Extracting prog: 3h3m17.003325682s
Minimizing prog: 57m58.289410705s
Simplifying prog options: 0s
Extracting C: 2m47.016565375s
Simplifying C: 30m46.99974451s


extracting reproducer from 38 programs
testing a last program of every proc
single: executing 8 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto-mmap$auto-socket-setsockopt$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ioctl$auto_SNDCTL_DSP_SPEED-ioctl$auto_SNDCTL_DSP_SETFRAGMENT-syz_clone-mmap$auto-move_pages$auto-getpgid-socket$nl_generic-rt_tgsigqueueinfo$auto-mmap$auto-socket-getsockopt$auto-syz_genetlink_get_family_id$auto_ovs_vport-open-execve$auto
detailed listing:
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-get_robust_list$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-io_uring_setup$auto-socket-close_range$auto-socket-syz_genetlink_get_family_id$auto_tipcv2-sendmsg$auto_TIPC_NL_BEARER_SET-socket-bind$auto-sendmmsg$auto-sendmmsg$auto-close_range$auto-pipe$auto-unshare$auto-setsockopt$auto-write$auto-close_range$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_mountinfo_operations_mnt_namespace-syz_clone-mmap$auto-io_uring_setup$auto-socket-setsockopt$auto-socket-sendmsg$auto_NFSD_CMD_THREADS_SET-write$auto-ioperm$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_UPD_TXSA-iopl$auto-ioperm$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal
detailed listing:
executing program 0:
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0)
syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0xa)
setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
ioperm$auto(0x7, 0x71, 0x863)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="2e453b2b86eb6609ac6b21859c95ef1c4960514a70c8613b16ee0a1d9d07d2fe7286fdd02c7145b82ccedbe325c98b019cf0fe4866fabde884a9e94061d34e65ee55d80c6cb3dc6493676626e1014705804fa60887b6f97ef95b7f74d7f7fb5cd2"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/msr/events/tsc\x00', 0x305501, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/213, 0xd5)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket$nl_generic-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_GET_MSRS
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket$nl_generic-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_GET_MSRS
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): recvmmsg$auto-epoll_create$auto-mprotect$auto-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-close_range$auto
detailed listing:
executing program 0:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
epoll_create$auto(0x4)
mprotect$auto(0x0, 0x3ff, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x234)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/188, 0xbc)
close_range$auto(0x2, 0x8, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): recvmmsg$auto-epoll_create$auto-mprotect$auto-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-close_range$auto
detailed listing:
executing program 0:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
epoll_create$auto(0x4)
mprotect$auto(0x0, 0x3ff, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x234)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/188, 0xbc)
close_range$auto(0x2, 0x8, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 38 programs with base timeout 30s
testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 8, 8, 8, 8, 8, 8, 9, 9, 9, 9, 9, 9, 9, 18, 19, 18, 19, 19, 19, 18, 19, 18, 19, 19, 19, 19, 19, 18, 19, 19, 19, 18, 19, 19, 18, 19, 19]
detailed listing:
executing program 0:
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x5607, 0x7)
inotify_add_watch$auto(r0, 0x0, 0x9)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x800)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/9/smp_affinity\x00', 0x129542, 0x0)
read$auto(0x3, 0x0, 0x7)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x73)
getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
mkdir$auto(0x0, 0x353)
executing program 0:
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
write$auto(r0, 0x0, 0x81)
executing program 0:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
epoll_create$auto(0x4)
mprotect$auto(0x0, 0x3ff, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x234)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/188, 0xbc)
