Extracting prog: 5m54.584613328s
Minimizing prog: 15m27.575509081s
Simplifying prog options: 0s
Extracting C: 56.249658287s
Simplifying C: 27m14.681907254s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-ioctl$auto-write$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 3, 4, 7, 8, 24, 26, 17, 5, 1, 7, 5, 3, 3, 4, 26, 30, 5, 30, 17, 7, 22, 3, 4]
detailed listing:
executing program 0:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, r0, 0x8000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fsconfig$auto(r1, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/i8042/serio1/id/extra\x00', 0x80040, 0x0) (rerun: 64)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/215, 0xd7) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf2501000000050007000b000000e8146a9565473dee4ca2bb08c64799cb9cb7054b9608c6a0023af43a600aa2d705a135f849907fa05957dac0b3e9f99e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async)
sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x5c, r4, 0x800, 0x2, 0x25dfdbfd, {}, [@ILA_ATTR_LOCATOR={0xc}, @ILA_ATTR_IFINDEX={0x8}, @ILA_ATTR_IFINDEX={0x8}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0xe}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x3}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x27}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40844) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r7=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x28, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async, rerun: 64)
sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3044b12e", @ANYRES16=r4, @ANYBLOB="02002cbd7000fedbdf25010000000c0001000300000000000000050008002000000005000800b2000000"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x480d4) (async, rerun: 64)
write$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000500)="579986c936988666fd7fd4bf0ee0b4041c3dbe931fb1546738381b980b525de1ea1e5395bbb865d4b196a8fbbd1500d1232a4b57c6e62650e12b74247cc6c5dc1d51ec65b9b3c1d93ad948d026a668069d2ac4e7b10e7cd2f569bdc8d245a281772622f300c2af635d7b4cc50a47af18b099da", 0x73) (async)
unshare$auto(0x40000080) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/adsp1\x00', 0x400400, 0x0) (async)
r8 = socket(0x1d, 0x3, 0x1) (async, rerun: 64)
r9 = socket(0x2, 0x1, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r10=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r10}, 0x6a) (async, rerun: 32)
setsockopt$auto(r8, 0x65, 0x1, 0x0, 0x0) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
r11 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async, rerun: 64)
r12 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_RTC_PARAM_GET(r12, 0x40187013, 0x0) (async, rerun: 32)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRESOCT], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32)
write$auto(r11, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'a', @ANYBLOB="e4ac932c75e718d778ad070b61"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram15/queue/virt_boundary_mask\x00', 0x141300, 0x0)
preadv$auto(0x40000000000003, 0x0, 0x6, 0x24, 0x5)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = pidfd_open$auto(0x1, 0x0)
setns(r0, 0x60020000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0)
io_uring_setup$auto(0x4, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
executing program 0:
bind$auto(0x3, 0x0, 0x6e)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4)
r0 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300", 0x49}, 0x2, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x149)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x51)
executing program 0:
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
recvfrom$auto(r0, 0x0, 0xc, 0xb21, 0x0, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
