Extracting prog: 4h1m16.243549496s
Minimizing prog: 38m8.543072372s
Simplifying prog options: 3m37.688920115s
Extracting C: 51.543210479s
Simplifying C: 0s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-sendmsg$auto_NL802154_CMD_GET_SEC_DEV-read$auto-stat$auto-openat$auto_proc_fail_nth_operations_base-writev$auto-bpf$auto-getsockopt$auto_SO_PASSCRED-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-openat$auto_tty_fops_tty_io-sendmsg$auto_NL80211_CMD_GET_REG-ioperm$auto-writev$auto-fcntl$auto_F_SETLK-openat$auto_proc_reg_file_ops_compat_inode-pread64$auto-ioctl$sock_SIOCGIFINDEX-statmount$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-writev$auto-io_setup$auto-write$auto
detailed listing:
executing program 0:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 22, 27, 27, 27, 27, 27, 27, 27, 27, 22, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27]
detailed listing:
executing program 1:
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x84)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0)
r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r3, &(0x7f0000000040)='nbd\x00', 0x4)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r4 = fanotify_init$auto(0xfffffffb, 0xffff)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x3, 0xde, 0x10, r0, 0x8000)
close_range$auto(r0, r1, 0xc)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/vulnerabilities/mmio_stale_data\x00', 0x0, 0x0)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
io_uring_register$auto(0x2, 0xe, 0x0, 0x20)
write$auto(r5, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800)
mmap$auto(0x0, 0x0, 0x400000dc, 0x937e, 0x2, 0x8000)
prctl$auto_PR_PPC_SET_DEXCR(0x49, 0x8, 0x0, 0x3, 0x4)
unshare$auto(0x40000080)
r6 = socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0xdb81, 0x2, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0xba, 0x0}, 0x2000c000)
r7 = eventfd$auto(0x80)
readv$auto(r7, &(0x7f0000000380)={0x0, 0x8}, 0x4)
openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0)
close_range$auto(r2, r4, 0x5)
executing program 1:
ioctl$auto_SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000003c0)="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")
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, 0x0, 0x80000000)
preadv$auto(0x40000000000003, &(0x7f0000000240)={0x0, 0xfffffffd}, 0x6, 0xc, 0x1)
r0 = socket(0x2b, 0x1, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'})
sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880)
munmap$auto(0x8000, 0xffffffff)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000180)="bcb9c371f46d0d9bdb06c4837f6392975c3dce07fe23702dd7346a3e7774e8881be6660ef6514d314dc7c2a7b07582635940668ee4020f9bb4b577322dbddb1dcc92fbad285a54e448c0423f71bef721ac0eacdf0e2184faac074151ca1655bf5e8814d73eeff0e81576aad5aced3625f066f3eeb4e7d741b11edc7a", 0x8000, 0x1}, 0x8}, 0x1, 0x100)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0x7}, 0xb, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/traceSMB\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(0x3, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r2)
executing program 0:
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000180), 0xe2bf528124bb75dd, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mseal$auto(0x0, 0x7dda, 0x0)
unshare$auto(0x20000)
close_range$auto(r1, r0, 0x9)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r2, 0x0)
unshare$auto(0x20000)
pivot_root$auto(&(0x7f0000000040)='..\x00', 0x0)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c72b7cc06d46052f12bedb7048bea1dd70000", @ANYRES16=r3, @ANYBLOB="810b25bd7000ffdbdf250100000005000f009a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
sched_rr_get_interval$auto(0x0, 0x0)
fanotify_init$auto(0x6d5, 0x3)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9)
executing program 0:
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', <r2=>0x0})
sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c804}, 0x14)
r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
recvfrom$auto(r3, 0x0, 0xdd, 0x8, 0x0, 0x0)
write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r4)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
timerfd_create$auto(0x9, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/slab/kmalloc-64/min_partial\x00', 0x501, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000200)='4', 0x1)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x2, 0x9, 0x2, 0x6]}, 0x0)
close_range$auto(0x2, 0xa, 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0)
pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9)
read$auto(0x3, 0x0, 0xf34)
write$auto(0x3, 0x0, 0xffd8)
bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
r0 = socket(0x12, 0x4, 0x440a)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040))
socket(0x25, 0x5, 0x0)
sendfile$auto(0x6, 0x3, 0x0, 0xfdef)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0)
io_setup$auto(0x80002, 0x0)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r2, 0x40084149, &(0x7f0000001080)=0x7)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r2, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000900), r3)
sendmsg$auto_OVS_VPORT_CMD_SET(r3, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000001240)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0xa6fa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x4)
socket(0x11, 0x80003, 0x300)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NFC_CMD_STOP_POLL(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="44000000b005340aebe5fa82cc2cfe070efe7393c78775a7fbd06451a308b2d75dbbc9314b37f854d5b05ee476d92d1c76c634d55ec71ff7edaeb9bf870880443128469ecac1b937af2434186513ea1de2def6266f268232ae88a517c5deaaa2de423a78b504169c1bebb902000000604ce722008ad319166a88d492ae3a921f7fc0d05390e545cdac589a1717", @ANYRES16=0x0], 0x44}, 0x1, 0x0, 0x0, 0x20008050}, 0x4048041)
sendmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000080)="a2c782f68bb0d392f32a48f96e28abb3769ede6d7f131365c9bf1e4f0e9122feeeccb2d150681f9006a5", 0x129ce85, &(0x7f0000000140)={&(0x7f0000000100)="8519ce563e075ecdc41e529a3f293e7509fb68e67469a3a26ae0f8e6f686b0f704140a1586c340da3291a44b173edc74ff7de16b4793848fcdd3", 0x1000}, 0x2, &(0x7f0000000180)="994aba0aaa2ae312110d22e3d2c51e9cdaac21bcd81ef637609c28c57e0c0281140cff4c8467ed0c869b5de11f7dd39e5db8fda8922554e9870c8b3f995a092823a8a83b9800b6ec9c98ec41095602fe8adde2e3bd14f170099f1ebfc269fd77080d991bcb7a727be081ab4ad1084db8bda7ac480f1c4f737776", 0x80000001, 0x4}, 0x8}, 0x809, 0xff)
executing program 1:
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd2/mq/0/cpu_list\x00', 0xa0440, 0x0)
r1 = socket(0x1d, 0x5, 0x88)
getsockopt$auto(r1, 0x1, 0x40, &(0x7f00000000c0)='\x05/\xc3:\x00', &(0x7f0000000100)=0x7)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/64, 0x40)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0x4ea, 0x1, 0x6, 0x0, 0x1, 0x0, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x6, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
read$auto_mon_fops_text_t_mon_text(r3, &(0x7f0000000040)=""/64, 0x40)
clock_adjtime$auto(0x6bc8, &(0x7f00000005c0)={0x7, 0x0, 0x8, 0x8000000000000001, 0x7, 0xfffffffffffffff7, 0x6, 0x0, 0x2, 0x2, 0x1, {0xf, 0x7}, 0x82ba, 0x7ff, 0x59d, 0x5, 0x0, 0x8000000000000000, 0x100000000, 0x6, 0x9, 0x7, 0x1000})
select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x200000000007, 0xd, 0x1, 0x948b, 0x3, 0x7f, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x6d3f, 0x9, 0x9, 0xfffffffffffffffd]}, 0x0)
timerfd_create$auto(0x100, 0x150b)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100)
socket(0xf, 0x3, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x7, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 0:
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xde, 0x10, 0x401, 0xd)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2, 0x1, 0x0)
epoll_create$auto(0x4)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c)
openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x101002, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1883a941", @ANYRES16=r1, @ANYBLOB="200029bd7000fddbdf259c00000004002101"], 0x18}, 0x1, 0x0, 0x0, 0x2001c047}, 0x80)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
epoll_create$auto(0x4)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x216fc2, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
fsopen$auto(0x0, 0x3)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
executing program 3:
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x80, 0x0)
sync_file_range$auto(r0, 0x0, 0x8000000000000000, 0x2)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', <r3=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, <r4=>r2, 0x4, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0xf)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
listmount$auto(&(0x7f0000000080)={0x2, @inferred=r4, 0x7fff, 0x0, 0x3}, &(0x7f0000000180)=0x8, 0xfffffffffffffffa, 0x7)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc)
readv$auto(0x6, &(0x7f00000000c0)={0x0, 0x1}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22000, 0x0)
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800)
bpf$auto(0x5, 0x0, 0x4a)
prctl$auto_PR_SME_SET_VL(0x3f, 0x8, 0x0, 0x7, 0x8)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
r6 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/devices\x00', 0x40002, 0x0)
sendfile$auto(r6, r6, &(0x7f0000000040)=0x8010, 0x788b)
executing program 1:
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0)
pread64$auto(r2, 0x0, 0x10001, 0x830)
write$auto(r1, 0x0, 0x100)
read$auto(0x3, 0x0, 0x80)
unshare$auto(0x40000080)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYBLOB="080001002e53520008000200299604044fd4a51b3fe6069c9828ee7b3a5e16ba6775e89c1262b0563d7c891b267fcf6ddb51c53725c0c3f6a943674a41ccec006a142932a4d7289ac6f2c824c09ff3119ea2cfc72b15d43e993d3c327652f1a5427b014be7d9c98d988e59c0c0918d4e09077ad2be00371f57ba208c7301a71c72390bc3c511734141cb81bcc13a2df82cd95bd7", @ANYRES32=0x9, @ANYBLOB="0800070004"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0xc0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002400)='/sys/devices/virtual/mtd/mtd0/mtdblock0/ro\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
getdents$auto(r0, &(0x7f0000000100)={0x800, 0x6, 0x3, "694e35b9d41e181fcace6c00f28fdeb373a62873d9b2445d6f402374b30e6d89639b814a9306349576d6d59f6aa6b148bf30c1824e5867e9fbda6ba5356a05656ee3ab77904f800377786443351f953c2c3fc10af304b60e61b4f2ed74a3a55bcbf31611f6cea89dcd64277a4843d59dfc3b29c22050a0363c8d6d764d909a5620ee11fee823ee520398b761473fbe3adb79722e16dd4cc19af5ab19ec35df6439f000381eb1fb0176d6aa8de2d080e629f53833d92f7752d4d9755f42a330d234a94ae0e43636d168e6c6b277019f60d59732699fe3ec"}, 0x4c3)
close_range$auto(0x2, 0x8, 0xffffffff)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xc, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010)
sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="01007050a7f82fc634b10f00003460fac93497d76d"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2)
futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd)
r3 = socket(0x10, 0x2, 0x0)
madvise$auto(0x80000001, 0x101, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
write$auto(0x3, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0xfdef)
select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffbfffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0x2, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0)
setfsuid$auto(0x1)
unshare$auto(0x40000080)
madvise$auto(0x0, 0x20200, 0x15)
executing program 2:
mmap$auto(0x2, 0x8, 0x6, 0x2000000d38, 0x2, 0xfffffffffffffff7)
sysinfo$auto(0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0)
read$auto(r0, 0x0, 0x10000000a)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
mmap$auto(0xfffffffffffffff8, 0x59ab, 0x20000000002, 0x1000015, 0xffffffffffffffff, 0xfffffffffffffffd)
close_range$auto(0x2, 0x8, 0x0)
r2 = io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x8000000000000, 0x6, 0xdf, 0x19, 0x2, 0x8000)
r3 = socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0x7, 0x28000)
adjtimex$auto(0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000001300)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0xfffd}, 0x5, 0x20000000)
newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
capget$auto(0x0, 0xfffffffffffffffe)
write$auto(0xffffffffffffffff, 0x0, 0x73)
semctl$auto_GETNCNT(0xc, 0x1ac1, 0xe, 0x3)
sendmsg$auto_NFC_CMD_GET_DEVICE(r2, 0x0, 0x55)
semctl$auto(0x9, 0xc1b8, 0x4, 0x1)
mmap$auto(0x7ffffffd, 0x2, 0x1f60000000000000, 0x9b72, r0, 0x5)
sendmmsg$auto(r3, 0x0, 0x80000001, 0x4008)
socket(0x1e, 0x4, 0x0)
executing program 3:
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000180), 0xe2bf528124bb75dd, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mseal$auto(0x0, 0x7dda, 0x0)
unshare$auto(0x20000)
close_range$auto(r1, r0, 0x9)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r2, 0x0)
unshare$auto(0x20000)
pivot_root$auto(&(0x7f0000000040)='..\x00', 0x0)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c72b7cc06d46052f12bedb7048bea1dd70000", @ANYRES16=r3, @ANYBLOB="810b25bd7000ffdbdf250100000005000f009a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
sched_rr_get_interval$auto(0x0, 0x0)
fanotify_init$auto(0x6d5, 0x3)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9)
executing program 0:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'gretap0\x00', <r7=>0x0})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84}, 0x1fa, 0xd)
r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r8, 0x2, &(0x7f0000000380)="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")
ioctl$auto__ctl_fops_dm_ioctl(r8, 0xfffffff7effffd05, &(0x7f00000001c0))
sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
write$auto(0x3, 0x0, 0x100082)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003680)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf254b000000080009000500000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
pipe2$auto(0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0x4)
r5 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
read$auto(r0, 0x0, 0xb94)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000ec0)=""/4096, 0x1000)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r8], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffe)
socket(0x1d, 0x2, 0x7)
ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'wlan0\x00'})
prctl$auto_PR_SET_NO_NEW_PRIVS(0x26, 0x2, 0xffffffffffffffff, 0xe5, 0xa0c)
close_range$auto(0x2, 0x8, 0x0)
listmount$auto(0x0, 0x0, 0x1, 0x1)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
flock$auto(r1, 0x5)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0)
flock$auto(r2, 0x2)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0x2, 0x9)
mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x1)
close_range$auto(0x2, 0xa, 0x0)
r3 = socket(0x1a, 0x800, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'})
bpf$auto(0x1, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, r4, 0x4, 0x200001ff, r3, @relative_id=0x13, 0xe600}, 0x0)
bpf$auto(0x2, &(0x7f00000001c0)=@token_create={0x7f}, 0xc)
ioctl$auto(0x3, 0xc018aa3f, 0xf0b)
executing program 0:
unshare$auto(0x40000080)
semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x88, 0x0, 0x0, 0x80000000)
socket(0x10, 0x2, 0x7fffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0)
read$auto(0xc8, 0x0, 0x200)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
access$auto(0x0, 0x8)
semctl$auto_IPC_STAT(0x0, 0x101, 0x2, 0x200)
prctl$auto(0x39, 0xffffffffffffffff, 0x0, 0x0, 0x42)
fanotify_mark$auto(0xffffffffffffffff, 0x31, 0x421, 0xffffffffffffffff, 0x0)
executing program 2:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003200)=""/64, 0x40)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
socket(0x2a, 0x2, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = socket(0x3a, 0x3, 0x0)
mlockall$auto(0x7)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
mmap$auto(0xfffffffffffffffc, 0x61, 0x9, 0xfa3d, 0x400, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r7 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x17, 0xfffffffffffffffc, 0x0)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000211e789c0000000a00ffff0000000014002000ff01faffffff00000000000000000000060002000100"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
ptrace$auto(0x10, r2, 0x4, 0x7ff)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0)
sendmsg$auto_NL802154_CMD_ASSOCIATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8030000", @ANYRES16=r8, @ANYBLOB="20002bbd7000fedb0701000000002083", @ANYRES32=r1, @ANYBLOB="040002800c004b00d2b00000000000000800370057000000f05bc05b38fdcf84f1aee3d8e0837f70cf4d981aa154cdacabcd7c4a6d7d1fa87d290af88b15657c6a88a3e33197451369dd0633185b3a80e71ddb210eedd00ae43ac31883e9b52730d95cdb87892425b896bbfc99c2752375c29b8b519e3569873d4f59836a34b08097eac1876972401cff9c1e6f4d20de6a7caa0970fdf2c72f19a130ded95ed83b1f00751a2e6901df7bc37f0ad1c5e1b5fc37bdf146d2c701dc80040086800400128008008400030000001b44db9ab05eebb05be64a22e7b9f383645ccb9d160db1e112e53de0bae6a3123f64252f1fbcb64e0ff67669e66cd9ce84e75c76f4217684859aa7cfc6e854cf8377dece546c1dc0b690195faf8a3383e64202f2a90e92d791b1d180ae788e4234cad9595324a55b9aba0c2a7eb952394ccae9dd2536a7291b9e1bc0fb9981b2949dc48582cf6cb644b16bcd767ba60e93414f4bb63d17bc1089a303bc1e6b05d629d500e2328356b07a78cdeaa55fb3bdbb2c4abcd66a25da24df23124a18f4ef48415859bab8e900dc00c0de8739de08bd67bf24ae339999cc0662254f345b22ad693417bf9102a4dce67eb98d7c13bacd8d222275c7792cc66b3fb216bbfdef6cdccd9da65939366988d86d76cda602811cddd17fdf3aafeffc886beea60da9ed11aac54a78fd086691869ca42be0f45e7edff97f180604a1cfaa76759b1808cab28c2a53d83cd453300b7ab2322651381f010922dcdba00fe1eb35e7c207de56f3bcfa1843f6c1f9f6d90e3da1ee7ad3a6a8b65ad297d08d0ecbc655637059bb8e768157d17e81188f72695baff036b581b866901dfadc40ed1cc701aa95dcb906cd0eb4aa806a52945ea3c5631b000000003ea24926dde458f5e50919e72acd02a917781ab5354142f67380db012579090c0ea7a85b6ad9d7147245a50f7e329ecd494d9e4ce6d79ece62ca68d1352edf2283476229c2fe7a0581fda7c45354a0d705018b402730e967f14c57901cb12bff171f840f2a681379cd60b297d84566bd436678e159787e5f0fa13da3b98eba0923b12ad54a5841159d038362bec7b532680bb3ef90c87d4b7c044975b41bf381afeee06966628e0d9b5a07bafda540386bacf8f8e6c8d5ec1b37aea29d2a835be7291595c48bb0e4f03d8c149028577e2d0402ec3dd9e90a018b555fd52654f660e6e3de861b66804f1431439a050029000100000008002700ffffffff08001d00", @ANYRES32=r7, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x20040000}, 0x8014)
ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r2, 0xf72, 0x0)
r9 = socket(0x2a, 0x2, 0x1)
connect$auto(r9, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x55)
executing program 1:
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x2003f0, 0x15)
timerfd_create$auto(0x9, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x2, 0x9, 0x2, 0x6]}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0)
r2 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
r3 = io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, r0, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}})
ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x11, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = socket(0xa, 0x3, 0x3c)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0)
ioctl$auto(r7, 0x5609, r6)
madvise$auto(0x0, 0x20499d, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe7f, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0080fbdbdf350a0000000800fbffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRESOCT=r2, @ANYRES16=r4], 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0xc0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
bisect: bisecting 24 programs
bisect: split chunks (needed=false): <23>
bisect: split chunk #0 of len 23 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 27, 22, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27]
detailed listing:
executing program 1:
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0)
pread64$auto(r2, 0x0, 0x10001, 0x830)
write$auto(r1, 0x0, 0x100)
read$auto(0x3, 0x0, 0x80)
unshare$auto(0x40000080)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYBLOB="080001002e53520008000200299604044fd4a51b3fe6069c9828ee7b3a5e16ba6775e89c1262b0563d7c891b267fcf6ddb51c53725c0c3f6a943674a41ccec006a142932a4d7289ac6f2c824c09ff3119ea2cfc72b15d43e993d3c327652f1a5427b014be7d9c98d988e59c0c0918d4e09077ad2be00371f57ba208c7301a71c72390bc3c511734141cb81bcc13a2df82cd95bd7", @ANYRES32=0x9, @ANYBLOB="0800070004"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0xc0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002400)='/sys/devices/virtual/mtd/mtd0/mtdblock0/ro\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
getdents$auto(r0, &(0x7f0000000100)={0x800, 0x6, 0x3, "694e35b9d41e181fcace6c00f28fdeb373a62873d9b2445d6f402374b30e6d89639b814a9306349576d6d59f6aa6b148bf30c1824e5867e9fbda6ba5356a05656ee3ab77904f800377786443351f953c2c3fc10af304b60e61b4f2ed74a3a55bcbf31611f6cea89dcd64277a4843d59dfc3b29c22050a0363c8d6d764d909a5620ee11fee823ee520398b761473fbe3adb79722e16dd4cc19af5ab19ec35df6439f000381eb1fb0176d6aa8de2d080e629f53833d92f7752d4d9755f42a330d234a94ae0e43636d168e6c6b277019f60d59732699fe3ec"}, 0x4c3)
close_range$auto(0x2, 0x8, 0xffffffff)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xc, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010)
sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="01007050a7f82fc634b10f00003460fac93497d76d"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2)
futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd)
r3 = socket(0x10, 0x2, 0x0)
madvise$auto(0x80000001, 0x101, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
write$auto(0x3, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0xfdef)
select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffbfffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0x2, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0)
setfsuid$auto(0x1)
unshare$auto(0x40000080)
madvise$auto(0x0, 0x20200, 0x15)
executing program 2:
mmap$auto(0x2, 0x8, 0x6, 0x2000000d38, 0x2, 0xfffffffffffffff7)
sysinfo$auto(0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0)
read$auto(r0, 0x0, 0x10000000a)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
mmap$auto(0xfffffffffffffff8, 0x59ab, 0x20000000002, 0x1000015, 0xffffffffffffffff, 0xfffffffffffffffd)
close_range$auto(0x2, 0x8, 0x0)
r2 = io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x8000000000000, 0x6, 0xdf, 0x19, 0x2, 0x8000)
r3 = socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0x7, 0x28000)
adjtimex$auto(0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000001300)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0xfffd}, 0x5, 0x20000000)
newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
capget$auto(0x0, 0xfffffffffffffffe)
write$auto(0xffffffffffffffff, 0x0, 0x73)
semctl$auto_GETNCNT(0xc, 0x1ac1, 0xe, 0x3)
sendmsg$auto_NFC_CMD_GET_DEVICE(r2, 0x0, 0x55)
semctl$auto(0x9, 0xc1b8, 0x4, 0x1)
mmap$auto(0x7ffffffd, 0x2, 0x1f60000000000000, 0x9b72, r0, 0x5)
sendmmsg$auto(r3, 0x0, 0x80000001, 0x4008)
socket(0x1e, 0x4, 0x0)
executing program 3:
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000180), 0xe2bf528124bb75dd, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mseal$auto(0x0, 0x7dda, 0x0)
unshare$auto(0x20000)
close_range$auto(r1, r0, 0x9)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r2, 0x0)
unshare$auto(0x20000)
pivot_root$auto(&(0x7f0000000040)='..\x00', 0x0)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c72b7cc06d46052f12bedb7048bea1dd70000", @ANYRES16=r3, @ANYBLOB="810b25bd7000ffdbdf250100000005000f009a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
sched_rr_get_interval$auto(0x0, 0x0)
fanotify_init$auto(0x6d5, 0x3)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9)
executing program 0:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'gretap0\x00', <r7=>0x0})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84}, 0x1fa, 0xd)
r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r8, 0x2, &(0x7f0000000380)="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")
ioctl$auto__ctl_fops_dm_ioctl(r8, 0xfffffff7effffd05, &(0x7f00000001c0))
sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
write$auto(0x3, 0x0, 0x100082)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003680)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf254b000000080009000500000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
pipe2$auto(0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0x4)
r5 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
