c616437bc2ad089cd109b281440b74a9c0a58023faea9fafbe63fd7d108505194975e6df18064c27d15fffbfe61f416cdfa727afcaf3137de8409041713cfa328093304f4f966764e8e2fba02d8f877fa07111ea9dc3c179ff426fd8221704f298cfdb69168abdce83a6b8b9d062bdb2d169a71bccfbe04a515fe8c66ccda98b8a52dbe70f003572cf670e391e2893b1c0611dbf5469c", @ANYRES16=r2, @ANYBLOB="00022abd7000fedbdf252800000009001f00265d26ca7b000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24008800)
sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x48090)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x600201, 0x0)
openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000040), 0x41abc0, 0x0)
r3 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/available_events\x00', 0x2000, 0x0)
close_range$auto(r3, r0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0x0, 0x2003f0, 0x15)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0)
ioctl$auto_SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/112, 0x70)
mmap$auto(0x3, 0x25, 0x800007, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, 0x0)
ioctl$auto(0x3, 0xc0303e03, r6)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 5:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
mkdir$auto(0x0, 0x353)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x2)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x4, 0xe983, 0xe6, 0xeb1, r1, 0x8001)
r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
r3 = epoll_create$auto(0x4)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={<r4=>0x9, 0x21eb, 0x7ff, 0x3ff, 0x0, 0x3, 0x5f, 0x0, 0x3}, 0x6f3)
ptrace$auto(0xce6, r4, 0x9, 0x2)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8}]}, 0x1c}}, 0x805)
executing program 5:
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2})
r3 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0)
writev$auto(r3, 0x0, 0x4)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0)
socket(0x2, 0x1, 0x106)
ioctl$auto_SCSI_IOCTL_GET_IDLUN2(r1, 0x5382, &(0x7f00000002c0)="2023aa3b8a11942cf9fae0bf2ca907cd1910a3dacf56f742ff53aae49aabd00700c8acac61bd10a779f5b3e867b95d4f5a698773f30997a24e757a962868e6845e8c6362d445342a3718f7f42c8749a07401154ea06fce09442942b587aac7d8e5aa639304e308199eabefe8d5172cfe03f64f63a8929189a4ec71dfb31cc4322c49d662bdd54cc5e5b33561b0190e996d11af86")
socket(0x2, 0x1, 0x0)
shutdown$auto(0x200000003, 0x2)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/286, 0x11e)
read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10900, 0x3ff, 0x0)
setfsgid$auto(0xee00)
listen$auto(0x3, 0x3)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x8f3b7a51b8360c21, 0x0)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0)
pwrite64$auto(r4, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5)
readahead$auto(r4, 0x4, 0x4)
sysfs$auto(0x3, 0x401, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
executing program 5:
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404cc91}, 0x24040081)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x200, 0xb}, 0x800009}, 0x80005, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x802, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, 0x5, 0xcad7)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
executing program 35:
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404cc91}, 0x24040081)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x200, 0xb}, 0x800009}, 0x80005, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x802, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, 0x5, 0xcad7)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
executing program 6:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0)
socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
mmap$auto(0x0, 0x400008, 0xb23, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = socket(0xa, 0x801, 0x106)
setsockopt$auto(r2, 0x6, 0x22, 0x0, 0x10)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xc, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
close_range$auto(0x2, 0x8, 0x0)
write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
executing program 6:
capset$auto(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b67, 0x1)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/neigh/tunl0/app_solicit\x00', 0x2000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="0600000074542d2b23739cc4090d4c1200000000007ca8625432b812bbbadf96af1012051e08a6099a0bb2cfc08d3a00"/59, @ANYRES16=r3, @ANYBLOB="1b002cbd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800)
