Extracting prog: 1h4m22.416694941s
Minimizing prog: 1h57m43.103860098s
Simplifying prog options: 0s
Extracting C: 2m5.377426972s
Simplifying C: 56m33.154576143s


extracting reproducer from 45 programs
testing a last program of every proc
single: executing 10 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-unshare$auto-ioctl$NS_GET_PARENT-mmap$auto-openat$auto_proc_fail_nth_operations_base-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_snd_pcm_f_ops_pcm1-syz_clone-read$auto-read$auto-writev$auto-openat$auto_dvb_frontend_fops_dvb_frontend-openat$auto_rtc_dev_fops_dev-semget$auto-semtimedop$auto-semctl$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x2}, 0x3)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x80042, 0x0)
syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0xea)
read$auto(0xffffffffffffffff, 0x0, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0)
semctl$auto(0x0, 0x9, 0x0, 0x2)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_system_enable_fops_trace_events-mmap$auto-open-read$auto-writev$auto-openat$auto_tracing_buffers_fops_trace-io_uring_setup$auto-openat$auto_vhost_net_fops_net-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto-write$auto-select$auto-select$auto-pread64$auto-socket-ioctl$auto-close_range$auto
detailed listing:
executing program 0:
openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000054c0)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x20a01, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95)
read$auto(r0, 0x0, 0x1)
writev$auto(0x3, 0x0, 0x8)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
io_uring_setup$auto(0x2, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x7, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x1, 0x0, 0x7, 0x9, 0xfffffffffffffff4, 0x6, 0x100000000000000, 0xfff, 0xf]}, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100)
r2 = socket(0x2b, 0x1, 0x1)
ioctl$auto(r2, 0x89a0, 0x4)
close_range$auto(0x2, 0x8, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_evdev_fops_evdev-epoll_ctl$auto-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_GET_MSRS-prctl$auto-syz_genetlink_get_family_id$auto_smc_pnetid-ioctl$auto_XFS_IOC_FREESP-statmount$auto-prctl$auto-mprotect$auto-madvise$auto-write$auto_snd_pcm_f_ops_pcm
detailed listing:
executing program 0:
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
epoll_ctl$auto(r0, 0xce, r0, &(0x7f0000001080)={0x1, 0x4})
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4b564d04, 0x10, 0x1}]})
r3 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001000), r3)
ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, &(0x7f0000001040)={0x6, 0x8001, 0x8000000000000001, 0x800, 0x8, <r4=>0x0})
statmount$auto(&(0x7f00000010c0)={0x9, @inferred=r3, 0xfffffffffffffff7, 0x3, 0x200}, &(0x7f0000001100)={0x1ff, 0x101, 0x5, 0x100, 0x1, 0x3, 0x0, 0x3, 0x9, 0x7, 0x0, 0x8, 0x5, 0x1, 0x7, 0x7ff, 0x1, 0x80000000, 0x1, 0x22, 0x9, 0x100, 0x5e9, 0xffffff00, 0x1, 0x8, 0x7, 0x7ff, 0x189, 0xe09, 0x5, [0x6214, 0x86, 0xffff, 0xc72, 0xfffffffffffffffc, 0x3, 0x4, 0x8000, 0x0, 0x2, 0x401, 0xf, 0xfff, 0x8, 0x1, 0x5, 0x3, 0x400, 0x2, 0x400, 0x0, 0x8, 0x2, 0xfff, 0x8000, 0x800, 0xfffffffffffffff9, 0x0, 0xfffffffffffffffd, 0xf, 0x9, 0x7, 0x4, 0x0, 0x9, 0x6, 0x2, 0x1, 0x3d, 0xa7e9, 0x1, 0xffffffffffffcffd, 0xd005], "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"}, 0x4, 0x5)
r5 = prctl$auto(0x41, 0x40, r4, 0x0, 0x0)
mprotect$auto(0x110c238000, 0x1, 0x3)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
write$auto_snd_pcm_f_ops_pcm(r5, &(0x7f0000000000)="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", 0x1000)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-mmap$auto-syz_clone-move_pages$auto-ioperm$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend-ioctl$auto
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$auto(0x3, 0x4038ae7a, r0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-mmap$auto-preadv2$auto-ioctl$auto_BLKFLSBUF-close_range$auto-mmap$auto-openat$auto_def_blk_fops_fs-cachestat$auto
detailed listing:
executing program 0:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
cachestat$auto(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-mmap$auto-preadv2$auto-ioctl$auto_BLKFLSBUF-close_range$auto-mmap$auto-openat$auto_def_blk_fops_fs-cachestat$auto
detailed listing:
executing program 0:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
cachestat$auto(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_console_fops_tty_io-mmap$auto-write$auto-socketpair$auto-ioctl$auto
detailed listing:
executing program 0:
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x5603, r1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-io_uring_setup$auto-ioctl$auto_MON_IOCG_STATS-capset$auto-capget$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0)
capset$auto(0x0, 0x0)
capget$auto(0x0, &(0x7f0000000040)={0x0, 0x2000001, 0x3})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-io_uring_setup$auto-ioctl$auto_MON_IOCG_STATS-capset$auto-capget$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0)
capset$auto(0x0, 0x0)
capget$auto(0x0, &(0x7f0000000040)={0x0, 0x2000001, 0x3})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_console_fops_tty_io-mmap$auto-write$auto-socketpair$auto-ioctl$auto
detailed listing:
executing program 0:
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x5603, r1)

program did not crash
single: failed to extract reproducer
bisect: bisecting 45 programs with base timeout 30s
testing program (duration=41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 8, 8, 8, 8, 8, 8, 8, 16, 16, 16, 16, 17, 17, 17, 17, 17, 17, 17, 16, 16, 16, 17, 17, 17, 17, 16, 17, 17, 16, 17, 17]
detailed listing:
executing program 0:
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0)
r1 = dup$auto(r0)
r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
ioctl$auto(r2, 0x81004524, r1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x6)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x6, 0x5, 0x0, 0x8)
executing program 0:
mmap$auto(0x0, 0x5, 0x3, 0x14, 0xffffffffffffffff, 0x8000)
socket(0x29, 0x5, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x480, 0x0)
socket(0x29, 0x5, 0x0)
pread64$auto(r0, 0x0, 0xa87, 0x200009)
executing program 0:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x23, &(0x7f00000000c0), 0x0)
executing program 0:
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = memfd_create$auto(0x0, 0xe)
fcntl$auto(0xff80000000000000, 0x409, 0x13)
fallocate$auto(r0, 0x3, 0x2, 0x4)
executing program 0:
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x5603, r1)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000)
mknodat$auto(r0, 0x0, 0x5, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
executing program 1:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
write$auto(0x4, 0x0, 0x100082)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
close_range$auto(0x2, 0xa, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8)
chdir$auto(0x0)
pwritev2$auto(r0, 0x0, 0x8000000000000004, 0xffffffffffffffff, 0x9, 0xb)
executing program 1:
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
io_uring_setup$auto(0x100, 0x0)
move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'})
executing program 1:
io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8000000", @ANYRES16, @ANYBLOB="01"], 0xc8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x20058894)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 1:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0)
capset$auto(0x0, 0x0)
capget$auto(0x0, &(0x7f0000000040)={0x0, 0x2000001, 0x3})