read$auto(r0, 0x0, 0xb94)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000ec0)=""/4096, 0x1000)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r8], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="14e45eadecb6637b6e9276e6aa560b3398a867480f9e8a8fba70bec53d21d622b8d0df69b467e4b149114a6ac9b84da71c36a9e49e00cb6172539ae3ee7bc9c59ee6ca8e096a76c0f58ba7ee731e9717c00c6a773474041832ee988cd511375a11f8e7ddbd8ae04967a4c20a82a040de95a37e419fbe46222511bea6bc969aace721985771a7f9a1bf3d66fd85a6153e195b23a5b01b42bd31f956dc64197bb40b32f5257cb2b8cef81bff9aa9e4a11e8403e184e79fc9e7bec6f3de6096bc10b1552c3a1066e2203d7811c5bfd578a4c532492eb3bb1faa1652ffabadbf51adc7d81890a2e094f5575b711469e7b24ee765da0f300ebd33ab861b9c3a622313f316228417599c5d5d251475219f6d5dc07b90f6d68a548cffb966828255dfda40f684526526fa8be5c8e4e9faa61aa9f6645d8352f15d3fcb9c81b7dc393c08410471f5e3d4f5b6841bf53390a5045b631d63005b1f4e3f4b9832b089788f859b06502285843dfb285c06af53fb740128fe604f1d3882559c4230f0ea06cf72eef4ab741fb0832f481b4284e8b918dadf392634c678c84a649215170a0aae1c6f005989f31431119dc64a8b908d624da105b5089a8a9a160545fe0501b2f46bd169ac984f49777b03242f3985c739270de191849e772ea9fd9634b8edc569ecb8ca25b4b26071e223caebfccb0f36744431bfc021f289ebcd459e56f9205290e7f5cc03574824fb533ec7250fe30270f5519cde841a612ece1dd2c4b017d75a9f7ea92794f8dfacd4aa9804d3809e4fe695df97ff4424c01ed38ee1c702ccd14175070558e20bc9f5f704d20cf1b6af7f01fd8cfce2958ed0f02142e153661840c2ca50b7bf9abcd2c27edc0795ac282d034e5fc10f13f76be72143d12a1d2dd1086815b701e9cb67e6adf9a937aeeba997d84a74eb11f682e3fe3100b27eb6c1aac8309e3c39bed50c808835a1216f28d9788efef72d64ff3653209cc8e7734588e373927bd302bac74f81a54190890f4fab4b57956b9c8cc1caebcf1f742049a539032c9819eee66493ba5f03048348dc6fd5d0f51ea3dc7aa7501546c342a73a563b73dac18107cddf483b9a3fd793c879b3a22030e3c1461d27bcccf4b4c6218bac44663b9fa7dfe2919a28bc9c8de8ad5ce3b4a2f5ffd35546c4242e6528fe25817894397b1c8fe7f7c97a51b4371c8437141615b74f10933f352f05a9c5a28615e69840f3b4e46542e14fb02694d0b8a1da0b4b997538450131e670ec1fb255b486bc9af9c050d11ceaebd314922f8bba061441b468e89e8933e640efef1b8dbb1e6aa2961178168ed7050de2d425ab234fed7c855607bd0a01c526bd7578fcfd123bf356c005e6a61c11ca1072a6d800ab15d06f44eab8398875b47f7ebac3cafcdac4b4b7cf46b3a5e8f9545a6fd9ff7bf5e27e80fb7b9ec40d1f7383a26562e90207bc6a260537de789465475c42f1c50df0c6c606d3e1fb2f0611403f61c8fd199c3407f17fa2eff5f3019557a62a2473103836dc98d05703157467b29d60bd5596c6c0ebd02155fa997297e7bf4774017f07c0bbe6e1181b0a38a9031fdb80381169f51736a32237a0fafa62800b3048c70e1086a9165ab9aa50a53df84d99b9b820440e3c1982cf365681fe4955f8aa7db9cd4e32981fb6bd15899934e39d12dd36ac6cbaaa7bea95c0f1eda8899eb4f8728632baf8e13d1d4da49f7563e2e9a94e48d5e3c59faded54c0c4d8bd0d26335f3de149b7d13a3f9c19dabb900295e13756f2e4617137605d16560438b50dd04797b5004765239ebbfe229f783cb5b3b78b0184b13fe67d484dfc30645a176606f2bd47a200c5ebdaee2bd0d56c9910ab8e168778228bb91560ec8bb85e69b528f6d2dc4fc164163ca7ce5bd2c23e61f69dc996f7d45b865e50d6876e56dcf87240673be568193d40adee223221368387d4a003217b58f39e0123b6c2fcb11cd3b0133ff26f16ec661b860fc4726be86feef318433f16563839529adb013cafb8f49955013eb1355e55a67fc2e932259948b546fb13706af4310dd149fab3c92d4640abefda80935a6278038e22dea7ad56ec759c479263b11e5d40506e2e831f868dd715ac10990c0616785f7aa81ff4af0efd33a3a44ed1cba495c1a5434a4920f47b1847b1275078a41223a357a4e1bfad43d84c730573e0a945ee65b83a09bf490b857666a3f3c04afa43a04d6d270cd86463b4cad65e80c72c7bea3c085596465010edd70b37cf24b68793231d6df73c868137bbb870ac80ced7c7a5bce2f219675b05f3cf0a00b63971715d986299469f195efc7f859defdfe84012fc4a8da781fe51816934de62ebb4db98e524c430b52fe7621882bdc1b0333782a41e4b86c46f47558bbdead6b3573097036fa3c4baabfbd723cc4514eef4c3693ae6552f965e161ea914f751e952810c1cbf447ce3ce277a7a8ebde28333d7eaecb8330003cf55f2e209ef16abda0a274ec72ec3a659e4e2671b0b506c7109f761ec42e1a71cea60b9d76b008832d3837af6b6da9ff702dc71183e202db0d79bca2b1479a5251569c1aa12560c27d80f0782dfa30eab3264ba64b899080869d4adab085590359df366f0393c572e11cb745f477ba7c1474e34218ed45d6c95636ab522f883eca5d676b7924bf90a8c7a5c47e376caa741823c1c07301b9488d8638b1fe0e89fdf4ad76db06ec44b8150be8a601520a48a0a96c920691b4a1d91c1dcf6a17f7793fd9fbf5119947371997841e7e17d98cbcdb3db9472450a33280a43d7deaa23c53918d1ba68460f2a47f00f86595011b60abcaa37ae13e5039edfccd2846f53e414e09614cca6f59ebf59daab4b4342e6ab2a1b5c89f2ac16badf426083c4e40a1a40bcc28b1255a42f91aaa189ddba8d5554eae43d4982e59db0c13761ca79779637d39141af508e7f4821188915edb8791bdf0853a77b565b2e8e10b6b8babbcc71c07b30f882b088c85cb9068933d9ecc43194cefefc725b159453c394ef736e9eadc5a0f700c43945296266d1cf5faa495761d83a5ec3c7841c90effc400de575fd670273bce2f6ff6f6484439c69b6a85734dceaaf878aa554d1b0250e7b954266eed6f0ae6d3afeb9187c23b7324c6e4b401ff05b182e7c6b5a4f3c828c9ad8b392cee3b767cc8aa38a76f8081f44beb6c09950862227917eb70758a1921f3e9a0d2362ef7ee9c2a4fc88b356b6fd979e58c500de7742dda5616fbb8a97716815f20fe02244192982071b2fc0bc2ee786d0b07fd6bede15e6d937e7f4d936694b3bcd8fcb8e025cf53e1a2ff2f3f224f5b61475863b7b377c211b586bdf9b830af6b32db1a2a4225c51b7109d9d22e77c11e7a2027911750b3e6123739392c330311c01d27fed52cb6ff3ba97cce587dccdf351cf9b8e6459a3088be73921555cae6d00126dca4a63bf9f9a2ea4c84a2d966f0add908fa108c5f4b9e190d0a6e1948b0bfb7afbe9ecd079726d5dafb7d03a4b438512d7ef21b29c69c88da9030097392a7cd675765fe124f77e05c8b7dfe4ae626c8fcb58aa837215d752f6b16e2585e5d2d7e1b2f293d7abe2ac29e95e04296d7f813fc5b9457cff475455bce8b7ec397278f084c586de0886584b4dfd873819144b4e5d0061b13ef4f9d5ffa1ee17c0aa1dafed9b3f29489efe96e1a0f94fb392696ece2f79ad6d1407d48839c15c0a14459455e2c8655d3e170ab7df93e960446c82e783e0169b1ab7dedeaa07233d46310abb17941c1cb1c9e77da86d7a9fe76f2fae892c396c312d04b9191e7d44df4ee4b07ce3b9f6446155005eaf55e9566e9c585a1a775a55fb1589c55e8ff1ba6658ec5b0f4e2793cd55023ab092887e578f8f3daf6468e5dcfb5c7d71314b08bf58015287836cc873d70164d8d198ee445b91064fde6505637bc51ee2586a44638e3bbc2ec70f7f8efb4ee64b0f346c5c7d3583a3b9e62678ee90d735f4d8daba7ff9de3668333293c2a1fc08a74851a0f45bde15c361942131ffdfcb6bef81e1d6f1e87759ba5e39b78cc03b3e9ee3d1ae2da4a397cbdbbe3c31efc35b3e327c2b12cbb72d0423119e72e0ffc13b8257233ab75284eff5b07f1fa9ee740ca45e9504ee9e10d758499e64af5a87fafb2446f0944e7c10f5e83233b976fc462ee9cc25eda45c2c602352f96f2d94037f5a8561d1983b24d5dfe45ff711dd078cfa90f9aa112a14f778e3929aad00916bcbdb642abc32c2bb2691853357b264076ba95bfe306afb35cb64d82a71c200e79624b2a45b136aa6e9c833afd2d8e406b98ebf51a6e90c09cdaea95c8dec35fbd4049701b0e8a89f4f34dde272560baf68466906fc152644d630bfca23787aebb2aaa0ab7b9f30c1dc96c3383633241fc716543d030c41675cd811e38e2dd87e4d3980745a8d310d55ea26b145201176c483a1c17c4e7a7705a79a351930dbbf7241e55847b7745979ce862acd3834b372dbe8c0955a0b4840fd7da7e2088957f2bc9666a0dd04d02d494052c71a3117ab12e230be971a0e8bcad32c082a8faf9cb8fb9e9a12713334ac8cbacc38a94914b0682a36f57a3be096c3f3e17122730ee213d9c1ad44ccd5578d99beea47c27587f2f847d9e38ca3a339f2aef799d3371a3387389c9b2839847df7a7b5a24fcc46a0955e5157cbfbea26e305bc2f52a212e9d9c8003f081f567308eb7fa69c53c060a650d87b76f4516f8d75fad4623ff883196a65fb034033ad31fc6e803943b4fc282ee768a498ddfb9c0ace21687b591da31b6811a5e222f7f33cf9723b0d88f5af3b6a0cbf08a4d171c0798d6df3fa06447a6375f366957fd02af10b953f6b201bc07ae9071c1acb8fd1168ad5a8cebafd84f7ef2c7940dd4813d18a6b2ee4a40dbf5a3c3d88b9097c9166fd02c6d8b785c78973d84abcb99687465c0bdbaf83b2cb9f3683d1a78d8b7c07ba006c4e68bbae26eb2abb0040b268ed16810913d0b2ea98058e6b3907e720b8e66c09661c417457ceccbed65cb0eff42583a05c07d7e464fdbf7b32f3ab8cab34fdd42e1838d1832736af5be238c10d4829e29bbcfa03ddf7b8ebb1f121097dea7277b8eb1dd81394a1077985c740d901400b9af7b484659ac667185d1ff3fd56175df659573b998e516ccc8dce75efd4daf63aaac38d2872df538c7e84df72f44640a48aa697e4095cf4e58643c8cb28f6b45d000359a1a74c23255fa348a4ddbe3fe0169bbaf13cc69edf5301c2f63652ebfc0bbe0ac55e4b058a246b76eb50d7a4af59ff9af1679128ae6a4e9da2dcc185679a33d442017880e5f2d3c76205ce4dc007cb693ff8af5258d15ac4b1bb2ddc550ffd16b96e2c2838a822baf245083da079718fee6932d7ab8cce0151cf917eec96dad98f655a96920265da7ea4c23b9bfba2ea5698326b07edbfe335f448ae3d584e2e4cbe07cc734ec3aae381570bf6757ea848aacd0f784baf0b50405ffa6ab032f6bc9f3745416c34bed9ad395a3f2230511f8ed44ae41005d4964c225efe8bb7a99364893c93b0938aa44176ede01373c4cd309136c7946a04860e4806a04bda7f135afeae6373fb3d9d2e68ee37766a6955a4e77fd1565c11c9de21723c0845832395d4a49a7b5ed0e45eb1ab09a027271c6a416dfc7d6064e8265e609a5e9469a7b17035fa202bc72a10cfbb8cab14974935670dffb51cc4d3f845396ddcc846534714ca1de7a3714e8663fb975293f505e5e86c0581bbf4455d73ede2ad39cccc2cf2ece0281d35ff54966a35715e644c67b01750288a", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffe)
socket(0x1d, 0x2, 0x7)
ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'wlan0\x00'})
prctl$auto_PR_SET_NO_NEW_PRIVS(0x26, 0x2, 0xffffffffffffffff, 0xe5, 0xa0c)
close_range$auto(0x2, 0x8, 0x0)
listmount$auto(0x0, 0x0, 0x1, 0x1)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
flock$auto(r1, 0x5)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0)
flock$auto(r2, 0x2)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0x2, 0x9)
mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x1)
close_range$auto(0x2, 0xa, 0x0)
r3 = socket(0x1a, 0x800, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'})
bpf$auto(0x1, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, r4, 0x4, 0x200001ff, r3, @relative_id=0x13, 0xe600}, 0x0)
bpf$auto(0x2, &(0x7f00000001c0)=@token_create={0x7f}, 0xc)
ioctl$auto(0x3, 0xc018aa3f, 0xf0b)
executing program 0:
unshare$auto(0x40000080)
semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x88, 0x0, 0x0, 0x80000000)
socket(0x10, 0x2, 0x7fffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0)
read$auto(0xc8, 0x0, 0x200)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
access$auto(0x0, 0x8)
semctl$auto_IPC_STAT(0x0, 0x101, 0x2, 0x200)
prctl$auto(0x39, 0xffffffffffffffff, 0x0, 0x0, 0x42)
fanotify_mark$auto(0xffffffffffffffff, 0x31, 0x421, 0xffffffffffffffff, 0x0)
executing program 2:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003200)=""/64, 0x40)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
socket(0x2a, 0x2, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = socket(0x3a, 0x3, 0x0)
mlockall$auto(0x7)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
mmap$auto(0xfffffffffffffffc, 0x61, 0x9, 0xfa3d, 0x400, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r7 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x17, 0xfffffffffffffffc, 0x0)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000211e789c0000000a00ffff0000000014002000ff01faffffff00000000000000000000060002000100"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
ptrace$auto(0x10, r2, 0x4, 0x7ff)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0)
sendmsg$auto_NL802154_CMD_ASSOCIATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8030000", @ANYRES16=r8, @ANYBLOB="20002bbd7000fedb0701000000002083", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x20040000}, 0x8014)
ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r2, 0xf72, 0x0)
r9 = socket(0x2a, 0x2, 0x1)
connect$auto(r9, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x55)
executing program 1:
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x2003f0, 0x15)
timerfd_create$auto(0x9, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x2, 0x9, 0x2, 0x6]}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0)
r2 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
r3 = io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, r0, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}})
ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x11, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = socket(0xa, 0x3, 0x3c)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0)
ioctl$auto(r7, 0x5609, r6)
madvise$auto(0x0, 0x20499d, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe7f, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0080fbdbdf350a0000000800fbffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRESOCT=r2, @ANYRES16=r4], 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0xc0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 27, 27, 27, 27, 27, 27]
detailed listing:
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffe)
socket(0x1d, 0x2, 0x7)
ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'wlan0\x00'})
prctl$auto_PR_SET_NO_NEW_PRIVS(0x26, 0x2, 0xffffffffffffffff, 0xe5, 0xa0c)
close_range$auto(0x2, 0x8, 0x0)
listmount$auto(0x0, 0x0, 0x1, 0x1)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
flock$auto(r1, 0x5)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0)
flock$auto(r2, 0x2)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0x2, 0x9)
mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x1)
close_range$auto(0x2, 0xa, 0x0)
r3 = socket(0x1a, 0x800, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'})
bpf$auto(0x1, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, r4, 0x4, 0x200001ff, r3, @relative_id=0x13, 0xe600}, 0x0)
bpf$auto(0x2, &(0x7f00000001c0)=@token_create={0x7f}, 0xc)
ioctl$auto(0x3, 0xc018aa3f, 0xf0b)
executing program 0:
unshare$auto(0x40000080)
semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x88, 0x0, 0x0, 0x80000000)
socket(0x10, 0x2, 0x7fffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0)
read$auto(0xc8, 0x0, 0x200)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
access$auto(0x0, 0x8)
semctl$auto_IPC_STAT(0x0, 0x101, 0x2, 0x200)
prctl$auto(0x39, 0xffffffffffffffff, 0x0, 0x0, 0x42)
fanotify_mark$auto(0xffffffffffffffff, 0x31, 0x421, 0xffffffffffffffff, 0x0)