read$auto(r1, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
unshare$auto(0x40000080)
r4 = mq_open$auto(0x0, 0xdd1, 0x8, 0x0)
mq_notify$auto(0x4, 0x0)
mmap$auto(0x7, 0x2020008, 0x3, 0x10000ebe, 0xfffffffffffffffa, 0x8000)
fsopen$auto(0x0, 0x1)
adjtimex$auto(&(0x7f00000005c0)={0xf332b72, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x400000000000001, 0x368e, 0x2, {0xf, 0x10000}, 0x6, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0x1a00, 0x101})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x400001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55)
setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b)
r5 = ioctl$auto_NS_GET_MNTNS_ID(r4, 0x8008b705, &(0x7f0000000200))
write$auto(r5, &(0x7f00000006c0)='\x00\x00\x00\x00\xb7\xb9w\b\x84\x12\x00|\"\f\x85kqhYS\xf25\xc5z\xa4{\x97\x00\x1b\xfe\xa9\xf0\xcc}\x1b\"\xf7\x84\xc9\xe2\xd5\xd3\x11\xb1O\xd1\xdd\xfeKr\xc3(s\xcf\x1b6\x94\xeeP\xed\xe5\x0f\xba\x0e\x1a\xbcqT\xc8;\xe6L>X \xcc7\xb40\xd1\x85\x8d\xeb\x0ee\x9d/\x7fX\xfa^\xcf\xe4\x01S\xac\x9d\x02\xec\xb3\xa1+\xe2\x7f\xce\xc7\xa2q\xb7^~g\xc8\x8152\x80]$\xfd\r\xed\xf9\xa6\x8b\x80{\xd3^ZK\xb8\x17\xdd\xaar\x04W\x1e\xbb\xe3\xa9\xa8\xe4\xac\xf7\xd4N\xea\x18\n\xad\x00\x12>v\b5S\xc0\xf08\f\xe1\xae\xb1\x9d\xfdM14\x99\r:.\x84\x8av\xb5a\xb9\xa2o\xbfiy\xd4\x1c\xdc\xed\xab\xcd\x9aj\x0fif\x9a\xf8N\xcfr\xefr\xbb\x14`\xc1E\xdc\xf8\xa0\xa4\xe6MF\xfc\x9a\xe7\x8a\xf6X)\x9e\x9dr\xf4\xca\xad%C\xb4M\xed\x90u`\xea\xa7\xda\x9c\x8b\xfc\xd3\x91F\f<\xd8\xf8\x8d\xf5Fp\xac\xaf(\xaf\vc\x84\xa5\xf9\xe3\xbc\x1bj\x8b\x96\xea\x10\xc1\nu\xe16\xaaR\xa2Uz\xdf\v\xd2\xcd\xad\xe0\xf5\xc37b\x91\xe1\x8f\x05\xe0wr\x11\x7f\x85v>L{x\xb5\x17\x1c!\xcf&H\xc9iE\x05-\x02[\xee\x00\xf7g\xa2P\x95\xa3\x91\xfc\x18(\x88\xbe\xab&\x00\x00\xeeZ\xd6\xe4A\x16\xdf+\x85\x95\x03We\b\xae\xe1T\xbb\xa3C/\xba\xe5]\xbc\xcf\xba.\xcd\f:s\x99\xb0\x9de\x17\xda\x03\x97\n\tz\x17\xf8\xbb\xa1q\xae\r\xber\bF\x04:\x03\xef\x90\x88\xec\x7f\xbe\x8er_\xdf\a\xd7\xca\xe1\x9cJ\xff\xaa:\xabo\x9f\xb4 \xe4\x05\xaf\x8aVA\xa5\xd2\xd2h5\x9dq\x18\xe5\x90', 0xa3db)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
executing program 3:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe) (async)
statmount$auto(0x0, 0x0, 0x1fa, 0xd) (async)
r0 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r0, 0x114, 0x6, 0x0, 0x2) (async)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) (async)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080))
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000000)='/dev/media8\x00', 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x42200, 0x0) (async)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x80000000007, 0x7, 0x5, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x7ffffffd, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async)
ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x100, &(0x7f00000001c0)) (async)
r2 = pipe$auto(0x0)
splice$auto(0x4, 0x0, r2, 0x0, 0x80000001, 0x9) (async)
ioctl$auto_MON_IOCQ_URB_LEN(r2, 0x9201, 0x0) (async)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x3, 0x3a) (async)
setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) (async)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x6, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x4, 0x0, 0x3, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5, 0x6ad, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x40000, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x10, 0x100000000000]}, 0x1fe, 0x6) (async)
r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd03, &(0x7f00000001c0))
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pipe$auto(0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x2}, 0x2, 0x5)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto_SO_BUSY_POLL(r1, 0x1, 0x2e, &(0x7f0000000240)='#}#\xa7@\x00H\x8b\x9bc!\xfa\x88\xe2\x04\x00\x00\x00\x96V\xf2\x96L\x17\'\x13\xd3\x1e\x9bL\xf8\x8f\xe9\a\xc6]\'\x8fs:\xfc?*zbB\xadTqu\x16H\x95\n\\\xdd\xfd7\x02\xb2e\xf5A\x8e\f\xd6F\xd6\x97\xf6N\x0e\x8bn\x83\xf7\x02}#e\xd7Lv\xb0\xed2\x87\nt\xd0\xefc{\xd2C\xdd\x94\xe6)\x15`\x858k\xc0\xa0\x80>0\xfd\xa7\x8fd\xa0z\xc4]ZKh9\xa61\xc6\xe1\xd37OnC0\x06\x00\x8605\xd3\xab\b\x88\xd9H\xa1\x8b5\xc9\x0e\xe0\xe2\xd3\xae\xbe\xe0E\xea\xda\x9b~\x91+|\xc1\x0f0>kYH\x93\xf2\xd8]\xddV|\xab.\xa4\x1c%U.\xde\x93\xe8\x14K(\xd6\x19\xf7\x94\tig\x00\x8e\t\x14\xef\xe8`\xeaD\xb6\xadP\x98\xff\xb7\x13\x93\x925o51\x80}~Qv=\x06\xafI]$<\xff1\xab\'\xebp\x06\xcf\xcf\xab\xe2\xcc\xfe;a\xb3a\xad\x06\xe7fA{\x89\x9a\xe81\xd1\aJ\xfeD\xa4\xe8J\xa8\n\xd1\xcd,\xb5\xd39\x98\xb0s\x1dE\x92\xe9\xabg>W\'\xca\xb2t \r/;\t!\xaf\x94lj\\\x04!\x00\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\xe0=\xe2\xca\xee\xad\xda\xb6\xa9\xee\xb2(z\xbfG\xf0\xb2#\xec\x9a\xbcR%=\x97P\xf1_/^\xf3\xde\xd3>\x7f\xc9\xddU\xf6\xd2C\xc5\x01wl\xaf\xde/', 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) (async)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