executing program 32:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0)
capset$auto(0x0, 0x0)
capget$auto(0x0, &(0x7f0000000040)={0x0, 0x2000001, 0x3})
executing program 33:
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x5603, r1)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0)
read$auto(r0, 0x0, 0x4)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
unshare$auto(0x6c000000)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
eventfd$auto(0x4)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
ioctl$auto(r1, 0x4008af20, r0)
close_range$auto(0x0, 0x5, 0x0)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x14)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_size_kb\x00', 0x8082, 0x0)
r0 = socket(0x1d, 0x2, 0x7)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x20008041)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xd}, 0x2}, 0x3, 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
mkdir$auto(0x0, 0x353)
executing program 2:
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
memfd_create$auto(0x0, 0xd)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/mode\x00', 0x121102, 0x0)
read$auto(0x3, 0x0, 0x8080)
write$auto(0x3, 0x0, 0xffd8)
executing program 2:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
cachestat$auto(r1, 0x0, 0x0, 0x0)
executing program 34:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
cachestat$auto(r1, 0x0, 0x0, 0x0)
executing program 6:
r0 = socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8)
connect$auto(r0, 0x0, 0x50)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x6, 0x0, 0x18)
unshare$auto(0x40000080)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r2)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250a9e00ff15000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
socketpair$auto(0x800001, 0x8000, 0xc0d5, 0x0)
executing program 4:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080))
syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0xea)
read$auto(0xffffffffffffffff, 0x0, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x6, 0x0, 0x2, 0xb}, 0x800008}, 0x1ff, 0x1ffffff8)
semget$auto(0x0, 0x13c, 0x1ff)
semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0)
semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0)
semctl$auto(0x0, 0x9, 0x0, 0x2)
executing program 4:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r1 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r1, 0x114, 0x2719, 0xfffffffffffffffc, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/040/001\x00', 0x228000, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0)
shutdown$auto(0x200000003, 0x2)
executing program 6:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x2, 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
r1 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', <r3=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0xf)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000340)=""/6, 0x6)
close_range$auto(0x2, 0x8, 0x0)
executing program 6:
mmap$auto(0x7fff, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ustat$auto(0x801, 0x0)
r0 = prctl$auto(0x4b, 0x7ff, 0x0, 0x9, 0x41)
mmap$auto(0x1, 0x40000a, 0x80000001, 0x9b72, r0, 0x8000)
write$auto_proc_pid_set_comm_operations_base(r0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
readahead$auto(r1, 0x2, 0x10001)
timer_create$auto(0x3, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_register$auto(r0, 0x1b, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", <r2=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd=r0, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x7, 0x4}}, 0x92)
executing program 4:
unshare$auto(0xd)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2c, 0x1, 0x0)
poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400)
listen$auto(0x3, 0x81)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f0000000040)={0x3ff, 0x2d2a, 0x4, 0x2, 0x7})
mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/usbip-vudc.0/dev_desc\x00', 0x200, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7)
madvise$auto(0xfffffffffffffffa, 0x9, 0x19)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7ffffffc)
executing program 3:
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x2ca283, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x3)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x7c3142, 0x0)
socketpair$auto(0x1a, 0x1, 0x8000000000000000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto(r1, 0x5411, r0)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/031/001\x00', 0x208000, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/profile\x00', 0xc0802, 0x0)
read$auto(0x3, 0x0, 0x8080)
socket(0x10, 0x2, 0x0)
memfd_secret$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r0 = open(0x0, 0x261c2, 0x84)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
close_range$auto(0x2, 0x8000, 0x0)
r2 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r3, 0x4, 0x409, r2, @relative_id=0x14, 0xe600}, 0xd)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc)
executing program 5:
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socketcall$auto(0x9, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="5a18197afee4342371299bad58cb467de1d23d72499ef3a1eb3566c1e16f5569eaef4e1d76999a014e4b403e42005f0dc0a942894e88b4ce7926f2c0e766e2accb97bd77bb733cdfa9940aaca48358005565444ea9233938eeb581f432bef02eb861480f7d72bebed580dea350396ae4f546a18827fe87f3b11f567fc8c75d98bf"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000044)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd})
ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0)
executing program 3:
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
socket(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x28b40, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7)
executing program 5:
openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0)
memfd_secret$auto(0x0)
setsockopt$auto_SO_RCVBUFFORCE(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)='&+#\x00', 0x4)
mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nullb0/queue/write_cache\x00', 0x10b142, 0x0)
write$auto_dfs_sched_itmt_fops_itmt(r0, &(0x7f0000000000)="9c28ac6f0fd5", 0x6)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70)
mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d)
close_range$auto(0x2, 0x8, 0x0)
mkdir$auto(&(0x7f0000000000)='./file0/file1\x00', 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto_proc_uid_map_operations_base(0xffffffffffffffff, &(0x7f0000000080)="0ddcadb296709f760352414b2598b4ed161acd8e12657f02147952c253419f4377d4f186291e2659dc096d7193", 0x2d)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x6, 0x0, 0x0, 0x0, 0x1001, 0x8, 0x80000008000000a, 0x40000402, 0x9, 0x8, 0xffffffff80000000, 0x800000000000d, 0x6})
r0 = socket(0xa, 0x3, 0x3c)
connect$auto(0x3, 0x0, 0x55)
write$auto(r0, &(0x7f0000000080)='<&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000)
r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0)
ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0)
ioctl$auto_MON_IOCQ_RING_SIZE(r1, 0x9205, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/032/001\x00', 0x8202, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
executing program 6:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x5c})
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100)
mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x80000000008000)
socket(0x3, 0x2, 0x7e)
socket(0x10, 0x2, 0x0)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x6, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