close_range$auto(0x2, 0x8, 0x0)
executing program 32:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
epoll_create$auto(0x4)
mprotect$auto(0x0, 0x3ff, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x234)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/188, 0xbc)
close_range$auto(0x2, 0x8, 0x0)
executing program 2:
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4400ae8f, 0x0)
executing program 2:
ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0xfffffffffffffff9)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
r0 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bpf$auto(0x12, 0x0, 0x26)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(r0, 0x7fffffffffffffff, 0x3)
truncate$auto(&(0x7f0000000040)='./file0\x00', 0x0)
openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0xc0a82, 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x580, 0x400, 0x2}]})
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "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"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})
executing program 33:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})
executing program 1:
mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, 0x401, 0x2000000000008000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xa, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
userfaultfd$auto(0x1)
r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x801, 0x106)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000440)=@link_update={r2, @new_map_fd=r1, 0x4, @old_map_fd=r0}, 0xa3)
executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0)
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0x2b, 0x1, 0x0)
sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2404c040)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2)
sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="417ab73a0f98156e6d82da779ea1c63a4dd706cd41e38a9c44e01d213c1889288fb9d90186b215653fe27be5fa51e4d38acefb053a0ef6850466cfb5b5e2b155c948a83c350288ecf998f4588bb7f5baab14a319dd804065572b7bf7c4ad9bc7dd7bbabd63023ee4f3782c02d0779513f4d933d700001e35167d90a85907c2e895d45cce840ca1ed857901b8faf76485d391e42c91f74a1068dd82455fffac9684c6334abf163710f8199d1d35bba82b9cdf6b33d3bfc0bf71e9cc04690f5b490ba421", @ANYRES16=r3, @ANYBLOB="00042dbd7000ffdbdf253700000008005d000500000006004f01030000003700fc00159a461023e956ea812d8944cae8d3633bab7be64087d551243817b4fd37cfc71a252edbacd9b84ecb0069f167699ee9f833f900"], 0x5c}, 0x1, 0x0, 0x0, 0xc114}, 0x14044094)
r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r4, 0x9, 0x70bd2c, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x808)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x67c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x6a, 0x5, "fe51e74221f195f0ee3f0282006d96b7f4705382b4a01722e53a30dfdc15ed87faf49561a27a1a70272b77253d68c00ac8300eab0d4f8b005529ddb33cb5c54ca8a526706b62fc36285e20dc8d25f1178259c634164208c601c562721b06e79511004528debb"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xfffffffc}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xa}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x21}, @IOAM6_ATTR_SC_DATA={0x2cb, 0x5, "ee820347b0ac66213686c751161fd162a1c8bc37817c12e282c32656a5aca33875ff2f9a155de53b3474e711c0f38d8b9911fd0f33978be004ec2fec9982c43ba7879489959f3a40b6a42634cc101c3c0847d048e883386de80e048e52db487847e874a7e7d755bad059f58341ad099cb970a6bcf4e790289f2c1ad715e1240d5ef59f6fe9768603338bbb9576bb17b43a61d1b8f03e516472919100c76128884137cd2da4410307f8587ca3b0550fa5e761e45d8cfdf709587b66bd59c192d4b4ec82b6758d68866cfc05da07a610e3e2860edc9e6c8bac535c09a0b7bbd7967b5bdb63444143c4d6d2213e6a65fe30934f567d209788af9db4cac7ef6a05ae6d23e80aad2efb6ddbf15e26d90f9a38c1778a85482282c241d7072b3c41c17fe4d178d93331020996cbb6d3ea76edaae5f7659b70adf2378c503c72439123c1c6728bd3018760a63e04388a5f3e654a360cd0b70617119d251a66204fbf38bdf3499d82b37ac914cacf9fb5113096b566354fc7b654feeb2231420c1fa9dd6968770afb03335ffb466bc95198f957585b6bfffd827ed98642eb706dc8405c421c81d04a85fed2a8d21cb4f6b92a78de69fb6192ac521c842fa7dc33c475859954a839e4615562d1a0db9d5715e278f90be35499b674df50c98dee9bcaf6e61266e3f4a49392ddde2e07fc21c29df607765871c8ea3f36d826794c3caf92907556d0b71687e8c7965aaa0455c84593e362aad9ad5756d321dd46545a5d026dbb144f9c7c9cca7b49f6571a0ff13e0624f2ffd85f6e453248327487f2cbe0d2cb4167b0290b66695bc248fe8ab8515f499ea9e661f4ee2c51e98ed8551755c654cc3a5480646c384723ec6b7d402022d985b0811efec65c4cd7f1254561b4680bb496d065259b90336009430300ad35767a65873d938e1363e8765863d35d35fee0eff5949dbdbf8f2a691f3c7de47d6589edcab9cebd6bbab7d7aa06d201a2bfc7dda2496a010c"}, @IOAM6_ATTR_SC_DATA={0x306, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x2}]}, 0x67c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