executing program 2:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003200)=""/64, 0x40)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
socket(0x2a, 0x2, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = socket(0x3a, 0x3, 0x0)
mlockall$auto(0x7)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
mmap$auto(0xfffffffffffffffc, 0x61, 0x9, 0xfa3d, 0x400, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r7 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x17, 0xfffffffffffffffc, 0x0)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000211e789c0000000a00ffff0000000014002000ff01faffffff00000000000000000000060002000100"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
ptrace$auto(0x10, r2, 0x4, 0x7ff)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0)
sendmsg$auto_NL802154_CMD_ASSOCIATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8030000", @ANYRES16=r8, @ANYBLOB="20002bbd7000fedb0701000000002083", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x20040000}, 0x8014)
ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r2, 0xf72, 0x0)
r9 = socket(0x2a, 0x2, 0x1)
connect$auto(r9, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x55)
executing program 1:
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x2003f0, 0x15)
timerfd_create$auto(0x9, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x2, 0x9, 0x2, 0x6]}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0)
r2 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
r3 = io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, r0, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}})
ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x11, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = socket(0xa, 0x3, 0x3c)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0)
ioctl$auto(r7, 0x5609, r6)
madvise$auto(0x0, 0x20499d, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe7f, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0080fbdbdf350a0000000800fbffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRESOCT=r2, @ANYRES16=r4], 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0xc0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 27, 22, 27, 27, 27, 27, 27]
detailed listing:
executing program 1:
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0)
pread64$auto(r2, 0x0, 0x10001, 0x830)
write$auto(r1, 0x0, 0x100)
read$auto(0x3, 0x0, 0x80)
unshare$auto(0x40000080)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYBLOB="080001002e53520008000200299604044fd4a51b3fe6069c9828ee7b3a5e16ba6775e89c1262b0563d7c891b267fcf6ddb51c53725c0c3f6a943674a41ccec006a142932a4d7289ac6f2c824c09ff3119ea2cfc72b15d43e993d3c327652f1a5427b014be7d9c98d988e59c0c0918d4e09077ad2be00371f57ba208c7301a71c72390bc3c511734141cb81bcc13a2df82cd95bd7", @ANYRES32=0x9, @ANYBLOB="0800070004"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0xc0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
executing program 1:
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002400)='/sys/devices/virtual/mtd/mtd0/mtdblock0/ro\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
getdents$auto(r0, &(0x7f0000000100)={0x800, 0x6, 0x3, "694e35b9d41e181fcace6c00f28fdeb373a62873d9b2445d6f402374b30e6d89639b814a9306349576d6d59f6aa6b148bf30c1824e5867e9fbda6ba5356a05656ee3ab77904f800377786443351f953c2c3fc10af304b60e61b4f2ed74a3a55bcbf31611f6cea89dcd64277a4843d59dfc3b29c22050a0363c8d6d764d909a5620ee11fee823ee520398b761473fbe3adb79722e16dd4cc19af5ab19ec35df6439f000381eb1fb0176d6aa8de2d080e629f53833d92f7752d4d9755f42a330d234a94ae0e43636d168e6c6b277019f60d59732699fe3ec"}, 0x4c3)
close_range$auto(0x2, 0x8, 0xffffffff)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xc, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010)
sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="01007050a7f82fc634b10f00003460fac93497d76d"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2)
futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd)
r3 = socket(0x10, 0x2, 0x0)
madvise$auto(0x80000001, 0x101, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
write$auto(0x3, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0xfdef)
select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffbfffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0x2, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0)
setfsuid$auto(0x1)
unshare$auto(0x40000080)
madvise$auto(0x0, 0x20200, 0x15)
executing program 2:
mmap$auto(0x2, 0x8, 0x6, 0x2000000d38, 0x2, 0xfffffffffffffff7)
sysinfo$auto(0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0)
read$auto(r0, 0x0, 0x10000000a)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
mmap$auto(0xfffffffffffffff8, 0x59ab, 0x20000000002, 0x1000015, 0xffffffffffffffff, 0xfffffffffffffffd)
close_range$auto(0x2, 0x8, 0x0)
r2 = io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x8000000000000, 0x6, 0xdf, 0x19, 0x2, 0x8000)
r3 = socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0x7, 0x28000)
adjtimex$auto(0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000001300)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0xfffd}, 0x5, 0x20000000)
newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
capget$auto(0x0, 0xfffffffffffffffe)
write$auto(0xffffffffffffffff, 0x0, 0x73)
semctl$auto_GETNCNT(0xc, 0x1ac1, 0xe, 0x3)
sendmsg$auto_NFC_CMD_GET_DEVICE(r2, 0x0, 0x55)
semctl$auto(0x9, 0xc1b8, 0x4, 0x1)
mmap$auto(0x7ffffffd, 0x2, 0x1f60000000000000, 0x9b72, r0, 0x5)
sendmmsg$auto(r3, 0x0, 0x80000001, 0x4008)
socket(0x1e, 0x4, 0x0)
executing program 3:
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000180), 0xe2bf528124bb75dd, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mseal$auto(0x0, 0x7dda, 0x0)
unshare$auto(0x20000)
close_range$auto(r1, r0, 0x9)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r2, 0x0)
unshare$auto(0x20000)
pivot_root$auto(&(0x7f0000000040)='..\x00', 0x0)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c72b7cc06d46052f12bedb7048bea1dd70000", @ANYRES16=r3, @ANYBLOB="810b25bd7000ffdbdf250100000005000f009a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
sched_rr_get_interval$auto(0x0, 0x0)
fanotify_init$auto(0x6d5, 0x3)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9)
executing program 0:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'gretap0\x00', <r7=>0x0})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84}, 0x1fa, 0xd)
r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r8, 0x2, &(0x7f0000000380)="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")
ioctl$auto__ctl_fops_dm_ioctl(r8, 0xfffffff7effffd05, &(0x7f00000001c0))
sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
write$auto(0x3, 0x0, 0x100082)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003680)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf254b000000080009000500000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
pipe2$auto(0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0x4)
r5 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
read$auto(r0, 0x0, 0xb94)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000ec0)=""/4096, 0x1000)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r8], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
bisect: split chunks (needed=true): <8>, <7>
bisect: split chunk #0 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27]
detailed listing:
executing program 0:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'gretap0\x00', <r7=>0x0})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84}, 0x1fa, 0xd)
r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r8, 0x2, &(0x7f0000000380)="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")
ioctl$auto__ctl_fops_dm_ioctl(r8, 0xfffffff7effffd05, &(0x7f00000001c0))
sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
write$auto(0x3, 0x0, 0x100082)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003680)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf254b000000080009000500000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
pipe2$auto(0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0x4)
r5 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
read$auto(r0, 0x0, 0xb94)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000ec0)=""/4096, 0x1000)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r8], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffe)
socket(0x1d, 0x2, 0x7)
ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'wlan0\x00'})
prctl$auto_PR_SET_NO_NEW_PRIVS(0x26, 0x2, 0xffffffffffffffff, 0xe5, 0xa0c)
close_range$auto(0x2, 0x8, 0x0)
listmount$auto(0x0, 0x0, 0x1, 0x1)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
flock$auto(r1, 0x5)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0)
flock$auto(r2, 0x2)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0x2, 0x9)
mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x1)
close_range$auto(0x2, 0xa, 0x0)
r3 = socket(0x1a, 0x800, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'})
bpf$auto(0x1, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, r4, 0x4, 0x200001ff, r3, @relative_id=0x13, 0xe600}, 0x0)
bpf$auto(0x2, &(0x7f00000001c0)=@token_create={0x7f}, 0xc)
ioctl$auto(0x3, 0xc018aa3f, 0xf0b)
executing program 0:
unshare$auto(0x40000080)
semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x88, 0x0, 0x0, 0x80000000)
socket(0x10, 0x2, 0x7fffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0)
read$auto(0xc8, 0x0, 0x200)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
access$auto(0x0, 0x8)
semctl$auto_IPC_STAT(0x0, 0x101, 0x2, 0x200)
prctl$auto(0x39, 0xffffffffffffffff, 0x0, 0x0, 0x42)
fanotify_mark$auto(0xffffffffffffffff, 0x31, 0x421, 0xffffffffffffffff, 0x0)
executing program 2:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003200)=""/64, 0x40)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
socket(0x2a, 0x2, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = socket(0x3a, 0x3, 0x0)
mlockall$auto(0x7)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
mmap$auto(0xfffffffffffffffc, 0x61, 0x9, 0xfa3d, 0x400, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r7 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x17, 0xfffffffffffffffc, 0x0)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000211e789c0000000a00ffff0000000014002000ff01faffffff00000000000000000000060002000100"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
ptrace$auto(0x10, r2, 0x4, 0x7ff)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0)
sendmsg$auto_NL802154_CMD_ASSOCIATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8030000", @ANYRES16=r8, @ANYBLOB="20002bbd7000fedb0701000000002083", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x20040000}, 0x8014)
ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r2, 0xf72, 0x0)
r9 = socket(0x2a, 0x2, 0x1)
connect$auto(r9, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x55)
executing program 1:
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x2003f0, 0x15)
timerfd_create$auto(0x9, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x2, 0x9, 0x2, 0x6]}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0)
r2 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
r3 = io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, r0, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}})
ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x11, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = socket(0xa, 0x3, 0x3c)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0)
ioctl$auto(r7, 0x5609, r6)
madvise$auto(0x0, 0x20499d, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe7f, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0080fbdbdf350a0000000800fbffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRESOCT=r2, @ANYRES16=r4], 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0xc0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 7 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 27, 27, 27, 27, 27, 27]
detailed listing:
executing program 0:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'gretap0\x00', <r7=>0x0})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84}, 0x1fa, 0xd)
r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r8, 0x2, &(0x7f0000000380)="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")
ioctl$auto__ctl_fops_dm_ioctl(r8, 0xfffffff7effffd05, &(0x7f00000001c0))
sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
write$auto(0x3, 0x0, 0x100082)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003680)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf254b000000080009000500000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
pipe2$auto(0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0x4)
r5 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