pread64$auto(r0, 0x0, 0x84, 0xc)
r1 = socket(0x2, 0x2, 0x0)
setsockopt$auto_SO_WIFI_STATUS(r1, 0x0, 0x29, 0x0, 0xbff)
executing program 5:
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socket(0x2, 0x80802, 0x0)
r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0)
ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0)
socket(0x2b, 0x1, 0x1)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/bNumEndpoints\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
munmap$auto(0x1, 0x9)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2})
prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100)
executing program 4:
openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, 0x0, 0x422000, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0)
kexec_load$auto(0x8134a6c, 0x1, 0x0, 0xff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, 0x0, 0x80000000)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
sysfs$auto(0x2, 0xe, 0x0)
sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(0xffffffffffffffff, 0x0, 0x20000004)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(r0, 0x40f, 0x4)
r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x1040146f2c, 0x0)
executing program 5:
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x80002, 0x73)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/uprobe/perf_event_mux_interval_ms\x00', 0x121102, 0x0)
openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x300, 0x0)
read$auto(r1, 0x0, 0x1f3c)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(r0, 0x0, 0x800000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
executing program 6:
mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
fallocate$auto(0x8000000000000003, 0x40, 0x9, 0x4cbd5d)
socket(0x23, 0x80805, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0)
select$auto(0x8059, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x6, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x52]}, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5')
write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)="20ed20d1027e0dc0023af10e9bfa1babfa3a3753ca9a20370a", 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x9, 0x3)
executing program 3:
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
r0 = socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b71", 0x7)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72)
copy_file_range$auto(r1, 0x0, r1, &(0x7f0000000080)=0xeb2f, 0xfffffffffffffffe, 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80)
syz_genetlink_get_family_id$auto_tipcv2(0x0, r0)
executing program 5:
mmap$auto(0x0, 0x2020019, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
move_pages$auto(0x1, 0x20008, 0x0, 0x0, 0x0, 0x8000000000000000)
r0 = socket(0xa, 0x801, 0x84)
mincore$auto(0x1000, 0x8001, 0x0)
setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x10)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x41)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
write$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket(0x2a, 0x2, 0x0)
r1 = socket(0x2a, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55)
bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x80f0}, 0x6b)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x6, 0x4, 0x7, 0x1000)
socket$nl_generic(0x10, 0x3, 0x10)
rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2, "44f14018"}, 0x8000, 0x0, 0x1000)
mremap$auto(0x8, 0x2, 0x7fffffffffffffff, 0x3, 0x3c5f)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
pwrite64$auto(r0, &(0x7f0000000100)='nl80211\x00', 0x1, 0x7ff)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0xf03, 0x5, 0x6, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
socketpair$auto(0x5b, 0x2, 0x420000, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0)
executing program 5:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$auto(0x3, 0x4038ae7a, r0)
executing program 6:
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
epoll_ctl$auto(r0, 0xce, r0, &(0x7f0000001080)={0x1, 0x4})
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4b564d04, 0x10, 0x1}]})
r3 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001000), r3)
ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, &(0x7f0000001040)={0x6, 0x8001, 0x8000000000000001, 0x800, 0x8, <r4=>0x0})
statmount$auto(&(0x7f00000010c0)={0x9, @inferred=r3, 0xfffffffffffffff7, 0x3, 0x200}, &(0x7f0000001100)={0x1ff, 0x101, 0x5, 0x100, 0x1, 0x3, 0x0, 0x3, 0x9, 0x7, 0x0, 0x8, 0x5, 0x1, 0x7, 0x7ff, 0x1, 0x80000000, 0x1, 0x22, 0x9, 0x100, 0x5e9, 0xffffff00, 0x1, 0x8, 0x7, 0x7ff, 0x189, 0xe09, 0x5, [0x6214, 0x86, 0xffff, 0xc72, 0xfffffffffffffffc, 0x3, 0x4, 0x8000, 0x0, 0x2, 0x401, 0xf, 0xfff, 0x8, 0x1, 0x5, 0x3, 0x400, 0x2, 0x400, 0x0, 0x8, 0x2, 0xfff, 0x8000, 0x800, 0xfffffffffffffff9, 0x0, 0xfffffffffffffffd, 0xf, 0x9, 0x7, 0x4, 0x0, 0x9, 0x6, 0x2, 0x1, 0x3d, 0xa7e9, 0x1, 0xffffffffffffcffd, 0xd005], "aa491102dbe85f1c7020db2f41cf7b0198579493414a6df192f69c119c32631a30402e74dac81e4b95073dbe86e75d5dfdbdd6fcb3ee8573667e488b45cc89f25b9a760c238607e43a61f652a0a76c99c93fcee9b7ec50ec0fbb710821e535fc3e49cda58d4e93d90ce67b3c7309f8edcbc5df2488efbf5945211c953416ceea15caa00721055aafa6b8e1c1723cdc6b5fa9c8bb126305a6b1d42eb382dd38f8667f31973ed4f5f624df237b30919bb74132f13ebc9993458ad04435e97b35e0088d88562058b3cfec08bd1f6c73f96e31fbfc07085e5967c982b3f6483a4ac8b24ecc18e8d40204a4bdbcccac18e7b6b2b621ab7add06f6046c9c47ed682e"}, 0x4, 0x5)
r5 = prctl$auto(0x41, 0x40, r4, 0x0, 0x0)
mprotect$auto(0x110c238000, 0x1, 0x3)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
write$auto_snd_pcm_f_ops_pcm(r5, &(0x7f0000000000)="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", 0x1000)
executing program 3:
openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000054c0)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x20a01, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95)
read$auto(r0, 0x0, 0x1)
writev$auto(0x3, 0x0, 0x8)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
io_uring_setup$auto(0x2, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x7, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x1, 0x0, 0x7, 0x9, 0xfffffffffffffff4, 0x6, 0x100000000000000, 0xfff, 0xf]}, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100)
r2 = socket(0x2b, 0x1, 0x1)
ioctl$auto(r2, 0x89a0, 0x4)
close_range$auto(0x2, 0x8, 0x0)
executing program 4:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x2}, 0x3)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x80042, 0x0)
syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0xea)
read$auto(0xffffffffffffffff, 0x0, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0)
semctl$auto(0x0, 0x9, 0x0, 0x2)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 10 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-unshare$auto-ioctl$NS_GET_PARENT-mmap$auto-openat$auto_proc_fail_nth_operations_base-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_snd_pcm_f_ops_pcm1-syz_clone-read$auto-read$auto-writev$auto-openat$auto_dvb_frontend_fops_dvb_frontend-openat$auto_rtc_dev_fops_dev-semget$auto-semtimedop$auto-semctl$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x2}, 0x3)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x80042, 0x0)
syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0xea)
read$auto(0xffffffffffffffff, 0x0, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0)
semctl$auto(0x0, 0x9, 0x0, 0x2)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_system_enable_fops_trace_events-mmap$auto-open-read$auto-writev$auto-openat$auto_tracing_buffers_fops_trace-io_uring_setup$auto-openat$auto_vhost_net_fops_net-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto-write$auto-select$auto-select$auto-pread64$auto-socket-ioctl$auto-close_range$auto