connect$auto(0x3, 0x0, 0x55)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0x4)
select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x1, 0xd, 0x250, 0x100000001, 0x3, 0x2017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000001]}, 0x0, 0x0)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd700002dcdf251000000018000180140002006e657464657673696d30000000000000080011000e08"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80014)
executing program 1:
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r1 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
getsockopt$auto(r1, 0x0, 0x4, 0x0, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0xffffffffffffffff, 0x0, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0xa, 0x0)
executing program 3:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x62c00, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
connect$auto(0x3, 0x0, 0x10)
unshare$auto(0x40000080)
r0 = socket(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
close_range$auto(0x2, 0x8, 0x0)
executing program 5:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x103700, 0x0)
read$auto(r1, 0x0, 0x4000000081)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendto$auto(0x3, 0x0, 0x100000000, 0x8, 0x0, 0x1c)
executing program 4:
socket(0x10, 0x2, 0x0)
openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x1cbec0, 0x0)
socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
capset$auto(0x0, 0xfffffffffffffffe)
set_mempolicy$auto(0x3, 0x0, 0x9)
mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
msgctl$auto_MSG_STAT_ANY(0x0, 0xd, &(0x7f00000000c0)={{0x4, 0xffffffffffffffff, 0x0, 0x7, 0x3, 0x8, 0x7}, 0x0, 0x0, 0x4, 0x3, 0x7fffffffffffffff, 0x2000, 0x5, 0x7fff, 0x2, 0x4})
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0x2, 0x3, 0x9)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r1 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48})
sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x48040)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, &(0x7f00000001c0)={0x10000, 0xa870})
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 5:
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), 0xffffffffffffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
ioctl$auto(r0, 0x40104d14, r0)
socket(0x2b, 0x1, 0x1)
ioctl$auto(0xffffffffffffffff, 0x5522, 0xf15)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/personality\x00', 0x40, 0x0)
pread64$auto(r1, &(0x7f0000001800)='#\\h,\x00', 0x3, 0x8)
ftruncate$auto(r0, 0xf154)
open(&(0x7f0000000080)='./file0\x00', 0x2020c0, 0x44)
executing program 3:
select$auto(0x3, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000001280)={0x120020480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$auto_IMADDTIMER(r1, 0x80044940, 0x0)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
syz_clone(0x25342080, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000)
shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00')
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x1d, 0x2, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/bridge/bridge-nf-pass-vlan-input-dev\x00', 0x202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x200)
connect$auto(0x3, 0x0, 0x55)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x5c8)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x4, 0xfff, 0x7, 0xb0, 0x9, 0x8001, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ac7, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x0, 0x4, 0x8201, 0x2, 0x8, 0x4, 0xe3, 0x3fffffffff, 0x8000000000001}, 0x1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