pipe$auto(0x0) (async)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async)
vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x2}, 0x2, 0x5) (async)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
unshare$auto(0x40000080) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$auto_SO_BUSY_POLL(r1, 0x1, 0x2e, &(0x7f0000000240)='#}#\xa7@\x00H\x8b\x9bc!\xfa\x88\xe2\x04\x00\x00\x00\x96V\xf2\x96L\x17\'\x13\xd3\x1e\x9bL\xf8\x8f\xe9\a\xc6]\'\x8fs:\xfc?*zbB\xadTqu\x16H\x95\n\\\xdd\xfd7\x02\xb2e\xf5A\x8e\f\xd6F\xd6\x97\xf6N\x0e\x8bn\x83\xf7\x02}#e\xd7Lv\xb0\xed2\x87\nt\xd0\xefc{\xd2C\xdd\x94\xe6)\x15`\x858k\xc0\xa0\x80>0\xfd\xa7\x8fd\xa0z\xc4]ZKh9\xa61\xc6\xe1\xd37OnC0\x06\x00\x8605\xd3\xab\b\x88\xd9H\xa1\x8b5\xc9\x0e\xe0\xe2\xd3\xae\xbe\xe0E\xea\xda\x9b~\x91+|\xc1\x0f0>kYH\x93\xf2\xd8]\xddV|\xab.\xa4\x1c%U.\xde\x93\xe8\x14K(\xd6\x19\xf7\x94\tig\x00\x8e\t\x14\xef\xe8`\xeaD\xb6\xadP\x98\xff\xb7\x13\x93\x925o51\x80}~Qv=\x06\xafI]$<\xff1\xab\'\xebp\x06\xcf\xcf\xab\xe2\xcc\xfe;a\xb3a\xad\x06\xe7fA{\x89\x9a\xe81\xd1\aJ\xfeD\xa4\xe8J\xa8\n\xd1\xcd,\xb5\xd39\x98\xb0s\x1dE\x92\xe9\xabg>W\'\xca\xb2t \r/;\t!\xaf\x94lj\\\x04!\x00\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\xe0=\xe2\xca\xee\xad\xda\xb6\xa9\xee\xb2(z\xbfG\xf0\xb2#\xec\x9a\xbcR%=\x97P\xf1_/^\xf3\xde\xd3>\x7f\xc9\xddU\xf6\xd2C\xc5\x01wl\xaf\xde/', 0x9) (async)
executing program 6:
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event1\x00', 0x141300, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x200005}, 0x4000007, 0x8000000000000000, 0x3ff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r1, 0x8001)
readv$auto(r1, &(0x7f00000000c0)={0x0, 0xfffe}, 0x5)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa02842, 0x0)
close_range$auto(r0, 0x8, 0x803)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(r3, 0x3, 0xffffffffffffffff)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto(0xffffffffffffffff, 0xae41, r4)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x600d80, 0x0)
ioctl$auto_TIOCSETD2(r5, 0x5423, &(0x7f0000000080))
mmap$auto(0x0, 0x7ff, 0xdf, 0x9b70, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffe, 0x580d, 0x112f4a03, 0x8000000008011, 0x3, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20a100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x6, 0x40)
r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0)
write$auto(r0, 0x0, 0x110082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
writev$auto(0x1, 0x0, 0x1)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/geneve1/ndisc_evict_nocarrier\x00', 0xc819f3dbe3a51a17, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0)
socket(0x2, 0x3, 0xa)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/ip6_tables_targets\x00', 0x608100, 0x0)
bind$auto(0x3, 0x0, 0x6a)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
userfaultfd$auto(0x1)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0xffffffffffffff8d, 0x3, 0xeb0, 0xffffffffffffffff, 0x8000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000)
prctl$auto(0x5, 0x8, 0x0, 0x400000000001, 0x4)
epoll_pwait2$auto(r0, &(0x7f00000000c0)={0x5, 0x101}, 0x10001, &(0x7f0000000100)={0x400010000}, &(0x7f0000000140)={0x5}, 0x8)
ioctl$auto_TIOCMGET2(r2, 0x5415, 0x0)
sendmmsg$auto(r1, 0x0, 0x9a6, 0x7000000)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 6:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e)
io_uring_setup$auto(0x1, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x0, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r0, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x2, 0x7, 0xb, 0x8, 0x100, 0x2, 0x40000003, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"})
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/lp_interval\x00', 0x1e2142, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r1, 0x0, 0x1f40) (async)
read$auto(r1, 0x0, 0x1f40)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfffffdef)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) (async)
openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) (async)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
close_range$auto(0x2, 0x8, 0x40000000) (async)