bind$auto(0x3, 0xfffffffffffffffd, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0)
poll$auto(&(0x7f0000000480)={r2, 0xffff, 0x29}, 0x3, 0x8)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
vmsplice$auto(r1, &(0x7f00000000c0)={&(0x7f0000000080)="e0f345a1c01aad46a515fe87844dcbc8b254a05fbc45", 0x1ee3}, 0x6, 0x6)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x12, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x8, 0x5, 0x1000, 0x42, 0x6, 0x1, 0x60, 0x40000104})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
executing program 2:
mmap$auto(0x0, 0x1, 0x1000, 0x18, 0x2, 0x8002)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
r0 = fspick$auto(0xffffffffffffffff, 0x0, 0x3)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video23\x00', 0x0, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/194, 0xc2)
select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0xb, 0x6, 0x6c0, 0x3, 0x3, 0x1ffe000, 0x5, 0x2, 0x9, 0x4, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0)
ioctl$auto_TCFLSH2(r0, 0x540b, 0x0)
r2 = socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
lseek$auto(r3, 0x5, 0x0)
r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), r2)
msgctl$auto_IPC_STAT(0x8, 0x2, &(0x7f00000002c0)={{0x9, <r5=>0xffffffffffffffff, 0xee00, 0x8208, 0x3, 0xf, 0x4}, &(0x7f0000000240)=0x4, &(0x7f0000000280)=0x8, 0x0, 0xaa2c, 0x5, 0xd, 0x2363, 0x8, 0xfffa, 0x769e, @raw=0x100})
ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000340)={"fb6634a865b09c1d10a8a298fc3cdf9d158bbd3324909d741a7fea6a7bb598a0", 0x5185, 0x6, 0x2, 0x5e, 0xfff, <r6=>0xffffffffffffffff})
sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001e80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x19c4, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x176, 0x2, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @uid=r5}, @typed={0x25, 0x8, 0x0, 0x0, @str='/proc/thread-self/net/ip6_mr_vif\x00'}, @generic="b3fd50d852093f069e4ee4d9f93453c2c202d55984cf14ffcfb9f2afc3f77e97703989875c7a85cf652a73b60d30223af3d89d2057e34b8d0086d083883cfb91", @nested={0xc7, 0x12b, 0x0, 0x1, [@generic="199dd12fdadbe09b753f150da931e0f3ba51a814b98feae3352f2aa04be4658c52f92ead93f0ed9ead471a46004470cb34925bd4dcf9563b41bda8e7c0999d56b0766ba917c5ab060d31ea623e9adb6ea2219148b979de2ce49421935af7a5a84a2135358f2c2228957995b1ddb692e1e8c7313c8de17d4204b33b8c94765663ddfcb5d73b52bfa6ff4fcf5a1769320f265ab48e7fe60d65e6819143a6a76ab4ab8deaed755f8cb815875789058358cdc0a78f1e7d02cb6976f5202c2af838787e1143"]}, @generic="31edf76c47275e6b75d2bdcfee5ab276b8cc4f2b719ffb3d25ec2bd2ac35bcad204c869aac51683121802c87569d5642b00f3bdab66e929352a9"]}, @TIPC_NLA_BEARER={0x1070, 0x1, 0x0, 0x1, [@generic="eb6d84af5a659664793a3a85562a483007bd107a5571b44da669fe6fd87bc35b428c0bbf779b5fabfbf3a6b2a3302919e44db8a8291058c401148db884ee4b50bb5cc9774ccc68e3", @nested={0x21, 0xb, 0x0, 0x1, [@nested={0x4, 0x40}, @typed={0x8, 0xd3, 0x0, 0x0, @pid=r6}, @nested={0x4, 0xff}, @generic="e70d4c57a351015a1b8696ea2f"]}, @generic="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"]}, @TIPC_NLA_BEARER={0x132, 0x1, 0x0, 0x1, [@generic="148252ac8d3f7099caa7216bd357c184123787f686b63357fa6669fff0791cd1ef17ab17b153b92e6cb7e4cb912cd43ec2b45d6fc4c3986804d2f6f4f94b8cda11862529fea6b0a59eb1843d35e0a140c6597820aea5bda10d67102eeda611fc2383aea86961749d1b1056ea35a7e1d5d8f37b7785db45c4e5e87a464908fa240f3598b47c132c96909e239739152c", @generic="ff355cd1b860a2ccd95dbdd1c41ea7e3de8ccdb4a70346fcd9c4523bc41ff4a2a703e5c2a04912d31630f4ebe4c3603bbe3d99d6bdf8e60845c4d622b8cda901030de95c59cd2023f35835d8621df0d44d84d471e3965f3d34532c472d5e71edb3fece409c5f92b83b9859a28b114a338b3c30150e9b805d44b79ccd2c70d67199701f9bc112ad83a1a3532a7553d7ad05b5f5d7561ab3da899ef5845eaa59"]}, @TIPC_NLA_SOCK={0x2d4, 0x2, 0x0, 0x1, [@nested={0x2b6, 0x3, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @nested={0x4, 