detailed listing:
executing program 0:
openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000054c0)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x20a01, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95)
read$auto(r0, 0x0, 0x1)
writev$auto(0x3, 0x0, 0x8)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
io_uring_setup$auto(0x2, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x7, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x1, 0x0, 0x7, 0x9, 0xfffffffffffffff4, 0x6, 0x100000000000000, 0xfff, 0xf]}, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100)
r2 = socket(0x2b, 0x1, 0x1)
ioctl$auto(r2, 0x89a0, 0x4)
close_range$auto(0x2, 0x8, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_evdev_fops_evdev-epoll_ctl$auto-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_GET_MSRS-prctl$auto-syz_genetlink_get_family_id$auto_smc_pnetid-ioctl$auto_XFS_IOC_FREESP-statmount$auto-prctl$auto-mprotect$auto-madvise$auto-write$auto_snd_pcm_f_ops_pcm
detailed listing:
executing program 0:
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
epoll_ctl$auto(r0, 0xce, r0, &(0x7f0000001080)={0x1, 0x4})
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4b564d04, 0x10, 0x1}]})
r3 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001000), r3)
ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, &(0x7f0000001040)={0x6, 0x8001, 0x8000000000000001, 0x800, 0x8, <r4=>0x0})
statmount$auto(&(0x7f00000010c0)={0x9, @inferred=r3, 0xfffffffffffffff7, 0x3, 0x200}, &(0x7f0000001100)={0x1ff, 0x101, 0x5, 0x100, 0x1, 0x3, 0x0, 0x3, 0x9, 0x7, 0x0, 0x8, 0x5, 0x1, 0x7, 0x7ff, 0x1, 0x80000000, 0x1, 0x22, 0x9, 0x100, 0x5e9, 0xffffff00, 0x1, 0x8, 0x7, 0x7ff, 0x189, 0xe09, 0x5, [0x6214, 0x86, 0xffff, 0xc72, 0xfffffffffffffffc, 0x3, 0x4, 0x8000, 0x0, 0x2, 0x401, 0xf, 0xfff, 0x8, 0x1, 0x5, 0x3, 0x400, 0x2, 0x400, 0x0, 0x8, 0x2, 0xfff, 0x8000, 0x800, 0xfffffffffffffff9, 0x0, 0xfffffffffffffffd, 0xf, 0x9, 0x7, 0x4, 0x0, 0x9, 0x6, 0x2, 0x1, 0x3d, 0xa7e9, 0x1, 0xffffffffffffcffd, 0xd005], "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"}, 0x4, 0x5)
r5 = prctl$auto(0x41, 0x40, r4, 0x0, 0x0)
mprotect$auto(0x110c238000, 0x1, 0x3)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
write$auto_snd_pcm_f_ops_pcm(r5, &(0x7f0000000000)="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", 0x1000)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-mmap$auto-syz_clone-move_pages$auto-ioperm$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend-ioctl$auto
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$auto(0x3, 0x4038ae7a, r0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-mmap$auto-preadv2$auto-ioctl$auto_BLKFLSBUF-close_range$auto-mmap$auto-openat$auto_def_blk_fops_fs-cachestat$auto
detailed listing:
executing program 0:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
cachestat$auto(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-mmap$auto-preadv2$auto-ioctl$auto_BLKFLSBUF-close_range$auto-mmap$auto-openat$auto_def_blk_fops_fs-cachestat$auto
detailed listing:
executing program 0:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
cachestat$auto(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_console_fops_tty_io-mmap$auto-write$auto-socketpair$auto-ioctl$auto
detailed listing:
executing program 0:
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x5603, r1)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-io_uring_setup$auto-ioctl$auto_MON_IOCG_STATS-capset$auto-capget$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0)
capset$auto(0x0, 0x0)
capget$auto(0x0, &(0x7f0000000040)={0x0, 0x2000001, 0x3})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-io_uring_setup$auto-ioctl$auto_MON_IOCG_STATS-capset$auto-capget$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0)
capset$auto(0x0, 0x0)
capget$auto(0x0, &(0x7f0000000040)={0x0, 0x2000001, 0x3})

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_console_fops_tty_io-mmap$auto-write$auto-socketpair$auto-ioctl$auto
detailed listing:
executing program 0:
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x5603, r1)

program did not crash
single: failed to extract reproducer
bisect: bisecting 45 programs with base timeout 1m40s
testing program (duration=1m51s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 8, 8, 8, 8, 8, 8, 8, 16, 16, 16, 16, 17, 17, 17, 17, 17, 17, 17, 16, 16, 16, 17, 17, 17, 17, 16, 17, 17, 16, 17, 17]
detailed listing:
executing program 0:
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0)
r1 = dup$auto(r0)
r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
ioctl$auto(r2, 0x81004524, r1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x6)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x6, 0x5, 0x0, 0x8)
executing program 0:
mmap$auto(0x0, 0x5, 0x3, 0x14, 0xffffffffffffffff, 0x8000)
socket(0x29, 0x5, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x480, 0x0)
socket(0x29, 0x5, 0x0)
pread64$auto(r0, 0x0, 0xa87, 0x200009)
executing program 0:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x23, &(0x7f00000000c0), 0x0)
executing program 0:
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = memfd_create$auto(0x0, 0xe)
fcntl$auto(0xff80000000000000, 0x409, 0x13)
fallocate$auto(r0, 0x3, 0x2, 0x4)
executing program 0:
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x5603, r1)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000)
mknodat$auto(r0, 0x0, 0x5, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
executing program 1:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
write$auto(0x4, 0x0, 0x100082)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
close_range$auto(0x2, 0xa, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8)
chdir$auto(0x0)
pwritev2$auto(r0, 0x0, 0x8000000000000004, 0xffffffffffffffff, 0x9, 0xb)
executing program 1:
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
io_uring_setup$auto(0x100, 0x0)
move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'})
executing program 1:
io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8000000", @ANYRES16, @ANYBLOB="01"], 0xc8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x20058894)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 1:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0)
capset$auto(0x0, 0x0)
capget$auto(0x0, &(0x7f0000000040)={0x0, 0x2000001, 0x3})
executing program 32:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0)
capset$auto(0x0, 0x0)
capget$auto(0x0, &(0x7f0000000040)={0x0, 0x2000001, 0x3})
executing program 33:
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x5603, r1)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0)
read$auto(r0, 0x0, 0x4)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
unshare$auto(0x6c000000)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
eventfd$auto(0x4)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
ioctl$auto(r1, 0x4008af20, r0)
close_range$auto(0x0, 0x5, 0x0)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x14)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_size_kb\x00', 0x8082, 0x0)
r0 = socket(0x1d, 0x2, 0x7)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x20008041)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xd}, 0x2}, 0x3, 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
mkdir$auto(0x0, 0x353)
executing program 2:
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
memfd_create$auto(0x0, 0xd)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/mode\x00', 0x121102, 0x0)