read$auto(r0, 0x0, 0xb94)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000ec0)=""/4096, 0x1000)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r8], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 2:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003200)=""/64, 0x40)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
socket(0x2a, 0x2, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = socket(0x3a, 0x3, 0x0)
mlockall$auto(0x7)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
mmap$auto(0xfffffffffffffffc, 0x61, 0x9, 0xfa3d, 0x400, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r7 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x17, 0xfffffffffffffffc, 0x0)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000211e789c0000000a00ffff0000000014002000ff01faffffff00000000000000000000060002000100"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
ptrace$auto(0x10, r2, 0x4, 0x7ff)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0)
sendmsg$auto_NL802154_CMD_ASSOCIATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8030000", @ANYRES16=r8, @ANYBLOB="20002bbd7000fedb0701000000002083", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x20040000}, 0x8014)
ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r2, 0xf72, 0x0)
r9 = socket(0x2a, 0x2, 0x1)
connect$auto(r9, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x55)
executing program 1:
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x2003f0, 0x15)
timerfd_create$auto(0x9, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x2, 0x9, 0x2, 0x6]}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0)
r2 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
r3 = io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, r0, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}})
ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x11, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = socket(0xa, 0x3, 0x3c)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0)
ioctl$auto(r7, 0x5609, r6)
madvise$auto(0x0, 0x20499d, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe7f, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0080fbdbdf350a0000000800fbffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRESOCT=r2, @ANYRES16=r4], 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0xc0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 27, 27, 27, 27, 27, 27, 27]
detailed listing:
executing program 0:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'gretap0\x00', <r7=>0x0})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84}, 0x1fa, 0xd)
r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r8, 0x2, &(0x7f0000000380)="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")
ioctl$auto__ctl_fops_dm_ioctl(r8, 0xfffffff7effffd05, &(0x7f00000001c0))
sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
write$auto(0x3, 0x0, 0x100082)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003680)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf254b000000080009000500000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
pipe2$auto(0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0x4)
r5 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
read$auto(r0, 0x0, 0xb94)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000ec0)=""/4096, 0x1000)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r8], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="14e45eadecb6637b6e9276e6aa560b3398a867480f9e8a8fba70bec53d21d622b8d0df69b467e4b149114a6ac9b84da71c36a9e49e00cb6172539ae3ee7bc9c59ee6ca8e096a76c0f58ba7ee731e9717c00c6a773474041832ee988cd511375a11f8e7ddbd8ae04967a4c20a82a040de95a37e419fbe46222511bea6bc969aace721985771a7f9a1bf3d66fd85a6153e195b23a5b01b42bd31f956dc64197bb40b32f5257cb2b8cef81bff9aa9e4a11e8403e184e79fc9e7bec6f3de6096bc10b1552c3a1066e2203d7811c5bfd578a4c532492eb3bb1faa1652ffabadbf51adc7d81890a2e094f5575b711469e7b24ee765da0f300ebd33ab861b9c3a622313f316228417599c5d5d251475219f6d5dc07b90f6d68a548cffb966828255dfda40f684526526fa8be5c8e4e9faa61aa9f6645d8352f15d3fcb9c81b7dc393c08410471f5e3d4f5b6841bf53390a5045b631d63005b1f4e3f4b9832b089788f859b06502285843dfb285c06af53fb740128fe604f1d3882559c4230f0ea06cf72eef4ab741fb0832f481b4284e8b918dadf392634c678c84a649215170a0aae1c6f005989f31431119dc64a8b908d624da105b5089a8a9a160545fe0501b2f46bd169ac984f49777b03242f3985c739270de191849e772ea9fd9634b8edc569ecb8ca25b4b26071e223caebfccb0f36744431bfc021f289ebcd459e56f9205290e7f5cc03574824fb533ec7250fe30270f5519cde841a612ece1dd2c4b017d75a9f7ea92794f8dfacd4aa9804d3809e4fe695df97ff4424c01ed38ee1c702ccd14175070558e20bc9f5f704d20cf1b6af7f01fd8cfce2958ed0f02142e153661840c2ca50b7bf9abcd2c27edc0795ac282d034e5fc10f13f76be72143d12a1d2dd1086815b701e9cb67e6adf9a937aeeba997d84a74eb11f682e3fe3100b27eb6c1aac8309e3c39bed50c808835a1216f28d9788efef72d64ff3653209cc8e7734588e373927bd302bac74f81a54190890f4fab4b57956b9c8cc1caebcf1f742049a539032c9819eee66493ba5f03048348dc6fd5d0f51ea3dc7aa7501546c342a73a563b73dac18107cddf483b9a3fd793c879b3a22030e3c1461d27bcccf4b4c6218bac44663b9fa7dfe2919a28bc9c8de8ad5ce3b4a2f5ffd35546c4242e6528fe25817894397b1c8fe7f7c97a51b4371c8437141615b74f10933f352f05a9c5a28615e69840f3b4e46542e14fb02694d0b8a1da0b4b997538450131e670ec1fb255b486bc9af9c050d11ceaebd314922f8bba061441b468e89e8933e640efef1b8dbb1e6aa2961178168ed7050de2d425ab234fed7c855607bd0a01c526bd7578fcfd123bf356c005e6a61c11ca1072a6d800ab15d06f44eab8398875b47f7ebac3cafcdac4b4b7cf46b3a5e8f9545a6fd9ff7bf5e27e80fb7b9ec40d1f7383a26562e90207bc6a260537de789465475c42f1c50df0c6c606d3e1fb2f0611403f61c8fd199c3407f17fa2eff5f3019557a62a2473103836dc98d05703157467b29d60bd5596c6c0ebd02155fa997297e7bf4774017f07c0bbe6e1181b0a38a9031fdb80381169f51736a32237a0fafa62800b3048c70e1086a9165ab9aa50a53df84d99b9b820440e3c1982cf365681fe4955f8aa7db9cd4e32981fb6bd15899934e39d12dd36ac6cbaaa7bea95c0f1eda8899eb4f8728632baf8e13d1d4da49f7563e2e9a94e48d5e3c59faded54c0c4d8bd0d26335f3de149b7d13a3f9c19dabb900295e13756f2e4617137605d16560438b50dd04797b5004765239ebbfe229f783cb5b3b78b0184b13fe67d484dfc30645a176606f2bd47a200c5ebdaee2bd0d56c9910ab8e168778228bb91560ec8bb85e69b528f6d2dc4fc164163ca7ce5bd2c23e61f69dc996f7d45b865e50d6876e56dcf87240673be568193d40adee223221368387d4a003217b58f39e0123b6c2fcb11cd3b0133ff26f16ec661b860fc4726be86feef318433f16563839529adb013cafb8f49955013eb1355e55a67fc2e932259948b546fb13706af4310dd149fab3c92d4640abefda80935a6278038e22dea7ad56ec759c479263b11e5d40506e2e831f868dd715ac10990c0616785f7aa81ff4af0efd33a3a44ed1cba495c1a5434a4920f47b1847b1275078a41223a357a4e1bfad43d84c730573e0a945ee65b83a09bf490b857666a3f3c04afa43a04d6d270cd86463b4cad65e80c72c7bea3c085596465010edd70b37cf24b68793231d6df73c868137bbb870ac80ced7c7a5bce2f219675b05f3cf0a00b63971715d986299469f195efc7f859defdfe84012fc4a8da781fe51816934de62ebb4db98e524c430b52fe7621882bdc1b0333782a41e4b86c46f47558bbdead6b3573097036fa3c4baabfbd723cc4514eef4c3693ae6552f965e161ea914f751e952810c1cbf447ce3ce277a7a8ebde28333d7eaecb8330003cf55f2e209ef16abda0a274ec72ec3a659e4e2671b0b506c7109f761ec42e1a71cea60b9d76b008832d3837af6b6da9ff702dc71183e202db0d79bca2b1479a5251569c1aa12560c27d80f0782dfa30eab3264ba64b899080869d4adab085590359df366f0393c572e11cb745f477ba7c1474e34218ed45d6c95636ab522f883eca5d676b7924bf90a8c7a5c47e376caa741823c1c07301b9488d8638b1fe0e89fdf4ad76db06ec44b8150be8a601520a48a0a96c920691b4a1d91c1dcf6a17f7793fd9fbf5119947371997841e7e17d98cbcdb3db9472450a33280a43d7deaa23c53918d1ba68460f2a47f00f86595011b60abcaa37ae13e5039edfccd2846f53e414e09614cca6f59ebf59daab4b4342e6ab2a1b5c89f2ac16badf426083c4e40a1a40bcc28b1255a42f91aaa189ddba8d5554eae43d4982e59db0c13761ca79779637d39141af508e7f4821188915edb8791bdf0853a77b565b2e8e10b6b8babbcc71c07b30f882b088c85cb9068933d9ecc43194cefefc725b159453c394ef736e9eadc5a0f700c43945296266d1cf5faa495761d83a5ec3c7841c90effc400de575fd670273bce2f6ff6f6484439c69b6a85734dceaaf878aa554d1b0250e7b954266eed6f0ae6d3afeb9187c23b7324c6e4b401ff05b182e7c6b5a4f3c828c9ad8b392cee3b767cc8aa38a76f8081f44beb6c09950862227917eb70758a1921f3e9a0d2362ef7ee9c2a4fc88b356b6fd979e58c500de7742dda5616fbb8a97716815f20fe02244192982071b2fc0bc2ee786d0b07fd6bede15e6d937e7f4d936694b3bcd8fcb8e025cf53e1a2ff2f3f224f5b61475863b7b377c211b586bdf9b830af6b32db1a2a4225c51b7109d9d22e77c11e7a2027911750b3e6123739392c330311c01d27fed52cb6ff3ba97cce587dccdf351cf9b8e6459a3088be73921555cae6d00126dca4a63bf9f9a2ea4c84a2d966f0add908fa108c5f4b9e190d0a6e1948b0bfb7afbe9ecd079726d5dafb7d03a4b438512d7ef21b29c69c88da9030097392a7cd675765fe124f77e05c8b7dfe4ae626c8fcb58aa837215d752f6b16e2585e5d2d7e1b2f293d7abe2ac29e95e04296d7f813fc5b9457cff475455bce8b7ec397278f084c586de0886584b4dfd873819144b4e5d0061b13ef4f9d5ffa1ee17c0aa1dafed9b3f29489efe96e1a0f94fb392696ece2f79ad6d1407d48839c15c0a14459455e2c8655d3e170ab7df93e960446c82e783e0169b1ab7dedeaa07233d46310abb17941c1cb1c9e77da86d7a9fe76f2fae892c396c312d04b9191e7d44df4ee4b07ce3b9f6446155005eaf55e9566e9c585a1a775a55fb1589c55e8ff1ba6658ec5b0f4e2793cd55023ab092887e578f8f3daf6468e5dcfb5c7d71314b08bf58015287836cc873d70164d8d198ee445b91064fde6505637bc51ee2586a44638e3bbc2ec70f7f8efb4ee64b0f346c5c7d3583a3b9e62678ee90d735f4d8daba7ff9de3668333293c2a1fc08a74851a0f45bde15c361942131ffdfcb6bef81e1d6f1e87759ba5e39b78cc03b3e9ee3d1ae2da4a397cbdbbe3c31efc35b3e327c2b12cbb72d0423119e72e0ffc13b8257233ab75284eff5b07f1fa9ee740ca45e9504ee9e10d758499e64af5a87fafb2446f0944e7c10f5e83233b976fc462ee9cc25eda45c2c602352f96f2d94037f5a8561d1983b24d5dfe45ff711dd078cfa90f9aa112a14f778e3929aad00916bcbdb642abc32c2bb2691853357b264076ba95bfe306afb35cb64d82a71c200e79624b2a45b136aa6e9c833afd2d8e406b98ebf51a6e90c09cdaea95c8dec35fbd4049701b0e8a89f4f34dde272560baf68466906fc152644d630bfca23787aebb2aaa0ab7b9f30c1dc96c3383633241fc716543d030c41675cd811e38e2dd87e4d3980745a8d310d55ea26b145201176c483a1c17c4e7a7705a79a351930dbbf7241e55847b7745979ce862acd3834b372dbe8c0955a0b4840fd7da7e2088957f2bc9666a0dd04d02d494052c71a3117ab12e230be971a0e8bcad32c082a8faf9cb8fb9e9a12713334ac8cbacc38a94914b0682a36f57a3be096c3f3e17122730ee213d9c1ad44ccd5578d99beea47c27587f2f847d9e38ca3a339f2aef799d3371a3387389c9b2839847df7a7b5a24fcc46a0955e5157cbfbea26e305bc2f52a212e9d9c8003f081f567308eb7fa69c53c060a650d87b76f4516f8d75fad4623ff883196a65fb034033ad31fc6e803943b4fc282ee768a498ddfb9c0ace21687b591da31b6811a5e222f7f33cf9723b0d88f5af3b6a0cbf08a4d171c0798d6df3fa06447a6375f366957fd02af10b953f6b201bc07ae9071c1acb8fd1168ad5a8cebafd84f7ef2c7940dd4813d18a6b2ee4a40dbf5a3c3d88b9097c9166fd02c6d8b785c78973d84abcb99687465c0bdbaf83b2cb9f3683d1a78d8b7c07ba006c4e68bbae26eb2abb0040b268ed16810913d0b2ea98058e6b3907e720b8e66c09661c417457ceccbed65cb0eff42583a05c07d7e464fdbf7b32f3ab8cab34fdd42e1838d1832736af5be238c10d4829e29bbcfa03ddf7b8ebb1f121097dea7277b8eb1dd81394a1077985c740d901400b9af7b484659ac667185d1ff3fd56175df659573b998e516ccc8dce75efd4daf63aaac38d2872df538c7e84df72f44640a48aa697e4095cf4e58643c8cb28f6b45d000359a1a74c23255fa348a4ddbe3fe0169bbaf13cc69edf5301c2f63652ebfc0bbe0ac55e4b058a246b76eb50d7a4af59ff9af1679128ae6a4e9da2dcc185679a33d442017880e5f2d3c76205ce4dc007cb693ff8af5258d15ac4b1bb2ddc550ffd16b96e2c2838a822baf245083da079718fee6932d7ab8cce0151cf917eec96dad98f655a96920265da7ea4c23b9bfba2ea5698326b07edbfe335f448ae3d584e2e4cbe07cc734ec3aae381570bf6757ea848aacd0f784baf0b50405ffa6ab032f6bc9f3745416c34bed9ad395a3f2230511f8ed44ae41005d4964c225efe8bb7a99364893c93b0938aa44176ede01373c4cd309136c7946a04860e4806a04bda7f135afeae6373fb3d9d2e68ee37766a6955a4e77fd1565c11c9de21723c0845832395d4a49a7b5ed0e45eb1ab09a027271c6a416dfc7d6064e8265e609a5e9469a7b17035fa202bc72a10cfbb8cab14974935670dffb51cc4d3f845396ddcc846534714ca1de7a3714e8663fb975293f505e5e86c0581bbf4455d73ede2ad39cccc2cf2ece0281d35ff54966a35715e644c67b01750288a", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffe)
socket(0x1d, 0x2, 0x7)
ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'wlan0\x00'})
prctl$auto_PR_SET_NO_NEW_PRIVS(0x26, 0x2, 0xffffffffffffffff, 0xe5, 0xa0c)
close_range$auto(0x2, 0x8, 0x0)
listmount$auto(0x0, 0x0, 0x1, 0x1)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
flock$auto(r1, 0x5)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0)
flock$auto(r2, 0x2)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0x2, 0x9)
mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x1)
close_range$auto(0x2, 0xa, 0x0)
r3 = socket(0x1a, 0x800, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'})
bpf$auto(0x1, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, r4, 0x4, 0x200001ff, r3, @relative_id=0x13, 0xe600}, 0x0)
bpf$auto(0x2, &(0x7f00000001c0)=@token_create={0x7f}, 0xc)
ioctl$auto(0x3, 0xc018aa3f, 0xf0b)
executing program 0:
unshare$auto(0x40000080)
semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x88, 0x0, 0x0, 0x80000000)
socket(0x10, 0x2, 0x7fffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0)