0xf5}, @nested={0x4, 0x7a}, @nested={0x4, 0x5c}, @generic="4fdb5a7b767a414632775d60683831b989d030ba3bcec238620e0a3f15452a411ea9a54590cebd609c775754e3409381b9e22bb3b738dca3adfdb23798f9421a7230b1411980edbbf4aa04c65810ef4ed8af1261dc1f76783b0405a96783df450935188728567dbb6cd5fd5f7f4ef633f176857fe00f5bced6c15866641d11ee8ed53a769ac6dbc80a4fd23220a52534b7d66a3e3fdd357ae684edf517fb93a394ab52e60c00c15e7c6e092f219bf3582f24849c56b56994c8545d2879ee6a4358ffa4d4f0034c5a50993c2360d2d42ea1b0593135bb1eee6d8f96c13ff4dd69d1f8d749bf", @typed={0x4, 0x151}, @generic="2e9143a3994db1bdc847be3c94d41bb814b8ecdd934e56f672771124191d30d4e9050acbe061325e2c2b0516aa424161f7c1df12b4a8f199836022bfea6c9f09ee6b055a1964bcf46f8128cbde4f3766e04505229bce48eee477c154068a3594f773973a6feaafd3573856d3d4229774d3f28b689b96478a1a195b3601e327278bd98c2436a02b59abb404b6952d63be9c29837ec49f633ee1642953f52e1841c9c18bab98e40537d619209b99ca79fe1bce50a37dd3fe5dbf6ac64c78fbe70f0dabbbd53c295315f3293091417570a33a", @typed={0x8, 0xf0, 0x0, 0x0, @u32=0xee}, @generic="9c6b2ed02dc1a464c1f84f037b2b161f83ab7a36fd68adbb5941ba450996b82827b577548a7fb2fff887236899bd4c273b5bbecc1ce7ed8d7c68d1946bdc4155e9a3b44a3e76a6484ca718a8b6ba117e048407733a5328305d6a0b32b9f1a4614857edb7617b34a4aa965ead58a56d2d14388f440ccfeb4c3f0005abe6c1ae752ed433521ccf7d0476db2aeaf49ad722e18ce008878e10f059ad350096a7b0dc71cb39c2007c92b1e4872851e3791ae1bfdb6597306a4d654061492635b55d98a5585495db940eaf06fcbe6c8f72f1f4f485aec933fd75eaef7657d3"]}, @typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x4, 0x14d}]}, @TIPC_NLA_MON={0x3a0, 0x9, 0x0, 0x1, [@nested={0x203, 0x122, 0x0, 0x1, [@nested={0x4, 0x135}, @generic="9a3bdfd3f1714212b2273f2689e475ad7cb8be294e39b8531c7fe59bd926d568698d4f78c5c2373b917fb4be70f0d8f0dad7b86ad18e3d1429184564a46fab62673a14a83e78f9055c6d56ff4b8313facb07b38f3d5d77b685726c1992b36e06d23bd90247a5562af65bf7cbd8e0eba360f7ece23f3418a5e7a6e6576c3a0051ee", @generic="cb56cd354f0c91f6b3cacf71e71b8c48b43f99495fd2eef9ac6c1c9b9f508d826b48360e50400330757fa2b34686676cc203fe4b7d1d1aa89b65caa2a67993f8db7921c54b2cdc819d5694eabde202bf6fec946e71f7fe00a1c2fbc8dd3e589eb759601523ff4d9b36e474e021f5f58fc4fe768dbbdcc62361f41539a65ef8b8035124514b1bf2bd9e06e5ff9d698c8251c46f9fd21ced8c9e84cb84bb27739465778dce4745b076dd4e9779a2a693fb628228e67d280a3a1c86b27cf3f571a564a06ad97f58e8722648d46d5bb63e90d354977db1d7a45368f93e6d3b854cbd25f5869e6cfcc7f69945b3668df6a473c093cc9186", @nested={0x4, 0x133}, @generic="8a02489cf024ce13834cf906249cafdcd4d1ba5680cb4adcfb2ddcf34d453959a0e1a04d895074e110c732fefee527d8764a47df850f0061cce1b34b314d2d70792d20b06f36771869417dd0648893b29c02522b35640fad46ee97f3e398661fc9063aaab9ff7d3373df5005903b18d13a20f188967d068349b5426b1c2b442197"]}, @generic="6fa31c3665ca882af54619d6f9e426ba14f0d575f43de2cf351b4d429cbccc603fd7305035a82cc921efd7172de66787ffd363ebb3a6f30eb15ca0824e95cf3714634fea005fdec57e156caba15d24de27ca6ea83a8a2f02166749a5f1fd2d38dda6bb25faae9bf6de49a21e5198a01c6fad1cf3dd6e6a35f8ce5e103a7398048bb7473fc49c5de6fc95b41a8d0195937975ea870eaf6214a8e2303f1055cb4f5dd6c6348f828ba3b11026530d671c04e2e7e3030b00458b", @nested={0xdd, 0x38, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32}, @generic="30de60e8eb0fe422e82edf1e2e09233c97d8ff6928d829a3666b99cf1330dd88fc844ee08b61f4b80cfda8368f3ba9d7df2f436d143900b70c0682124996ca5ea5024bba9146b37b827c4ffeaeb777b3accf63a48d44419c5d8e5b08b46ea8d460852a3612d664c91c4bfcdff459e1426bf1843f187c4871f6c34c4e09aee2b86330eacf60879d5ffb2ac42667d835bddcf471b53965937d9cb2036262e3998e131384ac91e8cfc876efb3e950c387d8d1ec5ede4c871b758f1fb608aa3cb16a00fd50d615", @typed={0x8, 0xc9, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x13d}]}]}, @TIPC_NLA_NAME_TABLE={0x20, 0x8, 0x0, 0x1, [@typed={0x14, 0x70, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @typed={0x7, 0x138, 0x0, 0x0, @str='\xf8\\\x00'}]}]}, 0x19c4}, 0x1, 0x0, 0x0, 0x24000010}, 0x9bee8f6cd2536a87)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