read$auto(0x3, 0x0, 0x8080)
write$auto(0x3, 0x0, 0xffd8)
executing program 2:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
cachestat$auto(r1, 0x0, 0x0, 0x0)
executing program 34:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
cachestat$auto(r1, 0x0, 0x0, 0x0)
executing program 6:
r0 = socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8)
connect$auto(r0, 0x0, 0x50)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x6, 0x0, 0x18)
unshare$auto(0x40000080)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r2)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250a9e00ff15000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
socketpair$auto(0x800001, 0x8000, 0xc0d5, 0x0)
executing program 4:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080))
syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0xea)
read$auto(0xffffffffffffffff, 0x0, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x6, 0x0, 0x2, 0xb}, 0x800008}, 0x1ff, 0x1ffffff8)
semget$auto(0x0, 0x13c, 0x1ff)
semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0)
semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0)
semctl$auto(0x0, 0x9, 0x0, 0x2)
executing program 4:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r1 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r1, 0x114, 0x2719, 0xfffffffffffffffc, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/040/001\x00', 0x228000, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0)
shutdown$auto(0x200000003, 0x2)
executing program 6:
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x2, 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
r1 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', <r3=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0xf)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000340)=""/6, 0x6)
close_range$auto(0x2, 0x8, 0x0)
executing program 6:
mmap$auto(0x7fff, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ustat$auto(0x801, 0x0)
r0 = prctl$auto(0x4b, 0x7ff, 0x0, 0x9, 0x41)
mmap$auto(0x1, 0x40000a, 0x80000001, 0x9b72, r0, 0x8000)
write$auto_proc_pid_set_comm_operations_base(r0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
readahead$auto(r1, 0x2, 0x10001)
timer_create$auto(0x3, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_register$auto(r0, 0x1b, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", <r2=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd=r0, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x7, 0x4}}, 0x92)
executing program 4:
unshare$auto(0xd)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2c, 0x1, 0x0)
poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400)
listen$auto(0x3, 0x81)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f0000000040)={0x3ff, 0x2d2a, 0x4, 0x2, 0x7})
mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/usbip-vudc.0/dev_desc\x00', 0x200, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7)
madvise$auto(0xfffffffffffffffa, 0x9, 0x19)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7ffffffc)
executing program 3:
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x2ca283, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x3)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x7c3142, 0x0)
socketpair$auto(0x1a, 0x1, 0x8000000000000000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto(r1, 0x5411, r0)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/031/001\x00', 0x208000, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/profile\x00', 0xc0802, 0x0)
read$auto(0x3, 0x0, 0x8080)
socket(0x10, 0x2, 0x0)
memfd_secret$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r0 = open(0x0, 0x261c2, 0x84)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
close_range$auto(0x2, 0x8000, 0x0)
r2 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r3, 0x4, 0x409, r2, @relative_id=0x14, 0xe600}, 0xd)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc)
executing program 5:
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socketcall$auto(0x9, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="5a18197afee4342371299bad58cb467de1d23d72499ef3a1eb3566c1e16f5569eaef4e1d76999a014e4b403e42005f0dc0a942894e88b4ce7926f2c0e766e2accb97bd77bb733cdfa9940aaca48358005565444ea9233938eeb581f432bef02eb861480f7d72bebed580dea350396ae4f546a18827fe87f3b11f567fc8c75d98bf"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000044)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd})
ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0)
executing program 3:
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
socket(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x28b40, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7)
executing program 5:
openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0)
memfd_secret$auto(0x0)
setsockopt$auto_SO_RCVBUFFORCE(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)='&+#\x00', 0x4)
mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nullb0/queue/write_cache\x00', 0x10b142, 0x0)
write$auto_dfs_sched_itmt_fops_itmt(r0, &(0x7f0000000000)="9c28ac6f0fd5", 0x6)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70)
mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d)
close_range$auto(0x2, 0x8, 0x0)
mkdir$auto(&(0x7f0000000000)='./file0/file1\x00', 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto_proc_uid_map_operations_base(0xffffffffffffffff, &(0x7f0000000080)="0ddcadb296709f760352414b2598b4ed161acd8e12657f02147952c253419f4377d4f186291e2659dc096d7193", 0x2d)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x6, 0x0, 0x0, 0x0, 0x1001, 0x8, 0x80000008000000a, 0x40000402, 0x9, 0x8, 0xffffffff80000000, 0x800000000000d, 0x6})
r0 = socket(0xa, 0x3, 0x3c)
connect$auto(0x3, 0x0, 0x55)
write$auto(r0, &(0x7f0000000080)='<&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000)
r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0)
ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0)
ioctl$auto_MON_IOCQ_RING_SIZE(r1, 0x9205, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/032/001\x00', 0x8202, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
executing program 6:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x5c})
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100)
mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x80000000008000)
socket(0x3, 0x2, 0x7e)
socket(0x10, 0x2, 0x0)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x6, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
pread64$auto(r0, 0x0, 0x84, 0xc)
r1 = socket(0x2, 0x2, 0x0)
setsockopt$auto_SO_WIFI_STATUS(r1, 0x0, 0x29, 0x0, 0xbff)
executing program 5:
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socket(0x2, 0x80802, 0x0)
r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0)
ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0)
socket(0x2b, 0x1, 0x1)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/bNumEndpoints\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
munmap$auto(0x1, 0x9)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2})
prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100)
executing program 4:
openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, 0x0, 0x422000, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0)
kexec_load$auto(0x8134a6c, 0x1, 0x0, 0xff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, 0x0, 0x80000000)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
sysfs$auto(0x2, 0xe, 0x0)
sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(0xffffffffffffffff, 0x0, 0x20000004)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(r0, 0x40f, 0x4)
r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x1040146f2c, 0x0)