read$auto(0xc8, 0x0, 0x200)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
access$auto(0x0, 0x8)
semctl$auto_IPC_STAT(0x0, 0x101, 0x2, 0x200)
prctl$auto(0x39, 0xffffffffffffffff, 0x0, 0x0, 0x42)
fanotify_mark$auto(0xffffffffffffffff, 0x31, 0x421, 0xffffffffffffffff, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <4>, <4>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 27, 27, 27, 27, 27]
detailed listing:
executing program 3:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffe)
socket(0x1d, 0x2, 0x7)
ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'wlan0\x00'})
prctl$auto_PR_SET_NO_NEW_PRIVS(0x26, 0x2, 0xffffffffffffffff, 0xe5, 0xa0c)
close_range$auto(0x2, 0x8, 0x0)
listmount$auto(0x0, 0x0, 0x1, 0x1)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
flock$auto(r1, 0x5)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0)
flock$auto(r2, 0x2)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0x2, 0x9)
mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x1)
close_range$auto(0x2, 0xa, 0x0)
r3 = socket(0x1a, 0x800, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'})
bpf$auto(0x1, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, r4, 0x4, 0x200001ff, r3, @relative_id=0x13, 0xe600}, 0x0)
bpf$auto(0x2, &(0x7f00000001c0)=@token_create={0x7f}, 0xc)
ioctl$auto(0x3, 0xc018aa3f, 0xf0b)
executing program 0:
unshare$auto(0x40000080)
semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x88, 0x0, 0x0, 0x80000000)
socket(0x10, 0x2, 0x7fffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0)
read$auto(0xc8, 0x0, 0x200)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
access$auto(0x0, 0x8)
semctl$auto_IPC_STAT(0x0, 0x101, 0x2, 0x200)
prctl$auto(0x39, 0xffffffffffffffff, 0x0, 0x0, 0x42)
fanotify_mark$auto(0xffffffffffffffff, 0x31, 0x421, 0xffffffffffffffff, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 27, 27, 27]
detailed listing:
executing program 3:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffe)
socket(0x1d, 0x2, 0x7)
ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'wlan0\x00'})
prctl$auto_PR_SET_NO_NEW_PRIVS(0x26, 0x2, 0xffffffffffffffff, 0xe5, 0xa0c)
close_range$auto(0x2, 0x8, 0x0)
listmount$auto(0x0, 0x0, 0x1, 0x1)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
flock$auto(r1, 0x5)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0)
flock$auto(r2, 0x2)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0x2, 0x9)
mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x1)
close_range$auto(0x2, 0xa, 0x0)
r3 = socket(0x1a, 0x800, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'})
bpf$auto(0x1, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, r4, 0x4, 0x200001ff, r3, @relative_id=0x13, 0xe600}, 0x0)
bpf$auto(0x2, &(0x7f00000001c0)=@token_create={0x7f}, 0xc)
ioctl$auto(0x3, 0xc018aa3f, 0xf0b)
executing program 0:
unshare$auto(0x40000080)
semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x88, 0x0, 0x0, 0x80000000)
socket(0x10, 0x2, 0x7fffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0)
read$auto(0xc8, 0x0, 0x200)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
access$auto(0x0, 0x8)
semctl$auto_IPC_STAT(0x0, 0x101, 0x2, 0x200)
prctl$auto(0x39, 0xffffffffffffffff, 0x0, 0x0, 0x42)
fanotify_mark$auto(0xffffffffffffffff, 0x31, 0x421, 0xffffffffffffffff, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 27, 27, 27]
detailed listing:
executing program 3:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>, <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 27, 27]
detailed listing:
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 27, 27]
detailed listing:
executing program 3:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
bisect: split chunk #1 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 27, 27]
detailed listing:
executing program 3:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 27, 27, 27]
detailed listing:
executing program 3:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
bisect: split chunks (needed=true): <1>, <1>, <1>, <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #1 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #2 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #3 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 5 programs left: 

executing program 3:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)


bisect: trying to concatenate
bisect: concatenate 5 entries
minimizing program #0 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 27, 27, 27, 27]
detailed listing:
executing program 0:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
socket(0x10, 0x2, 0x0)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="14e45eadecb6637b6e9276e6aa560b3398a867480f9e8a8fba70bec53d21d622b8d0df69b467e4b149114a6ac9b84da71c36a9e49e00cb6172539ae3ee7bc9c59ee6ca8e096a76c0f58ba7ee731e9717c00c6a773474041832ee988cd511375a11f8e7ddbd8ae04967a4c20a82a040de95a37e419fbe46222511bea6bc969aace721985771a7f9a1bf3d66fd85a6153e195b23a5b01b42bd31f956dc64197bb40b32f5257cb2b8cef81bff9aa9e4a11e8403e184e79fc9e7bec6f3de6096bc10b1552c3a1066e2203d7811c5bfd578a4c532492eb3bb1faa1652ffabadbf51adc7d81890a2e094f5575b711469e7b24ee765da0f300ebd33ab861b9c3a622313f316228417599c5d5d251475219f6d5dc07b90f6d68a548cffb966828255dfda40f684526526fa8be5c8e4e9faa61aa9f6645d8352f15d3fcb9c81b7dc393c08410471f5e3d4f5b6841bf53390a5045b631d63005b1f4e3f4b9832b089788f859b06502285843dfb285c06af53fb740128fe604f1d3882559c4230f0ea06cf72eef4ab741fb0832f481b4284e8b918dadf392634c678c84a649215170a0aae1c6f005989f31431119dc64a8b908d624da105b5089a8a9a160545fe0501b2f46bd169ac984f49777b03242f3985c739270de191849e772ea9fd9634b8edc569ecb8ca25b4b26071e223caebfccb0f36744431bfc021f289ebcd459e56f9205290e7f5cc03574824fb533ec7250fe30270f5519cde841a612ece1dd2c4b017d75a9f7ea92794f8dfacd4aa9804d3809e4fe695df97ff4424c01ed38ee1c702ccd14175070558e20bc9f5f704d20cf1b6af7f01fd8cfce2958ed0f02142e153661840c2ca50b7bf9abcd2c27edc0795ac282d034e5fc10f13f76be72143d12a1d2dd1086815b701e9cb67e6adf9a937aeeba997d84a74eb11f682e3fe3100b27eb6c1aac8309e3c39bed50c808835a1216f28d9788efef72d64ff3653209cc8e7734588e373927bd302bac74f81a54190890f4fab4b57956b9c8cc1caebcf1f742049a539032c9819eee66493ba5f03048348dc6fd5d0f51ea3dc7aa7501546c342a73a563b73dac18107cddf483b9a3fd793c879b3a22030e3c1461d27bcccf4b4c6218bac44663b9fa7dfe2919a28bc9c8de8ad5ce3b4a2f5ffd35546c4242e6528fe25817894397b1c8fe7f7c97a51b4371c8437141615b74f10933f352f05a9c5a28615e69840f3b4e46542e14fb02694d0b8a1da0b4b997538450131e670ec1fb255b486bc9af9c050d11ceaebd314922f8bba061441b468e89e8933e640efef1b8dbb1e6aa2961178168ed7050de2d425ab234fed7c855607bd0a01c526bd7578fcfd123bf356c005e6a61c11ca1072a6d800ab15d06f44eab8398875b47f7ebac3cafcdac4b4b7cf46b3a5e8f9545a6fd9ff7bf5e27e80fb7b9ec40d1f7383a26562e90207bc6a260537de789465475c42f1c50df0c6c606d3e1fb2f0611403f61c8fd199c3407f17fa2eff5f3019557a62a2473103836dc98d05703157467b29d60bd5596c6c0ebd02155fa997297e7bf4774017f07c0bbe6e1181b0a38a9031fdb80381169f51736a32237a0fafa62800b3048c70e1086a9165ab9aa50a53df84d99b9b820440e3c1982cf365681fe4955f8aa7db9cd4e32981fb6bd15899934e39d12dd36ac6cbaaa7bea95c0f1eda8899eb4f8728632baf8e13d1d4da49f7563e2e9a94e48d5e3c59faded54c0c4d8bd0d26335f3de149b7d13a3f9c19dabb900295e13756f2e4617137605d16560438b50dd04797b5004765239ebbfe229f783cb5b3b78b0184b13fe67d484dfc30645a176606f2bd47a200c5ebdaee2bd0d56c9910ab8e168778228bb91560ec8bb85e69b528f6d2dc4fc164163ca7ce5bd2c23e61f69dc996f7d45b865e50d6876e56dcf87240673be568193d40adee223221368387d4a003217b58f39e0123b6c2fcb11cd3b0133ff26f16ec661b860fc4726be86feef318433f16563839529adb013cafb8f49955013eb1355e55a67fc2e932259948b546fb13706af4310dd149fab3c92d4640abefda80935a6278038e22dea7ad56ec759c479263b11e5d40506e2e831f868dd715ac10990c0616785f7aa81ff4af0efd33a3a44ed1cba495c1a5434a4920f47b1847b1275078a41223a357a4e1bfad43d84c730573e0a945ee65b83a09bf490b857666a3f3c04afa43a04d6d270cd86463b4cad65e80c72c7bea3c085596465010edd70b37cf24b68793231d6df73c868137bbb870ac80ced7c7a5bce2f219675b05f3cf0a00b63971715d986299469f195efc7f859defdfe84012fc4a8da781fe51816934de62ebb4db98e524c430b52fe7621882bdc1b0333782a41e4b86c46f47558bbdead6b3573097036fa3c4baabfbd723cc4514eef4c3693ae6552f965e161ea914f751e952810c1cbf447ce3ce277a7a8ebde28333d7eaecb8330003cf55f2e209ef16abda0a274ec72ec3a659e4e2671b0b506c7109f761ec42e1a71cea60b9d76b008832d3837af6b6da9ff702dc71183e202db0d79bca2b1479a5251569c1aa12560c27d80f0782dfa30eab3264ba64b899080869d4adab085590359df366f0393c572e11cb745f477ba7c1474e34218ed45d6c95636ab522f883eca5d676b7924bf90a8c7a5c47e376caa741823c1c07301b9488d8638b1fe0e89fdf4ad76db06ec44b8150be8a601520a48a0a96c920691b4a1d91c1dcf6a17f7793fd9fbf5119947371997841e7e17d98cbcdb3db9472450a33280a43d7deaa23c53918d1ba68460f2a47f00f86595011b60abcaa37ae13e5039edfccd2846f53e414e09614cca6f59ebf59daab4b4342e6ab2a1b5c89f2ac16badf426083c4e40a1a40bcc28b1255a42f91aaa189ddba8d5554eae43d4982e59db0c13761ca79779637d39141af508e7f4821188915edb8791bdf0853a77b565b2e8e10b6b8babbcc71c07b30f882b088c85cb9068933d9ecc43194cefefc725b159453c394ef736e9eadc5a0f700c43945296266d1cf5faa495761d83a5ec3c7841c90effc400de575fd670273bce2f6ff6f6484439c69b6a85734dceaaf878aa554d1b0250e7b954266eed6f0ae6d3afeb9187c23b7324c6e4b401ff05b182e7c6b5a4f3c828c9ad8b392cee3b767cc8aa38a76f8081f44beb6c09950862227917eb70758a1921f3e9a0d2362ef7ee9c2a4fc88b356b6fd979e58c500de7742dda5616fbb8a97716815f20fe02244192982071b2fc0bc2ee786d0b07fd6bede15e6d937e7f4d936694b3bcd8fcb8e025cf53e1a2ff2f3f224f5b61475863b7b377c211b586bdf9b830af6b32db1a2a4225c51b7109d9d22e77c11e7a2027911750b3e6123739392c330311c01d27fed52cb6ff3ba97cce587dccdf351cf9b8e6459a3088be73921555cae6d00126dca4a63bf9f9a2ea4c84a2d966f0add908fa108c5f4b9e190d0a6e1948b0bfb7afbe9ecd079726d5dafb7d03a4b438512d7ef21b29c69c88da9030097392a7cd675765fe124f77e05c8b7dfe4ae626c8fcb58aa837215d752f6b16e2585e5d2d7e1b2f293d7abe2ac29e95e04296d7f813fc5b9457cff475455bce8b7ec397278f084c586de0886584b4dfd873819144b4e5d0061b13ef4f9d5ffa1ee17c0aa1dafed9b3f29489efe96e1a0f94fb392696ece2f79ad6d1407d48839c15c0a14459455e2c8655d3e170ab7df93e960446c82e783e0169b1ab7dedeaa07233d46310abb17941c1cb1c9e77da86d7a9fe76f2fae892c396c312d04b9191e7d44df4ee4b07ce3b9f6446155005eaf55e9566e9c585a1a775a55fb1589c55e8ff1ba6658ec5b0f4e2793cd55023ab092887e578f8f3daf6468e5dcfb5c7d71314b08bf58015287836cc873d70164d8d198ee445b91064fde6505637bc51ee2586a44638e3bbc2ec70f7f8efb4ee64b0f346c5c7d3583a3b9e62678ee90d735f4d8daba7ff9de3668333293c2a1fc08a74851a0f45bde15c361942131ffdfcb6bef81e1d6f1e87759ba5e39b78cc03b3e9ee3d1ae2da4a397cbdbbe3c31efc35b3e327c2b12cbb72d0423119e72e0ffc13b8257233ab75284eff5b07f1fa9ee740ca45e9504ee9e10d758499e64af5a87fafb2446f0944e7c10f5e83233b976fc462ee9cc25eda45c2c602352f96f2d94037f5a8561d1983b24d5dfe45ff711dd078cfa90f9aa112a14f778e3929aad00916bcbdb642abc32c2bb2691853357b264076ba95bfe306afb35cb64d82a71c200e79624b2a45b136aa6e9c833afd2d8e406b98ebf51a6e90c09cdaea95c8dec35fbd4049701b0e8a89f4f34dde272560baf68466906fc152644d630bfca23787aebb2aaa0ab7b9f30c1dc96c3383633241fc716543d030c41675cd811e38e2dd87e4d3980745a8d310d55ea26b145201176c483a1c17c4e7a7705a79a351930dbbf7241e55847b7745979ce862acd3834b372dbe8c0955a0b4840fd7da7e2088957f2bc9666a0dd04d02d494052c71a3117ab12e230be971a0e8bcad32c082a8faf9cb8fb9e9a12713334ac8cbacc38a94914b0682a36f57a3be096c3f3e17122730ee213d9c1ad44ccd5578d99beea47c27587f2f847d9e38ca3a339f2aef799d3371a3387389c9b2839847df7a7b5a24fcc46a0955e5157cbfbea26e305bc2f52a212e9d9c8003f081f567308eb7fa69c53c060a650d87b76f4516f8d75fad4623ff883196a65fb034033ad31fc6e803943b4fc282ee768a498ddfb9c0ace21687b591da31b6811a5e222f7f33cf9723b0d88f5af3b6a0cbf08a4d171c0798d6df3fa06447a6375f366957fd02af10b953f6b201bc07ae9071c1acb8fd1168ad5a8cebafd84f7ef2c7940dd4813d18a6b2ee4a40dbf5a3c3d88b9097c9166fd02c6d8b785c78973d84abcb99687465c0bdbaf83b2cb9f3683d1a78d8b7c07ba006c4e68bbae26eb2abb0040b268ed16810913d0b2ea98058e6b3907e720b8e66c09661c417457ceccbed65cb0eff42583a05c07d7e464fdbf7b32f3ab8cab34fdd42e1838d1832736af5be238c10d4829e29bbcfa03ddf7b8ebb1f121097dea7277b8eb1dd81394a1077985c740d901400b9af7b484659ac667185d1ff3fd56175df659573b998e516ccc8dce75efd4daf63aaac38d2872df538c7e84df72f44640a48aa697e4095cf4e58643c8cb28f6b45d000359a1a74c23255fa348a4ddbe3fe0169bbaf13cc69edf5301c2f63652ebfc0bbe0ac55e4b058a246b76eb50d7a4af59ff9af1679128ae6a4e9da2dcc185679a33d442017880e5f2d3c76205ce4dc007cb693ff8af5258d15ac4b1bb2ddc550ffd16b96e2c2838a822baf245083da079718fee6932d7ab8cce0151cf917eec96dad98f655a96920265da7ea4c23b9bfba2ea5698326b07edbfe335f448ae3d584e2e4cbe07cc734ec3aae381570bf6757ea848aacd0f784baf0b50405ffa6ab032f6bc9f3745416c34bed9ad395a3f2230511f8ed44ae41005d4964c225efe8bb7a99364893c93b0938aa44176ede01373c4cd309136c7946a04860e4806a04bda7f135afeae6373fb3d9d2e68ee37766a6955a4e77fd1565c11c9de21723c0845832395d4a49a7b5ed0e45eb1ab09a027271c6a416dfc7d6064e8265e609a5e9469a7b17035fa202bc72a10cfbb8cab14974935670dffb51cc4d3f845396ddcc846534714ca1de7a3714e8663fb975293f505e5e86c0581bbf4455d73ede2ad39cccc2cf2ece0281d35ff54966a35715e644c67b01750288a", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 27, 27, 27, 27]