ioctl$auto_UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000400)={{0x5, 0x23, 0xa6, 0x84}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eb624ad63110d61771552c03de65800", 0x2})
mount$auto(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfs\x00\x00X\xca\xd8\xce\xc1\xfc\x9f\x9f?o;\xf7\xdf\x9f\x11\xc5\xea\xd9', 0x8, 0x0)
ioctl$auto_UI_DEV_CREATE(r7, 0x5501, 0x0)
io_uring_setup$auto(0x401, 0x0)
read$auto(0x3, 0x0, 0x18)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_forward_update_priority\x00', 0x202, 0x0)
executing program 2:
r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
memfd_secret$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x100)
socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x2, 0x0)
socket(0xa, 0x5, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'})
sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbb9, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x20)
executing program 3:
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mmap$auto(0x0, 0xffffffff, 0xe0, 0x15, r0, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0xe)
executing program 2:
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3)
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x20800, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x10, 0x2, 0x14)
ioctl$auto(r0, 0xb21064a7, 0x20000a)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ioam6(0x0, r0)
sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0xa6ff, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r1, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
executing program 1:
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'a', @ANYBLOB="e4ac932c75e718d778ad070b613877"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
executing program 2:
r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
pread64$auto(r0, 0x0, 0x10000000000000, 0xffff)
read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0xa101, 0x0)
executing program 1:
mmap$auto(0x0, 0x1, 0x1000, 0x18, 0x2, 0x8002)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
r0 = fspick$auto(0xffffffffffffffff, 0x0, 0x3)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video23\x00', 0x0, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/194, 0xc2)
select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0xb, 0x6, 0x6c0, 0x3, 0x3, 0x1ffe000, 0x5, 0x2, 0x9, 0x4, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0)
ioctl$auto_TCFLSH2(r0, 0x540b, &(0x7f0000000140))
r2 = socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
lseek$auto(r3, 0x5, 0x0)
r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), r2)
msgctl$auto_IPC_STAT(0x8, 0x2, &(0x7f00000002c0)={{0x9, <r5=>0xffffffffffffffff, 0xee00, 0x8208, 0x3, 0xf, 0x4}, &(0x7f0000000240)=0x4, &(0x7f0000000280)=0x8, 0x0, 0xaa2c, 0x5, 0xd, 0x2363, 0x8, 0xfffa, 0x769e, @raw=0x100})
ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000340)={"fb6634a865b09c1d10a8a298fc3cdf9d158bbd3324909d741a7fea6a7bb598a0", 0x5185, 0x6, 0x2, 0x5e, 0xfff, <r6=>0xffffffffffffffff})
sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001e80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x19c4, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x176, 0x2, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @uid=r5}, @typed={0x25, 0x8, 0x0, 0x0, @str='/proc/thread-self/net/ip6_mr_vif\x00'}, @generic="b3fd50d852093f069e4ee4d9f93453c2c202d55984cf14ffcfb9f2afc3f77e97703989875c7a85cf652a73b60d30223af3d89d2057e34b8d0086d083883cfb91", @nested={0xc7, 0x12b, 0x0, 