executing program 5:
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x80002, 0x73)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/uprobe/perf_event_mux_interval_ms\x00', 0x121102, 0x0)
openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x300, 0x0)
read$auto(r1, 0x0, 0x1f3c)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(r0, 0x0, 0x800000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
executing program 6:
mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
fallocate$auto(0x8000000000000003, 0x40, 0x9, 0x4cbd5d)
socket(0x23, 0x80805, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0)
select$auto(0x8059, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x6, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x52]}, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5')
write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)="20ed20d1027e0dc0023af10e9bfa1babfa3a3753ca9a20370a", 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x9, 0x3)
executing program 3:
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
r0 = socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b71", 0x7)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72)
copy_file_range$auto(r1, 0x0, r1, &(0x7f0000000080)=0xeb2f, 0xfffffffffffffffe, 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80)
syz_genetlink_get_family_id$auto_tipcv2(0x0, r0)
executing program 5:
mmap$auto(0x0, 0x2020019, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
move_pages$auto(0x1, 0x20008, 0x0, 0x0, 0x0, 0x8000000000000000)
r0 = socket(0xa, 0x801, 0x84)
mincore$auto(0x1000, 0x8001, 0x0)
setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x10)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x41)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
write$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket(0x2a, 0x2, 0x0)
r1 = socket(0x2a, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55)
bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x80f0}, 0x6b)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x6, 0x4, 0x7, 0x1000)
socket$nl_generic(0x10, 0x3, 0x10)
rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2, "44f14018"}, 0x8000, 0x0, 0x1000)
mremap$auto(0x8, 0x2, 0x7fffffffffffffff, 0x3, 0x3c5f)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
pwrite64$auto(r0, &(0x7f0000000100)='nl80211\x00', 0x1, 0x7ff)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0xf03, 0x5, 0x6, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
socketpair$auto(0x5b, 0x2, 0x420000, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0)
executing program 5:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$auto(0x3, 0x4038ae7a, r0)
executing program 6:
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
epoll_ctl$auto(r0, 0xce, r0, &(0x7f0000001080)={0x1, 0x4})
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4b564d04, 0x10, 0x1}]})
r3 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001000), r3)
ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, &(0x7f0000001040)={0x6, 0x8001, 0x8000000000000001, 0x800, 0x8, <r4=>0x0})
statmount$auto(&(0x7f00000010c0)={0x9, @inferred=r3, 0xfffffffffffffff7, 0x3, 0x200}, &(0x7f0000001100)={0x1ff, 0x101, 0x5, 0x100, 0x1, 0x3, 0x0, 0x3, 0x9, 0x7, 0x0, 0x8, 0x5, 0x1, 0x7, 0x7ff, 0x1, 0x80000000, 0x1, 0x22, 0x9, 0x100, 0x5e9, 0xffffff00, 0x1, 0x8, 0x7, 0x7ff, 0x189, 0xe09, 0x5, [0x6214, 0x86, 0xffff, 0xc72, 0xfffffffffffffffc, 0x3, 0x4, 0x8000, 0x0, 0x2, 0x401, 0xf, 0xfff, 0x8, 0x1, 0x5, 0x3, 0x400, 0x2, 0x400, 0x0, 0x8, 0x2, 0xfff, 0x8000, 0x800, 0xfffffffffffffff9, 0x0, 0xfffffffffffffffd, 0xf, 0x9, 0x7, 0x4, 0x0, 0x9, 0x6, 0x2, 0x1, 0x3d, 0xa7e9, 0x1, 0xffffffffffffcffd, 0xd005], "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"}, 0x4, 0x5)
r5 = prctl$auto(0x41, 0x40, r4, 0x0, 0x0)
mprotect$auto(0x110c238000, 0x1, 0x3)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
write$auto_snd_pcm_f_ops_pcm(r5, &(0x7f0000000000)="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", 0x1000)
executing program 3:
openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000054c0)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x20a01, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95)
read$auto(r0, 0x0, 0x1)
writev$auto(0x3, 0x0, 0x8)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
io_uring_setup$auto(0x2, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x7, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x1, 0x0, 0x7, 0x9, 0xfffffffffffffff4, 0x6, 0x100000000000000, 0xfff, 0xf]}, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100)
r2 = socket(0x2b, 0x1, 0x1)
ioctl$auto(r2, 0x89a0, 0x4)
close_range$auto(0x2, 0x8, 0x0)
executing program 4:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x2}, 0x3)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x80042, 0x0)
syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0xea)
read$auto(0xffffffffffffffff, 0x0, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0)
semctl$auto(0x0, 0x9, 0x0, 0x2)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 10 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-unshare$auto-ioctl$NS_GET_PARENT-mmap$auto-openat$auto_proc_fail_nth_operations_base-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_snd_pcm_f_ops_pcm1-syz_clone-read$auto-read$auto-writev$auto-openat$auto_dvb_frontend_fops_dvb_frontend-openat$auto_rtc_dev_fops_dev-semget$auto-semtimedop$auto-semctl$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x2}, 0x3)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x80042, 0x0)
syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0xea)
read$auto(0xffffffffffffffff, 0x0, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0)
semctl$auto(0x0, 0x9, 0x0, 0x2)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_ftrace_system_enable_fops_trace_events-mmap$auto-open-read$auto-writev$auto-openat$auto_tracing_buffers_fops_trace-io_uring_setup$auto-openat$auto_vhost_net_fops_net-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto-write$auto-select$auto-select$auto-pread64$auto-socket-ioctl$auto-close_range$auto
detailed listing:
executing program 0:
openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000054c0)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x20a01, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95)
read$auto(r0, 0x0, 0x1)
writev$auto(0x3, 0x0, 0x8)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
io_uring_setup$auto(0x2, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x7, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x1, 0x0, 0x7, 0x9, 0xfffffffffffffff4, 0x6, 0x100000000000000, 0xfff, 0xf]}, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100)
r2 = socket(0x2b, 0x1, 0x1)
ioctl$auto(r2, 0x89a0, 0x4)
close_range$auto(0x2, 0x8, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_evdev_fops_evdev-epoll_ctl$auto-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_GET_MSRS-prctl$auto-syz_genetlink_get_family_id$auto_smc_pnetid-ioctl$auto_XFS_IOC_FREESP-statmount$auto-prctl$auto-mprotect$auto-madvise$auto-write$auto_snd_pcm_f_ops_pcm
detailed listing:
executing program 0:
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
epoll_ctl$auto(r0, 0xce, r0, &(0x7f0000001080)={0x1, 0x4})
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4b564d04, 0x10, 0x1}]})
r3 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001000), r3)
ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, &(0x7f0000001040)={0x6, 0x8001, 0x8000000000000001, 0x800, 0x8, <r4=>0x0})