close_range$auto(0x2, 0x8, 0x40000000)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0)
ioctl$auto(r3, 0xc0285629, r3)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
lsm_list_modules$auto(0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
executing program 3:
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x10, 0x2, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0)
read$auto(r0, 0x0, 0xc)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae41, r1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 64)
socket(0x2, 0x1, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_CREATE_VM(r2, 0x4018aee1, 0x1000000)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffe2, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="906f1995", @ANYRES16=0x0, @ANYBLOB="10002cbd0000fddb79a71c"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) (async, rerun: 32)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (rerun: 32)
executing program 7:
capset$auto(0x0, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0)
setsockopt$auto_SO_RCVTIMEO_OLD(r0, 0x9, 0x14, &(0x7f0000000000)='/dev/ttyS0\x00', 0x9)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
ioctl$auto(r0, 0x540a, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0)
pread64$auto(r3, 0x0, 0x10001, 0x830)
write$auto(r2, 0x0, 0x30fe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket(0x2, 0x1, 0x0)
io_uring_setup$auto(0x1, 0x0)
socket(0x1f, 0x80000, 0x6)
sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r4, 0x0, 0x4008080)
socketpair$auto(0xffff, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0xfff, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$dir(0xffffffffffffff9c, 0x0, 0x525c00, 0x100)
mmap$auto(0x0, 0x4020009, 0xdf, 0x10000000000eb1, 0x401, 0x8000)
capset$auto(0x0, 0x0)
mprotect$auto(0x0, 0x806121, 0x6)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r5, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
executing program 3:
capset$auto(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0xa, 0x6, 0x5, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000041}, 0x800)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b67, 0x1)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) (async)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000200", @ANYRES16=r3, @ANYBLOB="1b002cbd7000fedbdf2503000000040003800c000b00ffffffffffffffff0400028012000100898035000000000000000000000000000c000380050017801f000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) (async)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000200", @ANYRES16=r3, @ANYBLOB="1b002cbd7000fedbdf2503000000040003800c000b00ffffffffffffffff0400028012000100898035000000000000000000000000000c000380050017801f000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800)
read$auto(r1, 0x0, 0x1ff) (async)
read$auto(r1, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
r4 = mq_open$auto(0x0, 0xdd1, 0x8, 0x0)
mq_notify$auto(0x4, 0x0)
mq_notify$auto(0x4, 0x0) (async)
mq_notify$auto(0x4, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
fsopen$auto(0x0, 0x1) (async)
fsopen$auto(0x0, 0x1)
adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0xdeb1, 0x808})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r6, 0x401870cb, r6)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x381800, 0x0)
read$auto_proc_uid_map_operations_base(r4, &(0x7f0000000140)=""/163, 0xa3) (async)
read$auto_proc_uid_map_operations_base(r4, &(0x7f0000000140)=""/163, 0xa3)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0)
sendfile$auto(r7, r7, 0x0, 0x7ffff000)
executing program 1:
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/15/per_cpu_count\x00', 0x0, 0x0)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c028379dd", 0xbb)
read$auto(r0, 0x0, 0x20)
executing program 1:
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/15/per_cpu_count\x00', 0x0, 0x0)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a", 0x9c)
read$auto(r0, 0x0, 0x20)
executing program 7:
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/arch_status\x00', 0x120682, 0x0)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1d, &(0x7f0000000040)='!\x00', 0x1ff)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYRES8=r1], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0)
ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, 0x0)
ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0)
executing program 1:
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/15/per_cpu_count\x00', 0x0, 0x0)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c028379dd", 0xbb)
read$auto(r0, 0x0, 0x20) (fail_nth: 1)
executing program 7:
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404cc91}, 0x24040081)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x200, 0xb}, 0x800009}, 0x80005, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x802, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, 0x5, 0xcad7)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
bind$auto(0x3, 0x0, 0x6a)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
statmount$auto(&(0x7f0000000140)={0x9, @inferred=r3, 0x2, 0x3ff, 0x7f}, &(0x7f0000000440)={0x6, 0x6, 0x53, 0x4, 0x3, 0x101, 0x2, 0x3, 0x5, 0xffffffff80000001, 0x57d6, 0x8, 0x3, 0x1, 0x8, 0x3, 0x1, 0x8001, 0x400, 0x1ff, 0xfff, 0xd8, 0x4, 0x2, 0x9, 0xbef3, 0x411, 0x7, 0x0, 0x7, 0x7, [0x6, 0x7f, 0xbce7, 0x599, 0x56, 0x7, 0x6, 0x8, 0xffffffffffffffff, 0x0, 0x200000000000, 0x2, 0x1, 0x9, 0x100, 0x40004545, 0x4, 0xa, 0xb, 0xf5fd, 0x7, 0x4, 0x7fffffff, 0x1fc, 0x2, 0x5, 0x8, 0x4, 0x4, 0x7fffffff, 0x4, 0x0, 0x7, 0x80, 0x6, 0x4, 0x7, 0x4, 0xffc0000000000000, 0x1, 0x9, 0x8, 0x80000001], "73e9b0abe71d1e2aee680f7f0e812f294220578764aaba215588c48129939d0d8c6c8dcb488aeb5a653cee9f3407b9069269"}, 0x40, 0x36)
msync$auto(0x2, 0x9, 0x40)
select$auto(0x9, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb})
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
executing program 6:
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/dev_mcast\x00', 0x404080, 0x0)
write$auto(r3, 0x0, 0x7ef)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/type\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/116, 0x74)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0xa, 0x1, 0x100)
modify_ldt$auto(0x1, 0x0, 0x10)
pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400)
socket(0x2, 0x1, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x12, 0x0, 0x0, 0x0, 0x0)
write$auto(r5, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1\x05\x00\x00\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\x89C:\xc3\xcbx*=\x12\xb4q\xeeC\x81\n\\_\x04D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\x9e\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x8cec, 0x6]}, 0x0)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0)
sendfile$auto(r6, r6, 0x0, 0x0)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x80400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0xffffffffffffbfff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
madvise$auto(0x0, 0x200007, 0x19)
executing program 1:
r0 = prctl$auto(0x3a, 0x1, 0x0, 0x2, 0x203)
bind$auto(r0, 0x0, 0x7fffffff)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x1d, 0x3, 0x1)
getsockopt$auto(r3, 0x65, 0x2, 0xffffffffffffffff, 0x0)
write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
write$auto(r2, 0x0, 0x9)
mmap$auto(0x0, 0x40009, 0xdf, 0x10000000009b72, 0x7, 0x28000)
arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x1490)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
socket(0xa, 0x3, 0x3a)
semctl$auto(0x80001ff, 0x804, 0x13, 0x4)
setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567)
openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xecc6, 0x0, 0x7352, 0x2d, 0x200000000045f, 0x6, 0x7, 0x3, 0x2, 0x9, 0x36e, 0x6, 0x2, 0x3000, 0x9, 0x8, 0x10003, 0x8, 0xffffffffffffffff, 0x0, 0x5, 0x1ffb, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x4, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x3, 0x3ba0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0x11)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r5 = memfd_create$auto(0x0, 0xb)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00'})
rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}})
r6 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r6, 0x0, 0x5, 0x100)
executing program 3:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00')
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
r1 = socket(0x2b, 0x2, 0xfffffffd)
r2 = socket(0x2, 0x801, 0x106)
r3 = socket(0x26, 0x80805, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'erspan0\x00', <r5=>0x0})
bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f0000000700)=@bpf_attr_0={0xb, 0xee6a, 0x4, 0x900000, 0x0, r0, 0x9, "a8fe22a3a53467643c21c27df6b15218", r5, r3, 0x1000, 0x7fffffff, 0x477b6c73, 0x173, r4, r2}, 0x6)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
readv$auto(0x0, &(0x7f0000000080)={0x0, 0x1e}, 0x3)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