0x1, [@generic="199dd12fdadbe09b753f150da931e0f3ba51a814b98feae3352f2aa04be4658c52f92ead93f0ed9ead471a46004470cb34925bd4dcf9563b41bda8e7c0999d56b0766ba917c5ab060d31ea623e9adb6ea2219148b979de2ce49421935af7a5a84a2135358f2c2228957995b1ddb692e1e8c7313c8de17d4204b33b8c94765663ddfcb5d73b52bfa6ff4fcf5a1769320f265ab48e7fe60d65e6819143a6a76ab4ab8deaed755f8cb815875789058358cdc0a78f1e7d02cb6976f5202c2af838787e1143"]}, @generic="31edf76c47275e6b75d2bdcfee5ab276b8cc4f2b719ffb3d25ec2bd2ac35bcad204c869aac51683121802c87569d5642b00f3bdab66e929352a9"]}, @TIPC_NLA_BEARER={0x1070, 0x1, 0x0, 0x1, [@generic="eb6d84af5a659664793a3a85562a483007bd107a5571b44da669fe6fd87bc35b428c0bbf779b5fabfbf3a6b2a3302919e44db8a8291058c401148db884ee4b50bb5cc9774ccc68e3", @nested={0x21, 0xb, 0x0, 0x1, [@nested={0x4, 0x40}, @typed={0x8, 0xd3, 0x0, 0x0, @pid=r6}, @nested={0x4, 0xff}, @generic="e70d4c57a351015a1b8696ea2f"]}, @generic="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"]}, @TIPC_NLA_BEARER={0x132, 0x1, 0x0, 0x1, [@generic="148252ac8d3f7099caa7216bd357c184123787f686b63357fa6669fff0791cd1ef17ab17b153b92e6cb7e4cb912cd43ec2b45d6fc4c3986804d2f6f4f94b8cda11862529fea6b0a59eb1843d35e0a140c6597820aea5bda10d67102eeda611fc2383aea86961749d1b1056ea35a7e1d5d8f37b7785db45c4e5e87a464908fa240f3598b47c132c96909e239739152c", @generic="ff355cd1b860a2ccd95dbdd1c41ea7e3de8ccdb4a70346fcd9c4523bc41ff4a2a703e5c2a04912d31630f4ebe4c3603bbe3d99d6bdf8e60845c4d622b8cda901030de95c59cd2023f35835d8621df0d44d84d471e3965f3d34532c472d5e71edb3fece409c5f92b83b9859a28b114a338b3c30150e9b805d44b79ccd2c70d67199701f9bc112ad83a1a3532a7553d7ad05b5f5d7561ab3da899ef5845eaa59"]}, @TIPC_NLA_SOCK={0x2d4, 0x2, 0x0, 0x1, [@nested={0x2b6, 0x3, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @nested={0x4, 0xf5}, @nested={0x4, 0x7a}, @nested={0x4, 0x5c}, @generic="4fdb5a7b767a414632775d60683831b989d030ba3bcec238620e0a3f15452a411ea9a54590cebd609c775754e3409381b9e22bb3b738dca3adfdb23798f9421a7230b1411980edbbf4aa04c65810ef4ed8af1261dc1f76783b0405a96783df450935188728567dbb6cd5fd5f7f4ef633f176857fe00f5bced6c15866641d11ee8ed53a769ac6dbc80a4fd23220a52534b7d66a3e3fdd357ae684edf517fb93a394ab52e60c00c15e7c6e092f219bf3582f24849c56b56994c8545d2879ee6a4358ffa4d4f0034c5a50993c2360d2d42ea1b0593135bb1eee6d8f96c13ff4dd69d1f8d749bf", @typed={0x4, 0x151}, @generic="2e9143a3994db1bdc847be3c94d41bb814b8ecdd934e56f672771124191d30d4e9050acbe061325e2c2b0516aa424161f7c1df12b4a8f199836022bfea6c9f09ee6b055a1964bcf46f8128cbde4f3766e04505229bce48eee477c154068a3594f773973a6feaafd3573856d3d4229774d3f28b689b96478a1a195b3601e327278bd98c2436a02b59abb404b6952d63be9c29837ec49f633ee1642953f52e1841c9c18bab98e40537d619209b99ca79fe1bce50a37dd3fe5dbf6ac64c78fbe70f0dabbbd53c295315f3293091417570a33a", @typed={0x8, 0xf0, 0x0, 0x0, @u32=0xee}, @generic="9c6b2ed02dc1a464c1f84f037b2b161f83ab7a36fd68adbb5941ba450996b82827b577548a7fb2fff887236899bd4c273b5bbecc1ce7ed8d7c68d1946bdc4155e9a3b44a3e76a6484ca718a8b6ba117e048407733a5328305d6a0b32b9f1a4614857edb7617b34a4aa965ead58a56d2d14388f440ccfeb4c3f0005abe6c1ae752ed433521ccf7d0476db2aeaf49ad722e18ce008878e10f059ad350096a7b0dc71cb39c2007c92b1e4872851e3791ae1bfdb6597306a4d654061492635b55d98a5585495db940eaf06fcbe6c8f72f1f4f485aec933fd75eaef7657d3"]}, @typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x4, 0x14d}]}, @TIPC_NLA_MON={0x3a0, 0x9, 0x0, 0x1, [@nested={0x203, 0x122, 0x0, 0x1, [@nested={0x4, 0x135}, @generic="9a3bdfd3f1714212b2273f2689e475ad7cb8be294e39b8531c7fe59bd926d568698d4f78c5c2373b917fb4be70f0d8f0dad7b86ad18e3d1429184564a46fab62673a14a83e78f9055c6d56ff4b8313facb07b38f3d5d77b685726c1992b36e06d23bd90247a5562af65bf7cbd8e0eba360f7ece23f3418a5e7a6e6576c3a0051ee", @generic="cb56cd354f0c91f6b3cacf71e71b8c48b43f99495fd2eef9ac6c1c9b9f508d826b48360e50400330757fa2b34686676cc203fe4b7d1d1aa89b65caa2a67993f8db7921c54b2cdc819d5694eabde202bf6fec946e71f7fe00a1c2fbc8dd3e589eb759601523ff4d9b36e474e021f5f58fc4fe768dbbdcc62361f41539a65ef8b8035124514b1bf2bd9e06e5ff9d698c8251c46f9fd21ced8c9e84cb84bb27739465778dce4745b076dd4e9779a2a693fb628228e67d280a3a1c86b27cf3f571a564a06ad97f58e8722648d46d5bb63e90d354977db1d7a45368f93e6d3b854cbd25f5869e6cfcc7f69945b3668df6a473c093cc9186", @nested={0x4, 