detailed listing:
executing program 0:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x40, 0x7, 0x0, 0xc70010, r1, 0xffff)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 27, 27, 27, 27]
detailed listing:
executing program 0:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gretap0\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r3, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
executing program 3:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 27, 27, 27, 27]
detailed listing:
executing program 0:
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x3fc, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x80)
sched_getscheduler$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4120, 0x1018)
r1 = socket(0x2, 0x80002, 0x0)
modify_ldt$auto(0x1, &(0x7f0000000380)="2eb72460174f198d927c1d6950552960602e58ce01e5f402d93a9064574120c200052676a8fc9e0add177f0ef9a91b775f72eb33f1d1163bc33175dca7d1c105f706cb89f04bbbb8cf56699b1ed11546839b042d60e80ea8f4493d0c55aa0dee3517b3c3a381c7c1d54369c460a29fe09c1ab9a2d2073c6cfd0d122ae9", 0xff)
setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0)
getcwd$auto(&(0x7f0000000040)='(\x00', 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3)
ioperm$auto(0x7, 0x6, 0x2)
mknod$auto(0x0, 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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

<<cut 869783 bytes out>>

c9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9822}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
minimized 27 calls -> 3 calls
minimizing program #2 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 26, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 25, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 24, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x6)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 23, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 22, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 21, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
r4 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x278, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x16a}, @OVS_VPORT_ATTR_UPCALL_PID={0x74, 0x5, "4a94e4f2ff400e9b1fac946e32458f7c433437353f3f382965432e882a553565b386b13984b5ec62d8aa9412572e340b36d4fe8a3bc880160d834b569642239595ef66741b430c58a16c6a42caa15243e30e58c488f0d32f673e8d0c736602c3abfcd3e7b94118ecfe22cc5aff48c495"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, '\a%^\'.@]\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2800000}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x81, 0x5, "fd864a218cb83c6b7f3d94a612f8c0955cbbc196d190cc18702c55781bdcb51d555c4731b48f3e331ef2019dd9949590d40f5256c84af7d47ba7bf0920d52e87594182f6b889ca40845d997853bc0a1bfe417f966617d3b093aeb0f412071a0327185e639f79b2c81b9be16fb8f422061c258370a2f90e7c510ea9a49d"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12a, 0xa, 0x0, 0x1, [@generic="f79c33b086095179c66f4337dba5c074d862c534d61092b1b3a185b958ebcf20ea6b9bb8ad639c709127daf0061c445d74ddec1180425ae85abd2e221e6275e82a51706b7c20d792302490bf1ef68ae757c0fcbcbbe921566c13928b320c2acd0f128a30b7098fe166e3b1e48d4363250dad059dee1340f37aff3148da3346cdb9c0cbf7af4ab36ddaa8124e4a54c4c7fe63c7316a2cd444dc9c54d13167a4252394782201fdf7fb196b5097e82cd8933d4c6a1bf034e3f7910d", @generic="e51461a1f654eb2298155f0d50181d0a7778f5352bdd69e1261ecd933df388b928801cbb5f725b9c9cbf4c10adebf9f5b1c70bd3fd303c0c81b3398d615def7ae8cdfe5942fa81d4384dde63608b2f29401c4ba3e01c8dc8", @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x12, 0x5, "bf9baa5c19b4cf5e9bf8bbfebc1d"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 20, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 19, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 18, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 17, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 17, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 17, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 17, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 17, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 17, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 16, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 15, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 14, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 13, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 12, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
sysfs$auto(0x2, 0x7, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 11, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0xfff)
mmap$auto(0x0, 0xbb, 0xe3, 0xde, r0, 0x7ffb)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 10, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r0, 0x0, 0xfff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 9, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000080))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 8, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 7, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-use-after-free Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 6, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
fspick$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xdc9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 27, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
minimized 27 calls -> 5 calls
minimizing program #3 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 26, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r5, 0x0, 0x9)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 25, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 24, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 23, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
ioctl$auto(r4, 0x405c5503, 0x81)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-use-after-free Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 22, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0xf000, 0x8000000000000001, 0xb5d, 0x0, 0x6, 0x2)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-use-after-free Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 21, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 20, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 19, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 18, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf5, 0xfffffffffffffffa, 0x8000)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 17, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 16, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x531c80, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 15, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 14, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 13, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 12, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.event_control\x00', 0x1, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 11, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x0, 0x806121, 0x6)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 10, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 9, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0x3)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 8, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 7, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 5, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 5, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4601, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 5, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x4601, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 5, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x4601, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 5, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 5, 27]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
minimized 27 calls -> 6 calls
minimizing program #4 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 26]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 26]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 26]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 26]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 26]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 26]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81)
read$auto(0xffffffffffffffff, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 26]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r2=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r3=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xe, 0x100000000007)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 25]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r1=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r2=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r2, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0xe, 0x100000000007)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 24]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r1=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r2=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r2, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 23]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r1=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r2=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r2, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 22]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r1=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r2=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r2, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 21]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r1=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r2=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r2, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x20048801)
ioperm$auto(0xffff, 0xe, 0x1)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 21]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r1=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r2=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r2, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x20048801)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 20]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r1=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r1, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-use-after-free Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 19]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r1=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r1, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 18]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r1=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r1, 0x1, 0x10, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-use-after-free Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 17]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r1=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r1, 0x1, 0x10, 0x0, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-use-after-free Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 16]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 15]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 14]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 13]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 12]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 11]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 10]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-use-after-free Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 9]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 9]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 5, 6, 9]
detailed listing:
executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
executing program 2:
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
minimized 27 calls -> 9 calls
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-writev$auto-io_setup$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
bisect: concatenation succeeded
found reproducer with 25 syscalls
minimizing guilty program
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-writev$auto-io_setup$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0xffff, &(0x7f0000000580))

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-writev$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-writev$auto-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