write$auto(r6, 0x0, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf)
r7 = socket(0x2, 0x3, 0x1)
connect$auto(r7, &(0x7f0000000000), 0x55)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
shmctl$auto_SHM_STAT_ANY(0x3, 0xf, &(0x7f0000000240)={{0x10, <r9=>0x0, 0x0, 0x0, 0x0, 0xc1, 0x5}, 0x101, 0x8, 0x3, 0x0, @raw=0xffffffa1, @raw=0x81, 0xd, 0x0, &(0x7f00000000c0)="abc1b8a92c753e4112903c89bcef952362c4682f3209575d831da3f3316575b6043cf7564f", &(0x7f0000000100)="431218aa2ada6617a975f17db8a6032b6470de07b2f3aa97112936393cf4ac878fea2c0668d6a05ac6a0fbd5cde6b1c77a7347a3aa12ca85b23afe9277767562f5b2a29a100e68d1b1abd88d3a334052e93d8172a65ac531ec574f7db0904849d9ed93b382da7fe328cdf7960f46c41ada2eea19b0e52d47eed8c8d770a320370d683c8c1fe1c9512d71e0c2e5849f8499105a06b75595bea01bce127707ee28be8bc960fb7dec83ae2099e4ffe16b690e8d0b48de03bb3416016f8cecbae7a62cb6f09d1f8d28c99d9b7ce77ba3d8b38805b2f55c3485ce741517dfc6800f432e51008dc6"})
msgctl$auto_IPC_STAT(0xd7f, 0x2, &(0x7f0000000340)={{0x5, <r10=>0x0, 0xffffffffffffffff, 0xc, 0x2}, &(0x7f00000002c0)=0xb, &(0x7f0000000300), 0x9, 0xfffffffffffffff8, 0x8, 0x1, 0x2, 0x101, 0x8, 0x2, @raw=0x7})
sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x258, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_CQM={0x241, 0x5e, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @uid=r9}, @typed={0x8, 0xf5, 0x0, 0x0, @uid=r10}, @generic="debd3e77f8f5a518065e97b50a26439114e3", @generic="4844b5326bbe025f487e09a652a1ada98cf60c6e4ce896d24508a189516238c254f682c43e453d7a49200f6401eb7fb390b389efec4bd35e8c338b91666116ff1ce297c8da4efdddbb8b6247da061502e558a11d8793303e9a71b5c5ff3d5ac3d7f6cebe26945e54ea3f915e4239867225f66b27881fdaab9e8fd264e78cbb6c78c886fc6ad42dd2184ee9329148fa9c3f363719129be2843d0c6b8a5cb893adba0a5416ccdeeca497316021ed951bb6d1c7741b0031c56fea38ec", @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x81}, @generic="2edb1e61a8f062a5b45035b7c72dfcf87c6adfe8", @nested={0x144, 0x124, 0x0, 0x1, [@generic="eb932c7438149160e232160a21af5500a899c39d70c0eb4362383e9c72cc30c1b01a558c325efe341564ba6dcc15f44d3709d7f3ff239464bc7e16ec4614da5c6405ea95f0f0150783544fb6eb280026370e4f20d8a222dc3dc3d4db404faab39fbc16ab031cf573cbd12661b534ff1b953dcf64756cf9160a14d6fc0ca5974ff7d7970f53053e16d0c331e2dc4ae078dd4b00e6293aa9bd1697c18da61785cc7446737f19f5c6b61830549c9fd606e51e3af24d289d52102ac75330", @generic="4bd9977de0697a698c13d538d5769bceac2efcf9ea7547dc4eb0b8fc7d895881754f9d9e13b08f3e67b1ab2e76749c8c61164c0e7c71e39c1f46a1176b0449337828d487058269c073aa00c9abc43e58061e0a6d40ce14242fadc0bdef352cf915fb57f8b6ce230b95f8b319403a1161d47b0c59997c196582f3ec0330cc9302ab0a76af"]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000880}, 0x4040000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
executing program 1:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r0, 0x110, 0x5, 0x0, 0x4) (async)
mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) (async)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
mremap$auto(0x0, 0x2, 0x9, 0x3, 0x7fffffffb000)
executing program 7:
openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r0 = epoll_create$auto(0x3e)
epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_GTP_CMD_DELPDP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mmap$auto(0xfffffffffffffffe, 0x99, 0xdf, 0x200000000000eb2, r0, 0x8004)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0)
read$auto(r2, 0x0, 0x7)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
socketpair$auto(0xffffffff, 0x10000, 0x9, 0x0)
openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x12100, 0x0)
fstatfs$auto(r3, &(0x7f0000000240)={0x1, 0x401, 0x72, 0x7fffffff, 0x4, 0x8000, 0x1, {[0x3, 0x3]}, 0xc2, 0xb23, 0x1eda, [0x10, 0x7, 0x100, 0xc]})
mmap$auto(0x100000000000000, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x80a42, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x2, 0x0, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xff7fffff, &(0x7f0000000100)={0x0, 0xc4}, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x9)
r5 = gettid()
mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0xa)
rt_sigqueueinfo$auto(r5, 0x1, 0x0)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x401, 0x8000)
writev$auto(r4, 0x0, 0x3)
symlink$auto(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='./file0\x00')
executing program 7:
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/15/per_cpu_count\x00', 0x0, 0x0)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c028379dd", 0xbb)
read$auto(r0, 0x0, 0x20)