0x133}, @generic="8a02489cf024ce13834cf906249cafdcd4d1ba5680cb4adcfb2ddcf34d453959a0e1a04d895074e110c732fefee527d8764a47df850f0061cce1b34b314d2d70792d20b06f36771869417dd0648893b29c02522b35640fad46ee97f3e398661fc9063aaab9ff7d3373df5005903b18d13a20f188967d068349b5426b1c2b442197"]}, @generic="6fa31c3665ca882af54619d6f9e426ba14f0d575f43de2cf351b4d429cbccc603fd7305035a82cc921efd7172de66787ffd363ebb3a6f30eb15ca0824e95cf3714634fea005fdec57e156caba15d24de27ca6ea83a8a2f02166749a5f1fd2d38dda6bb25faae9bf6de49a21e5198a01c6fad1cf3dd6e6a35f8ce5e103a7398048bb7473fc49c5de6fc95b41a8d0195937975ea870eaf6214a8e2303f1055cb4f5dd6c6348f828ba3b11026530d671c04e2e7e3030b00458b", @nested={0xdd, 0x38, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32}, @generic="30de60e8eb0fe422e82edf1e2e09233c97d8ff6928d829a3666b99cf1330dd88fc844ee08b61f4b80cfda8368f3ba9d7df2f436d143900b70c0682124996ca5ea5024bba9146b37b827c4ffeaeb777b3accf63a48d44419c5d8e5b08b46ea8d460852a3612d664c91c4bfcdff459e1426bf1843f187c4871f6c34c4e09aee2b86330eacf60879d5ffb2ac42667d835bddcf471b53965937d9cb2036262e3998e131384ac91e8cfc876efb3e950c387d8d1ec5ede4c871b758f1fb608aa3cb16a00fd50d615", @typed={0x8, 0xc9, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x13d}]}]}, @TIPC_NLA_NAME_TABLE={0x20, 0x8, 0x0, 0x1, [@typed={0x14, 0x70, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @typed={0x7, 0x138, 0x0, 0x0, @str='\xf8\\\x00'}]}]}, 0x19c4}, 0x1, 0x0, 0x0, 0x24000010}, 0x9bee8f6cd2536a87)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
ioctl$auto_UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000400)={{0x5, 0x23, 0xa6, 0x84}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eb624ad63110d61771552c03de65800", 0x2})
mount$auto(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfs\x00\x00X\xca\xd8\xce\xc1\xfc\x9f\x9f?o;\xf7\xdf\x9f\x11\xc5\xea\xd9', 0x8, 0x0)
ioctl$auto_UI_DEV_CREATE(r7, 0x5501, 0x0)
io_uring_setup$auto(0x401, 0x0)
read$auto(0x3, 0x0, 0x18)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_forward_update_priority\x00', 0x202, 0x0)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mlock$auto(0x5, 0xffff)
socket(0x1d, 0x2, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose10/queues/rx-0/rps_cpus\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="cd8e3641d90f1d637b97694a497cb8b0903fdf43dbb60fb2b87c9474538461bf49a05dca9afbdba4301173cd9d534696", @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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"], 0x105c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000)
mount$auto(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000600)='H\xff\x90ifs\b\xb8\xb3\xa60\x13N\xeezX4\xfd\xf1\xbe\xcec\xf2\xf9 \xc8\xfc\xe1\xf5\xbb\xbe4\x81\"\x14\xdds\x94I;\x9e}f\x82\xfaW\xc0\xd3l\xa3U\x8d\xcd\xad\xa3X\xdd\x17\x10\xd3\x92F_\xe7-Y\x8b\xc5\xc9U\x04\xb2\xa7r\x19nZe2\x13+\xe2V\x9f\x12\xa2p\xce\xa1\xb3\x88^\x1f\x994@\xca\x98\xd0\xbf\xe9X\x0f!\xb9(K\xa0d4\x13\xf9\xea~\x18\xe0\xac\x8d\xd6;\xd1\xe6\xda\xec\xc6g\xa2\xfc\x8a#\xae}\xc1\xd3\xc6)\xba\xb3\xbd\n\xa9-\x19\xd1bm\xaf\xb4\x98\xdcv\xd4\x87\x80lJ\xfd \x8f\xcd\x87\xf46^c\xc8\xc4rBZ\x86sCq\xe0\x02\xa8\x1e\xfe+\xb3\xf3_R<\x80\x11<\xc2\xc8K\x8f\xd5\x89S\xa8\x81<p0\xf0F=1\xb7s\x8c\xcf\xe6\xfeq\xe8?m\x1aGX\xa3\x99)=\xa2\x80\xf5$\xd1\xe6\x0e!\xe9\'\x10O\x1a\x006\xc2\x84\vOS&.\x01r!\xa7\x1d\x85\nF\xb7\xc3\x94\x9c\x8b\xca\x13\xa0\xce\xf6J\a\x9f5P\x9ed$\xec\xec\xbf\x0f\x80\xd6Fn\x1bM5\xe9\x86\xe3\xcb\t\x88\xcd\xd7\f[\x9a\x976\x9b\x10N\xa1oc\x92!\xb5\x7f\xddD\x9ee\xc4]\xe7\n\xba\x8d`\xce\xb0\x98\x84\x94v\x19\xf6\xd4Gg\xa3\xd1\xfc*\x1c\x86\x1di^?V\xe9\"\xcc\xc4v\r\xa6\xb2\x93\xe0\n\xd99\xe8B\x11hD5\xa4J3P(\xee\xf3\xf0\xaaYL\xcc6\x9bV\f\x11\xcf7~pL{7\xe9\x9c/\rN\x1b\xe5\x89:\xdcf\xaf\xa7\xebC\xa1\xd3\v\xc6\xee\x1b6`\xcaI\xdeb\xbd.\x90C+\xb0uKi\xac\x97B\xe650 \xe2\xda\x96dTS\xa9t\xe3\x98\xbf\xe1\x12\b\xf3XD\xf9\x00\xe4{\xee\xa2!\xf5\xab\x84\xe1\xe60<\xd0d_~\xe9,Z\xb8q\xa1\x1b\xe3\xf8O\'v\x14d\x182*\x132y\f\xa8-\xbd\x10\xb8\xd9\x94\x17\xf1\xa6\xff\xab\xad0\xf6B\xe6', 0x8000000000000001, &(0x7f0000000400)="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")