statmount$auto(&(0x7f00000010c0)={0x9, @inferred=r3, 0xfffffffffffffff7, 0x3, 0x200}, &(0x7f0000001100)={0x1ff, 0x101, 0x5, 0x100, 0x1, 0x3, 0x0, 0x3, 0x9, 0x7, 0x0, 0x8, 0x5, 0x1, 0x7, 0x7ff, 0x1, 0x80000000, 0x1, 0x22, 0x9, 0x100, 0x5e9, 0xffffff00, 0x1, 0x8, 0x7, 0x7ff, 0x189, 0xe09, 0x5, [0x6214, 0x86, 0xffff, 0xc72, 0xfffffffffffffffc, 0x3, 0x4, 0x8000, 0x0, 0x2, 0x401, 0xf, 0xfff, 0x8, 0x1, 0x5, 0x3, 0x400, 0x2, 0x400, 0x0, 0x8, 0x2, 0xfff, 0x8000, 0x800, 0xfffffffffffffff9, 0x0, 0xfffffffffffffffd, 0xf, 0x9, 0x7, 0x4, 0x0, 0x9, 0x6, 0x2, 0x1, 0x3d, 0xa7e9, 0x1, 0xffffffffffffcffd, 0xd005], "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"}, 0x4, 0x5)
r5 = prctl$auto(0x41, 0x40, r4, 0x0, 0x0)
mprotect$auto(0x110c238000, 0x1, 0x3)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
write$auto_snd_pcm_f_ops_pcm(r5, &(0x7f0000000000)="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", 0x1000)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-mmap$auto-syz_clone-move_pages$auto-ioperm$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend-ioctl$auto
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$auto(0x3, 0x4038ae7a, r0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
single: successfully extracted reproducer
found reproducer with 17 syscalls
minimizing guilty program
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-mmap$auto-syz_clone-move_pages$auto-ioperm$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-mmap$auto-syz_clone-move_pages$auto-ioperm$auto-io_uring_setup$auto-close_range$auto-open
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)

program did not crash
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-mmap$auto-syz_clone-move_pages$auto-ioperm$auto-io_uring_setup$auto-close_range$auto-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-mmap$auto-syz_clone-move_pages$auto-ioperm$auto-io_uring_setup$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program did not crash
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-mmap$auto-syz_clone-move_pages$auto-ioperm$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program did not crash
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-mmap$auto-syz_clone-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KFENCE: use-after-free read in dvb_device_open
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-mmap$auto-syz_clone-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program did not crash
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_ethtool-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-socket$nl_generic-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-socket$nl_generic-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-openat$auto_kernfs_file_fops_kernfs_internal-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-timer_settime$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program did not crash
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=8m55.331534248s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
simplifying C reproducer
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KFENCE: use-after-free read in dvb_device_open
validation run: crashed=true
testing program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
validation run: crashed=true
testing program (duration=8m55.331534248s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-move_pages$auto-io_uring_setup$auto-close_range$auto-open-openat$auto_dvb_frontend_fops_dvb_frontend
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
validation run: crashed=true
reproducing took 4h12m5.22837682s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 drivers/media/dvb-core/dvbdev.c:99
Read of size 8 at addr ffff88802b601018 by task syz.2.2463/11180

CPU: 0 UID: 0 PID: 11180 Comm: syz.2.2463 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x156/0x4c9 mm/kasan/report.c:482
 kasan_report+0xdf/0x1e0 mm/kasan/report.c:595
 dvb_device_open+0x33f/0x3b0 drivers/media/dvb-core/dvbdev.c:99
 chrdev_open+0x234/0x6a0 fs/char_dev.c:411
 do_dentry_open+0x6d8/0x1660 fs/open.c:949
 vfs_open+0x82/0x3f0 fs/open.c:1081
 do_open fs/namei.c:4671 [inline]
 path_openat+0x208c/0x31a0 fs/namei.c:4830
 do_file_open+0x20e/0x430 fs/namei.c:4859
 do_sys_openat2+0x10d/0x1e0 fs/open.c:1366
 do_sys_open fs/open.c:1372 [inline]
 __do_sys_openat fs/open.c:1388 [inline]
 __se_sys_openat fs/open.c:1383 [inline]
 __x64_sys_openat+0x12d/0x210 fs/open.c:1383
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fec9f39c799
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe2a931838 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fec9f615fa0 RCX: 00007fec9f39c799
RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007fec9f432c99 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fec9f615fac R14: 00007fec9f615fa0 R15: 00007fec9f615fa0
 </TASK>

Allocated by task 1:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415
 kmalloc_noprof include/linux/slab.h:950 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 dvb_register_device+0x1d6/0x1e20 drivers/media/dvb-core/dvbdev.c:472
 dvb_register_frontend+0x5a8/0x8a0 drivers/media/dvb-core/dvb_frontend.c:3051
 vidtv_bridge_dvb_init drivers/media/test-drivers/vidtv/vidtv_bridge.c:436 [inline]
 vidtv_bridge_probe+0x44b/0xa30 drivers/media/test-drivers/vidtv/vidtv_bridge.c:508
 platform_probe+0x106/0x1d0 drivers/base/platform.c:1446
 call_driver_probe drivers/base/dd.c:583 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:661
 __driver_probe_device+0x1de/0x400 drivers/base/dd.c:803
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:833
 __driver_attach+0x217/0x5c0 drivers/base/dd.c:1227
 bus_for_each_dev+0x13e/0x1d0 drivers/base/bus.c:383
 bus_add_driver+0x305/0x5b0 drivers/base/bus.c:715
 driver_register+0x1e2/0x360 drivers/base/driver.c:249
 vidtv_bridge_init+0x38/0x70 drivers/media/test-drivers/vidtv/vidtv_bridge.c:598
 do_one_initcall+0x11d/0x760 init/main.c:1382
 do_initcall_level init/main.c:1444 [inline]
 do_initcalls init/main.c:1460 [inline]
 do_basic_setup init/main.c:1479 [inline]
 kernel_init_freeable+0x6e5/0x7a0 init/main.c:1692
 kernel_init+0x1f/0x1e0 init/main.c:1582
 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 11178:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2692 [inline]
 slab_free mm/slub.c:6168 [inline]
 kfree+0x1f6/0x6b0 mm/slub.c:6486
 dvb_free_device drivers/media/dvb-core/dvbdev.c:616 [inline]
 kref_put include/linux/kref.h:65 [inline]
 dvb_device_put.part.0+0x57/0x90 drivers/media/dvb-core/dvbdev.c:629
 dvb_device_put drivers/media/dvb-core/dvbdev.c:628 [inline]
 dvb_device_open+0x2ba/0x3b0 drivers/media/dvb-core/dvbdev.c:113
 chrdev_open+0x234/0x6a0 fs/char_dev.c:411
 do_dentry_open+0x6d8/0x1660 fs/open.c:949
 vfs_open+0x82/0x3f0 fs/open.c:1081
 do_open fs/namei.c:4671 [inline]
 path_openat+0x208c/0x31a0 fs/namei.c:4830
 do_file_open+0x20e/0x430 fs/namei.c:4859
 do_sys_openat2+0x10d/0x1e0 fs/open.c:1366
 do_sys_open fs/open.c:1372 [inline]
 __do_sys_openat fs/open.c:1388 [inline]
 __se_sys_openat fs/open.c:1383 [inline]
 __x64_sys_openat+0x12d/0x210 fs/open.c:1383
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88802b601000
 which belongs to the cache kmalloc-256 of size 256
The buggy address is located 24 bytes inside of
 freed 256-byte region [ffff88802b601000, ffff88802b601100)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b600
head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88813fe3cb40 dead000000000100 dead000000000122
raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88813fe3cb40 dead000000000100 dead000000000122