executing program 1:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
fcntl$auto(0x8000000000000001, 0x5, 0x8)
r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
sendmmsg$auto(r5, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x3, 0xa505}, 0x7ff}, 0x7, 0x4008)
fcntl$auto(0x8000000000000001, 0x26, 0x8)
executing program 6:
capset$auto(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000041}, 0x800)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b67, 0x1)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/neigh/tunl0/app_solicit\x00', 0x2000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r3, 0x1b, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800)
read$auto(r1, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
unshare$auto(0x40000080)
r4 = mq_open$auto(0x0, 0xdd1, 0x8, 0x0)
mq_notify$auto(0x4, 0x0)
mmap$auto(0x7, 0x2020008, 0x3, 0x10000ebe, 0xfffffffffffffffa, 0x8000)
fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4)
bpf$auto(0x2, 0x0, 0x103)
adjtimex$auto(&(0x7f00000005c0)={0xf332b72, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x400000000000001, 0x368e, 0x2, {0xf, 0x10000}, 0x6, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0x1a00, 0x101})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
r5 = ioctl$auto_NS_GET_MNTNS_ID(r4, 0x8008b705, &(0x7f0000000200))
write$auto(r5, &(0x7f00000006c0)='\x00\x00\x00\x00\xb7\xb9w\b\x84\x12\x00|\"\f\x85kqhYS\xf25\xc5z\xa4{\x97\x00\x1b\xfe\xa9\xf0\xcc}\x1b\"\xf7\x84\xc9\xe2\xd5\xd3\x11\xb1O\xd1\xdd\xfeKr\xc3(s\xcf\x1b6\x94\xeeP\xed\xe5\x0f\xba\x0e\x1a\xbcqT\xc8;\xe6L>X \xcc7\xb40\xd1\x85\x8d\xeb\x0ee\x9d/\x7fX\xfa^\xcf\xe4\x01S\xac\x9d\x02\xec\xb3\xa1+\xe2\x7f\xce\xc7\xa2q\xb7^~g\xc8\x8152\x80]$\xfd\r\xed\xf9\xa6\x8b\x80{\xd3^ZK\xb8\x17\xdd\xaar\x04W\x1e\xbb\xe3\xa9\xa8\xe4\xac\xf7\xd4N\xea\x18\n\xad\x00\x12>v\b5S\xc0\xf08\f\xe1\xae\xb1\x9d\xfdM14\x99\r:.\x84\x8av\xb5a\xb9\xa2o\xbfiy\xd4\x1c\xdc\xed\xab\xcd\x9aj\x0fif\x9a\xf8N\xcfr\xefr\xbb\x14`\xc1E\xdc\xf8\xa0\xa4\xe6MF\xfc\x9a\xe7\x8a\xf6X)\x9e\x9dr\xf4\xca\xad%C\xb4M\xed\x90u`\xea\xa7\xda\x9c\x8b\xfc\xd3\x91F\f<\xd8\xf8\x8d\xf5Fp\xac\xaf(\xaf\vc\x84\xa5\xf9\xe3\xbc\x1bj\x8b\x96\xea\x10\xc1\nu\xe16\xaaR\xa2Uz\xdf\v\xd2\xcd\xad\xe0\xf5\xc37b\x91\xe1\x8f\x05\xe0wr\x11\x7f\x85v>L{x\xb5\x17\x1c!\xcf&H\xc9iE\x05-\x02[\xee\x00\xf7g\xa2P\x95\xa3\x91\xfc\x18(\x88\xbe\xab&\x00\x00\xeeZ\xd6\xe4A\x16\xdf+\x85\x95\x03We\b\xae\xe1T\xbb\xa3C/\xba\xe5]\xbc\xcf\xba.\xcd\f:s\x99\xb0\x9de\x17\xda\x03\x97\n\tz\x17\xf8\xbb\xa1q\xae\r\xber\bF\x04:\x03\xef\x90\x88\xec\x7f\xbe\x8er_\xdf\a\xd7\xca\xe1\x9cJ\xff\xaa:\xabo\x9f\xb4 \xe4\x05\xaf\x8aVA\xa5\xd2\xd2h5\x9dq\x18\xe5\x90', 0xa3db)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r6, 0x401870cb, r6)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x781902, 0x0)
executing program 7:
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/arch_status\x00', 0x120682, 0x0)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x1d, &(0x7f0000000040)='!\x00', 0x1ff)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYRES8=r1], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0)
ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, 0x0)
ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-get_robust_list$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-fcntl$auto-syz_genetlink_get_family_id$auto_ovs_flow-socket$nl_generic-sendmsg$auto_OVS_FLOW_CMD_GET-sendmmsg$auto-fcntl$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
fcntl$auto(0x8000000000000001, 0x5, 0x8)
r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
sendmmsg$auto(r5, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x3, 0xa505}, 0x7ff}, 0x7, 0x4008)
fcntl$auto(0x8000000000000001, 0x26, 0x8)

program crashed: WARNING: ODEBUG bug in hci_release_dev
single: successfully extracted reproducer
found reproducer with 25 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-get_robust_list$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-fcntl$auto-syz_genetlink_get_family_id$auto_ovs_flow-socket$nl_generic-sendmsg$auto_OVS_FLOW_CMD_GET-sendmmsg$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
fcntl$auto(0x8000000000000001, 0x5, 0x8)
r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
sendmmsg$auto(r5, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x3, 0xa505}, 0x7ff}, 0x7, 0x4008)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-get_robust_list$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-fcntl$auto-syz_genetlink_get_family_id$auto_ovs_flow-socket$nl_generic-sendmsg$auto_OVS_FLOW_CMD_GET