io_uring_setup$auto(0x6, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptyq9\x00', 0x420001, 0x0)
r1 = io_uring_setup$auto(0xb4cf, &(0x7f0000000240)={0x10001, 0x1, 0x5, 0x4, 0x8, 0x1, r0, [0x8, 0x4, 0xffff], {0x6000, 0x7fffffff, 0x9, 0x7, 0x6, 0x5, 0x6, 0xff, 0x6}, {0x80, 0x2, 0x2, 0x1, 0x6, 0x0, 0x9, 0x3, 0xb}})
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0xffff, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", "00000600", "2ff43123", ['\x00', "000000000600", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]})
prctl$auto(0x3e, 0x9, 0x0, 0xffffffffffffffff, 0x0)
write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000380)="18606e7d13f4f6d8bff452884f12212fa89a608544f572a5abe5ad754595de21c6620b6fb7d076cde3b8477feda921c70d04f7a01a98448eed264992c2f278f17787fc9f9ff23cd4", 0x48)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xd, 0x1, 0x80, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3ff, 0x80000001, 0x6a, 0x6d3f, 0xfffffffffffffcd1, 0x2, 0xfffffffffffffffe]}, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_marker\x00', 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x90001, 0x0)
sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800)
socket(0x10, 0x2, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'})
sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbb9, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x20)
executing program 1:
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/arch_status\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0xc}, 0x2002)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0)
ioctl$auto(r2, 0xc0085666, r1)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x5, 0x0, &(0x7f0000000040)=0xb0)
socket(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
openat2$auto(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x4, 0x411}, 0x7)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0)
ioctl$auto_BCH_IOCTL_DISK_RESIZE_JOURNAL(0xffffffffffffffff, 0x4018bc0f, &(0x7f0000000100)={0x4, 0x0, 0xfffffffffffffffe, 0x5})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r4, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
mount$auto(&(0x7f00000000c0)='hsr0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='%{%#:-\xfd\n[\x1f*$}+\x00', 0x1, &(0x7f0000000440))
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r6 = open(0x0, 0x22240, 0x155)
prctl$auto_PR_SVE_GET_VL(0x33, 0x7, 0x0, 0x7f, 0x6cec)
msgctl$auto_IPC_INFO(0x9, 0x3, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r8, @ANYRES64=r0, @ANYRES32=r6, @ANYRES32=r8, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d355bb2f}, 0x80)
socket(0x2, 0x2, 0x88)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b7f, 0x2, 0x8000)
executing program 3:
r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
memfd_secret$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x100)
socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x2, 0x0)
socket(0xa, 0x5, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
executing program 3:
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0)
mprotect$auto(0x0, 0x3ff, 0x6)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f00000001c0)=""/191, 0x1f8)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/194, 0xc2)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x0, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000040)='{\x00', 0xfff)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0)
mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0)
open(0x0, 0x161342, 0x100)
socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0)
socket(0x27, 0x9, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0180, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0)
sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, 0x0, 0x8000)
executing program 3:
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x20800, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x10, 0x2, 0x14)
ioctl$auto(r0, 0xb21064a7, 0x20000a)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-ioctl$auto-write$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
single: successfully extracted reproducer
found reproducer with 7 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-ioctl$auto-write$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-ioctl$auto-write$auto-clone$auto-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-ioctl$auto-write$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-ioctl$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
reproducing took 49m33.091709849s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: vmalloc-out-of-bounds in skb_put_data include/linux/skbuff.h:2752 [inline]
BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
Read of size 140 at addr ffffc90000ace000 by task kworker/u9:2/5839

CPU: 1 UID: 0 PID: 5839 Comm: kworker/u9:2 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: hci0 hci_devcd_timeout
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 check_region_inline mm/kasan/generic.c:183 [inline]
 kasan_check_range+0xef/0x1a0 mm/kasan/generic.c:189
 __asan_memcpy+0x23/0x60 mm/kasan/shadow.c:105
 skb_put_data include/linux/skbuff.h:2752 [inline]
 hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
 hci_devcd_timeout+0xb5/0x2e0 net/bluetooth/coredump.c:413
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

The buggy address ffffc90000ace000 belongs to a vmalloc virtual mapping
Memory state around the buggy address:
 ffffc90000acdf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000acdf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
>ffffc90000ace000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
                   ^
 ffffc90000ace080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000ace100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: vmalloc-out-of-bounds in skb_put_data include/linux/skbuff.h:2752 [inline]
BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
Read of size 140 at addr ffffc90000ace000 by task kworker/u9:2/5839

CPU: 1 UID: 0 PID: 5839 Comm: kworker/u9:2 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: hci0 hci_devcd_timeout
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 check_region_inline mm/kasan/generic.c:183 [inline]
 kasan_check_range+0xef/0x1a0 mm/kasan/generic.c:189
 __asan_memcpy+0x23/0x60 mm/kasan/shadow.c:105
 skb_put_data include/linux/skbuff.h:2752 [inline]
 hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
 hci_devcd_timeout+0xb5/0x2e0 net/bluetooth/coredump.c:413
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

The buggy address ffffc90000ace000 belongs to a vmalloc virtual mapping
Memory state around the buggy address:
 ffffc90000acdf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000acdf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
>ffffc90000ace000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
                   ^
 ffffc90000ace080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000ace100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
==================================================================