read$auto(0xffffffffffffffff, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-mmap$auto-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-close_range$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-fsopen$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-sendmmsg$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth0\x00'})
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-socket$nl_generic-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-statmount$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x1fa, 0xd)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program crashed: KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
socket(0x10, 0x2, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, 0x0, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, 0x0, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, 0x0, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, 0x0, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
extracting C reproducer
testing compiled C program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
program crashed: KASAN: use-after-free Read in fbcon_prepare_logo
a never seen crash title: KASAN: use-after-free Read in fbcon_prepare_logo, ignore
simplifying guilty program options
testing program (duration=46.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmmsg$auto-readv$auto-ioctl$auto_PPPIOCSMRU-close_range$auto-mmap$auto-openat$auto_rtc_dev_fops_dev-ioctl$auto_RTC_RD_TIME-openat$auto_fb_fops_fb_chrdev-ioctl$sock_SIOCGIFINDEX-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto
detailed listing:
executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa51f}, 0x800}, 0x7, 0x4008)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)

program did not crash
reproducing took 4h43m54.018763866s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-out-of-bounds in scr_memcpyw include/linux/vt_buffer.h:38 [inline]
BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 drivers/video/fbdev/core/fbcon.c:613
Read of size 10 at addr ffff88807ca26bda by task syz.1.20/6073

CPU: 1 UID: 0 PID: 6073 Comm: syz.1.20 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 check_region_inline mm/kasan/generic.c:183 [inline]
 kasan_check_range+0xef/0x1a0 mm/kasan/generic.c:189
 __asan_memcpy+0x23/0x60 mm/kasan/shadow.c:105
 scr_memcpyw include/linux/vt_buffer.h:38 [inline]
 fbcon_prepare_logo+0xa03/0xc70 drivers/video/fbdev/core/fbcon.c:613
 fbcon_init+0xd77/0x1900 drivers/video/fbdev/core/fbcon.c:1145
 visual_init+0x31d/0x620 drivers/tty/vt/vt.c:1011
 do_bind_con_driver.isra.0+0x57a/0xbf0 drivers/tty/vt/vt.c:3831
 vt_bind drivers/tty/vt/vt.c:3987 [inline]
 store_bind+0x61d/0x760 drivers/tty/vt/vt.c:4059
 dev_attr_store+0x55/0x80 drivers/base/core.c:2440
 sysfs_kf_write+0xef/0x150 fs/sysfs/file.c:145
 kernfs_fop_write_iter+0x351/0x510 fs/kernfs/file.c:334
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x5ba/0x1180 fs/read_write.c:684
 ksys_write+0x12a/0x240 fs/read_write.c:736
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x230 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f942938e169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f942a24f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f94295b6080 RCX: 00007f942938e169
RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f9429410a68 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f94295b6080 R15: 00007ffea6958018
 </TASK>

Allocated by task 6073:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kasan_kmalloc include/linux/kasan.h:260 [inline]
 __do_kmalloc_node mm/slub.c:4341 [inline]
 __kmalloc_noprof+0x223/0x510 mm/slub.c:4353
 kmalloc_noprof include/linux/slab.h:909 [inline]
 kzalloc_noprof include/linux/slab.h:1039 [inline]
 vc_do_resize+0x1de/0x10e0 drivers/tty/vt/vt.c:1174
 vc_resize include/linux/vt_kern.h:49 [inline]
 fbcon_init+0xd53/0x1900 drivers/video/fbdev/core/fbcon.c:1142
 visual_init+0x31d/0x620 drivers/tty/vt/vt.c:1011
 do_bind_con_driver.isra.0+0x57a/0xbf0 drivers/tty/vt/vt.c:3831
 vt_bind drivers/tty/vt/vt.c:3987 [inline]
 store_bind+0x61d/0x760 drivers/tty/vt/vt.c:4059
 dev_attr_store+0x55/0x80 drivers/base/core.c:2440
 sysfs_kf_write+0xef/0x150 fs/sysfs/file.c:145
 kernfs_fop_write_iter+0x351/0x510 fs/kernfs/file.c:334
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x5ba/0x1180 fs/read_write.c:684
 ksys_write+0x12a/0x240 fs/read_write.c:736
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x230 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88807ca26b80
 which belongs to the cache kmalloc-96 of size 96
The buggy address is located 20 bytes to the right of
 allocated 70-byte region [ffff88807ca26b80, ffff88807ca26bc6)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ca26
flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000000 ffff88801b441280 dead000000000122 0000000000000000
raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3084, tgid 3084 (kworker/1:2), ts 119325463351, free_ts 109983997427
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1718
 prep_new_page mm/page_alloc.c:1726 [inline]
 get_page_from_freelist+0x135c/0x3920 mm/page_alloc.c:3700
 __alloc_frozen_pages_noprof+0x263/0x23a0 mm/page_alloc.c:4982
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2301
 alloc_slab_page mm/slub.c:2468 [inline]
 allocate_slab mm/slub.c:2632 [inline]
 new_slab+0x244/0x340 mm/slub.c:2686
 ___slab_alloc+0xd9c/0x1940 mm/slub.c:3872
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3962
 __slab_alloc_node mm/slub.c:4037 [inline]
 slab_alloc_node mm/slub.c:4198 [inline]
 __kmalloc_cache_noprof+0xfb/0x3e0 mm/slub.c:4367
 kmalloc_noprof include/linux/slab.h:905 [inline]
 dst_cow_metrics_generic+0x4c/0x1e0 net/core/dst.c:193
 dst_metrics_write_ptr include/net/dst.h:133 [inline]
 dst_metric_set include/net/dst.h:194 [inline]
 icmp6_dst_alloc+0x415/0x4f0 net/ipv6/route.c:3328
 mld_sendpack+0x5a8/0x1220 net/ipv6/mcast.c:1857
 mld_send_initial_cr.part.0+0x1a1/0x260 net/ipv6/mcast.c:2285
 mld_send_initial_cr net/ipv6/mcast.c:2273 [inline]
 mld_dad_work+0x51/0x2d0 net/ipv6/mcast.c:2308
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
page last free pid 5914 tgid 5914 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1262 [inline]
 __free_frozen_pages+0x69d/0xff0 mm/page_alloc.c:2725
 vfree+0x176/0x960 mm/vmalloc.c:3383
 kcov_put kernel/kcov.c:439 [inline]
 kcov_put kernel/kcov.c:435 [inline]
 kcov_close+0x34/0x60 kernel/kcov.c:535
 __fput+0x3ff/0xb70 fs/file_table.c:465
 task_work_run+0x14d/0x240 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xafb/0x2c30 kernel/exit.c:953
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1102
 get_signal+0x2673/0x26d0 kernel/signal.c:3034
 arch_do_signal_or_restart+0x8f/0x7a0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x230 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88807ca26a80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
 ffff88807ca26b00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
>ffff88807ca26b80: 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc
                                                    ^
 ffff88807ca26c00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
 ffff88807ca26c80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-out-of-bounds in scr_memcpyw include/linux/vt_buffer.h:38 [inline]
BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 drivers/video/fbdev/core/fbcon.c:613
Read of size 10 at addr ffff88807ca26bda by task syz.1.20/6073

CPU: 1 UID: 0 PID: 6073 Comm: syz.1.20 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 check_region_inline mm/kasan/generic.c:183 [inline]
 kasan_check_range+0xef/0x1a0 mm/kasan/generic.c:189
 __asan_memcpy+0x23/0x60 mm/kasan/shadow.c:105
 scr_memcpyw include/linux/vt_buffer.h:38 [inline]
 fbcon_prepare_logo+0xa03/0xc70 drivers/video/fbdev/core/fbcon.c:613
 fbcon_init+0xd77/0x1900 drivers/video/fbdev/core/fbcon.c:1145
 visual_init+0x31d/0x620 drivers/tty/vt/vt.c:1011
 do_bind_con_driver.isra.0+0x57a/0xbf0 drivers/tty/vt/vt.c:3831
 vt_bind drivers/tty/vt/vt.c:3987 [inline]
 store_bind+0x61d/0x760 drivers/tty/vt/vt.c:4059
 dev_attr_store+0x55/0x80 drivers/base/core.c:2440
 sysfs_kf_write+0xef/0x150 fs/sysfs/file.c:145
 kernfs_fop_write_iter+0x351/0x510 fs/kernfs/file.c:334
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x5ba/0x1180 fs/read_write.c:684
 ksys_write+0x12a/0x240 fs/read_write.c:736
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x230 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f942938e169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f942a24f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f94295b6080 RCX: 00007f942938e169
RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f9429410a68 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f94295b6080 R15: 00007ffea6958018
 </TASK>

Allocated by task 6073:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kasan_kmalloc include/linux/kasan.h:260 [inline]
 __do_kmalloc_node mm/slub.c:4341 [inline]
 __kmalloc_noprof+0x223/0x510 mm/slub.c:4353
 kmalloc_noprof include/linux/slab.h:909 [inline]
 kzalloc_noprof include/linux/slab.h:1039 [inline]
 vc_do_resize+0x1de/0x10e0 drivers/tty/vt/vt.c:1174
 vc_resize include/linux/vt_kern.h:49 [inline]
 fbcon_init+0xd53/0x1900 drivers/video/fbdev/core/fbcon.c:1142
 visual_init+0x31d/0x620 drivers/tty/vt/vt.c:1011
 do_bind_con_driver.isra.0+0x57a/0xbf0 drivers/tty/vt/vt.c:3831
 vt_bind drivers/tty/vt/vt.c:3987 [inline]
 store_bind+0x61d/0x760 drivers/tty/vt/vt.c:4059
 dev_attr_store+0x55/0x80 drivers/base/core.c:2440
 sysfs_kf_write+0xef/0x150 fs/sysfs/file.c:145
 kernfs_fop_write_iter+0x351/0x510 fs/kernfs/file.c:334
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x5ba/0x1180 fs/read_write.c:684
 ksys_write+0x12a/0x240 fs/read_write.c:736
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x230 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88807ca26b80
 which belongs to the cache kmalloc-96 of size 96
The buggy address is located 20 bytes to the right of
 allocated 70-byte region [ffff88807ca26b80, ffff88807ca26bc6)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ca26
flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000000 ffff88801b441280 dead000000000122 0000000000000000
raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3084, tgid 3084 (kworker/1:2), ts 119325463351, free_ts 109983997427
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1718
 prep_new_page mm/page_alloc.c:1726 [inline]
 get_page_from_freelist+0x135c/0x3920 mm/page_alloc.c:3700
 __alloc_frozen_pages_noprof+0x263/0x23a0 mm/page_alloc.c:4982
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2301
 alloc_slab_page mm/slub.c:2468 [inline]
 allocate_slab mm/slub.c:2632 [inline]
 new_slab+0x244/0x340 mm/slub.c:2686
 ___slab_alloc+0xd9c/0x1940 mm/slub.c:3872
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3962
 __slab_alloc_node mm/slub.c:4037 [inline]
 slab_alloc_node mm/slub.c:4198 [inline]
 __kmalloc_cache_noprof+0xfb/0x3e0 mm/slub.c:4367
 kmalloc_noprof include/linux/slab.h:905 [inline]
 dst_cow_metrics_generic+0x4c/0x1e0 net/core/dst.c:193
 dst_metrics_write_ptr include/net/dst.h:133 [inline]
 dst_metric_set include/net/dst.h:194 [inline]
 icmp6_dst_alloc+0x415/0x4f0 net/ipv6/route.c:3328
 mld_sendpack+0x5a8/0x1220 net/ipv6/mcast.c:1857
 mld_send_initial_cr.part.0+0x1a1/0x260 net/ipv6/mcast.c:2285
 mld_send_initial_cr net/ipv6/mcast.c:2273 [inline]
 mld_dad_work+0x51/0x2d0 net/ipv6/mcast.c:2308
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
page last free pid 5914 tgid 5914 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1262 [inline]
 __free_frozen_pages+0x69d/0xff0 mm/page_alloc.c:2725
 vfree+0x176/0x960 mm/vmalloc.c:3383
 kcov_put kernel/kcov.c:439 [inline]
 kcov_put kernel/kcov.c:435 [inline]
 kcov_close+0x34/0x60 kernel/kcov.c:535
 __fput+0x3ff/0xb70 fs/file_table.c:465
 task_work_run+0x14d/0x240 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xafb/0x2c30 kernel/exit.c:953
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1102
 get_signal+0x2673/0x26d0 kernel/signal.c:3034
 arch_do_signal_or_restart+0x8f/0x7a0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x230 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88807ca26a80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
 ffff88807ca26b00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
>ffff88807ca26b80: 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc
                                                    ^
 ffff88807ca26c00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
 ffff88807ca26c80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
==================================================================