head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 00fff00000000001 ffffea0000ad8001 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14156298730, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x153/0x170 mm/page_alloc.c:1889
 prep_new_page mm/page_alloc.c:1897 [inline]
 get_page_from_freelist+0x111d/0x3140 mm/page_alloc.c:3962
 __alloc_frozen_pages_noprof+0x27c/0x2ba0 mm/page_alloc.c:5250
 alloc_slab_page mm/slub.c:3296 [inline]
 allocate_slab mm/slub.c:3485 [inline]
 new_slab+0xa6/0x6c0 mm/slub.c:3543
 refill_objects+0x26b/0x400 mm/slub.c:7178
 refill_sheaf mm/slub.c:2818 [inline]
 alloc_full_sheaf mm/slub.c:2839 [inline]
 __pcs_replace_empty_main+0x1ab/0x600 mm/slub.c:4629
 alloc_from_pcs mm/slub.c:4720 [inline]
 slab_alloc_node mm/slub.c:4854 [inline]
 __kmalloc_cache_noprof+0x493/0x6f0 mm/slub.c:5378
 kmalloc_noprof include/linux/slab.h:950 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 bus_add_driver+0x92/0x5b0 drivers/base/bus.c:699
 driver_register+0x1e2/0x360 drivers/base/driver.c:249
 i2c_i801_init drivers/i2c/busses/i2c-i801.c:1761 [inline]
 i801_driver_init+0x13f/0x180 drivers/i2c/busses/i2c-i801.c:1769
 do_one_initcall+0x11d/0x760 init/main.c:1382
 do_initcall_level init/main.c:1444 [inline]
 do_initcalls init/main.c:1460 [inline]
 do_basic_setup init/main.c:1479 [inline]
 kernel_init_freeable+0x6e5/0x7a0 init/main.c:1692
 kernel_init+0x1f/0x1e0 init/main.c:1582
 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88802b600f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88802b600f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88802b601000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                            ^
 ffff88802b601080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88802b601100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 drivers/media/dvb-core/dvbdev.c:99
Read of size 8 at addr ffff88802b601018 by task syz.2.2463/11180

CPU: 0 UID: 0 PID: 11180 Comm: syz.2.2463 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x156/0x4c9 mm/kasan/report.c:482
 kasan_report+0xdf/0x1e0 mm/kasan/report.c:595
 dvb_device_open+0x33f/0x3b0 drivers/media/dvb-core/dvbdev.c:99
 chrdev_open+0x234/0x6a0 fs/char_dev.c:411
 do_dentry_open+0x6d8/0x1660 fs/open.c:949
 vfs_open+0x82/0x3f0 fs/open.c:1081
 do_open fs/namei.c:4671 [inline]
 path_openat+0x208c/0x31a0 fs/namei.c:4830
 do_file_open+0x20e/0x430 fs/namei.c:4859
 do_sys_openat2+0x10d/0x1e0 fs/open.c:1366
 do_sys_open fs/open.c:1372 [inline]
 __do_sys_openat fs/open.c:1388 [inline]
 __se_sys_openat fs/open.c:1383 [inline]
 __x64_sys_openat+0x12d/0x210 fs/open.c:1383
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fec9f39c799
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe2a931838 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fec9f615fa0 RCX: 00007fec9f39c799
RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007fec9f432c99 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fec9f615fac R14: 00007fec9f615fa0 R15: 00007fec9f615fa0
 </TASK>

Allocated by task 1:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415
 kmalloc_noprof include/linux/slab.h:950 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 dvb_register_device+0x1d6/0x1e20 drivers/media/dvb-core/dvbdev.c:472
 dvb_register_frontend+0x5a8/0x8a0 drivers/media/dvb-core/dvb_frontend.c:3051
 vidtv_bridge_dvb_init drivers/media/test-drivers/vidtv/vidtv_bridge.c:436 [inline]
 vidtv_bridge_probe+0x44b/0xa30 drivers/media/test-drivers/vidtv/vidtv_bridge.c:508
 platform_probe+0x106/0x1d0 drivers/base/platform.c:1446
 call_driver_probe drivers/base/dd.c:583 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:661
 __driver_probe_device+0x1de/0x400 drivers/base/dd.c:803
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:833
 __driver_attach+0x217/0x5c0 drivers/base/dd.c:1227
 bus_for_each_dev+0x13e/0x1d0 drivers/base/bus.c:383
 bus_add_driver+0x305/0x5b0 drivers/base/bus.c:715
 driver_register+0x1e2/0x360 drivers/base/driver.c:249
 vidtv_bridge_init+0x38/0x70 drivers/media/test-drivers/vidtv/vidtv_bridge.c:598
 do_one_initcall+0x11d/0x760 init/main.c:1382
 do_initcall_level init/main.c:1444 [inline]
 do_initcalls init/main.c:1460 [inline]
 do_basic_setup init/main.c:1479 [inline]
 kernel_init_freeable+0x6e5/0x7a0 init/main.c:1692
 kernel_init+0x1f/0x1e0 init/main.c:1582
 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 11178:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2692 [inline]
 slab_free mm/slub.c:6168 [inline]
 kfree+0x1f6/0x6b0 mm/slub.c:6486
 dvb_free_device drivers/media/dvb-core/dvbdev.c:616 [inline]
 kref_put include/linux/kref.h:65 [inline]
 dvb_device_put.part.0+0x57/0x90 drivers/media/dvb-core/dvbdev.c:629
 dvb_device_put drivers/media/dvb-core/dvbdev.c:628 [inline]
 dvb_device_open+0x2ba/0x3b0 drivers/media/dvb-core/dvbdev.c:113
 chrdev_open+0x234/0x6a0 fs/char_dev.c:411
 do_dentry_open+0x6d8/0x1660 fs/open.c:949
 vfs_open+0x82/0x3f0 fs/open.c:1081
 do_open fs/namei.c:4671 [inline]
 path_openat+0x208c/0x31a0 fs/namei.c:4830
 do_file_open+0x20e/0x430 fs/namei.c:4859
 do_sys_openat2+0x10d/0x1e0 fs/open.c:1366
 do_sys_open fs/open.c:1372 [inline]
 __do_sys_openat fs/open.c:1388 [inline]
 __se_sys_openat fs/open.c:1383 [inline]
 __x64_sys_openat+0x12d/0x210 fs/open.c:1383
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88802b601000
 which belongs to the cache kmalloc-256 of size 256
The buggy address is located 24 bytes inside of
 freed 256-byte region [ffff88802b601000, ffff88802b601100)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b600
head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88813fe3cb40 dead000000000100 dead000000000122
raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88813fe3cb40 dead000000000100 dead000000000122
head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 00fff00000000001 ffffea0000ad8001 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14156298730, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x153/0x170 mm/page_alloc.c:1889
 prep_new_page mm/page_alloc.c:1897 [inline]
 get_page_from_freelist+0x111d/0x3140 mm/page_alloc.c:3962
 __alloc_frozen_pages_noprof+0x27c/0x2ba0 mm/page_alloc.c:5250
 alloc_slab_page mm/slub.c:3296 [inline]
 allocate_slab mm/slub.c:3485 [inline]
 new_slab+0xa6/0x6c0 mm/slub.c:3543
 refill_objects+0x26b/0x400 mm/slub.c:7178
 refill_sheaf mm/slub.c:2818 [inline]
 alloc_full_sheaf mm/slub.c:2839 [inline]
 __pcs_replace_empty_main+0x1ab/0x600 mm/slub.c:4629
 alloc_from_pcs mm/slub.c:4720 [inline]
 slab_alloc_node mm/slub.c:4854 [inline]
 __kmalloc_cache_noprof+0x493/0x6f0 mm/slub.c:5378
 kmalloc_noprof include/linux/slab.h:950 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 bus_add_driver+0x92/0x5b0 drivers/base/bus.c:699
 driver_register+0x1e2/0x360 drivers/base/driver.c:249
 i2c_i801_init drivers/i2c/busses/i2c-i801.c:1761 [inline]
 i801_driver_init+0x13f/0x180 drivers/i2c/busses/i2c-i801.c:1769
 do_one_initcall+0x11d/0x760 init/main.c:1382
 do_initcall_level init/main.c:1444 [inline]
 do_initcalls init/main.c:1460 [inline]
 do_basic_setup init/main.c:1479 [inline]
 kernel_init_freeable+0x6e5/0x7a0 init/main.c:1692
 kernel_init+0x1f/0x1e0 init/main.c:1582
 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88802b600f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88802b600f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88802b601000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                            ^
 ffff88802b601080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88802b601100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
==================================================================