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
fcntl$auto(0x8000000000000001, 0x5, 0x8)
r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-get_robust_list$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-fcntl$auto-syz_genetlink_get_family_id$auto_ovs_flow-socket$nl_generic
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
fcntl$auto(0x8000000000000001, 0x5, 0x8)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-get_robust_list$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-fcntl$auto-syz_genetlink_get_family_id$auto_ovs_flow
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
fcntl$auto(0x8000000000000001, 0x5, 0x8)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-get_robust_list$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-fcntl$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
fcntl$auto(0x8000000000000001, 0x5, 0x8)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-get_robust_list$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-get_robust_list$auto-openat$auto_force_devcoredump_fops_hci_vhci
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-get_robust_list$auto-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, r0, 0xffffffff)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4040aea0, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-io_uring_setup$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-close_range$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x100000000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
reproducing took 2h26m47.273100835s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: vmalloc-out-of-bounds in skb_put_data include/linux/skbuff.h:2753 [inline]
BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
Read of size 140 at addr ffffc90000abe000 by task kworker/u9:1/5150

CPU: 1 UID: 0 PID: 5150 Comm: kworker/u9:1 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: hci0 hci_devcd_timeout
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xcd/0x680 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 check_region_inline mm/kasan/generic.c:183 [inline]
 kasan_check_range+0x100/0x1b0 mm/kasan/generic.c:189
 __asan_memcpy+0x23/0x60 mm/kasan/shadow.c:105
 skb_put_data include/linux/skbuff.h:2753 [inline]
 hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
 hci_devcd_timeout+0xb5/0x2e0 net/bluetooth/coredump.c:413
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402
 kthread+0x3c5/0x780 kernel/kthread.c:464
 ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

The buggy address ffffc90000abe000 belongs to a vmalloc virtual mapping
Memory state around the buggy address:
 ffffc90000abdf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000abdf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
>ffffc90000abe000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
                   ^
 ffffc90000abe080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000abe100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: vmalloc-out-of-bounds in skb_put_data include/linux/skbuff.h:2753 [inline]
BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
Read of size 140 at addr ffffc90000abe000 by task kworker/u9:1/5150

CPU: 1 UID: 0 PID: 5150 Comm: kworker/u9:1 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: hci0 hci_devcd_timeout
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xcd/0x680 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 check_region_inline mm/kasan/generic.c:183 [inline]
 kasan_check_range+0x100/0x1b0 mm/kasan/generic.c:189
 __asan_memcpy+0x23/0x60 mm/kasan/shadow.c:105
 skb_put_data include/linux/skbuff.h:2753 [inline]
 hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
 hci_devcd_timeout+0xb5/0x2e0 net/bluetooth/coredump.c:413
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402
 kthread+0x3c5/0x780 kernel/kthread.c:464
 ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

The buggy address ffffc90000abe000 belongs to a vmalloc virtual mapping
Memory state around the buggy address:
 ffffc90000abdf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000abdf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
>ffffc90000abe000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
                   ^
 ffffc90000abe080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000abe100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
==================================================================