semctl$auto_SETALL(0x7e8, 0x7, 0x11, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
bpf$auto(0x16, 0x0, 0xfffffffa)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x9, 0xffb, 0xd7, 0x3, 0x0)
socket(0xa, 0x801, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getsid$auto(0x0)
socket(0xa, 0x5, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/midiC2D0\x00', 0x100, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
setsockopt$auto_SO_DEBUG(r1, 0x5, 0x1, &(0x7f0000000600)=']\'#\x00', 0x6)
ppoll$auto(&(0x7f0000000000)={r1, 0x8, 0x6}, 0x7, 0x0, 0x0, 0x8)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800009}, 0x1, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd$auto(0x1)
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x1}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8)
open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x89b1, &(0x7f0000000900)={'bond0\x00'})
executing program 4:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20048801)
ioperm$auto(0x400000ffff, 0xe, 0x1)
syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff)
writev$auto(0x3, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
statmount$auto(0x0, 0x0, 0xfffff7fffffffffa, 0x81)
read$auto(0xffffffffffffffff, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r1, 0x0, 0x3)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
bind$auto(r2, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80)
executing program 3:
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
socket(0x10, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2483, 0x0)
socket(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
open(0x0, 0x64842, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7)
executing program 4:
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2a19c3, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x581402, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r1, 0x0, 0x4004855)
syslog$auto(0x1, &(0x7f00000004c0)='-#:\x00[\xda\xe2\xc3L\xd30{Q\avP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\x90[\xec2\v\xca<`K-\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x03m\xec\\\xa6\xb9C\xd4\xf0@\x13\xba\xd21\xd3o\x11\xaau\x92\x181\x7f\x1da\xe7h:u\xd0\xa9\x04\tlcf\xf3\xb2.\xcfy\x19\x93)\xbf:\xc74\xb4\x06\x9d*\r\xcd\xf0\xd6eqv\xeb\xbbQ\xae\x8b\xdd \xe7\xcd\xfcV\x18i\xf1\xf4\xec\x92k\xe3Lv(A\x9d\xb4~\xd1[9\x84\x13B\xc6du\xab]F\x88\xfe\x88\xb4\x92\xcbk\xc32\xd0\x95\xe8\x97\xbe\x84wH\x16\x9755\xbe\xb8\xb3\xa7\x87GT=^\xc7 \xdb\xf3\xc9+k\xe1 \xa2\x06\xc6\x87[\xef\xfe\x12\xe0\x18\xe6\xbe\x1d\x98Y\xf9.L:\xf3\xb7\xdbc\x1a\xc1\xe6!k\x87\xa5\xe8z\xba\xb7\x13\xc7\x94E^\x80\x05\xfe\xfd\\\x88-g\xf4-e\xe4O\xfa\x87\xffi\x11\x8di\x02\xb9)hE\x83', 0xf6bb)
clone$auto(0x6, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port3/state\x00', 0x2400, 0x0)
read$auto(r2, &(0x7f00000002c0)='\x91\xf3\xc5\xe7\xf4\xfc\x8e\xf5\x1a14\x8a\xd9\x9a\x11\xb1\x10q\xdf\x8doi\xfc\x9f\x18\x9a\xd4\x1d\xf7\xc7\xf9\xf8\xa2\xa3\x10Cs]\x01\xfec~\x9c\x9e\xb2\xa5Io\x11\x83\xf2\x06\a\xc0\xca\xcd\x1fHl2\xf4a\x88`\xd8(\x0fR\xb4\xcb\xc9\xf4E\xe8\xdd\xec\x85\xfa\xdc\xd7\x0eZ\xb5\x8f\x06\x89Ss6\x04\x00'/100, 0x5ff15ff9)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x101002, 0x0)
clone$auto(0x1, 0x27, 0x0, 0x0, 0x2)
setresuid$auto(0x0, 0xee01, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000002c0), 0xa82, 0x0)
mq_timedsend$auto(0xffffffffffffffff, &(0x7f00000001c0)='@;\x94:IN\x18\xfa7Cl\x108\xcb#\x00\xa1Vq\xc9\x00\xa6=`<\x00\x00\xe7{\x87sN\xaa%\x10h\xc7\xebOi\x88\x8a#\xdf\x9a\xe9\x9f\x06\x0f\x18\x8b\x7f9%\xee\x1cT!\xae>\xf7E\xcc\x95\xf0\x01\x10Z\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x80, 0x9, 0x0)
shmget$auto(0x5, 0x7, 0xfffffff7)
madvise$auto(0x0, 0x200007, 0x19)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x25, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
read$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)=""/1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00')
setgroups$auto(0xe32, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1c)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
open(0x0, 0x22240, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket(0x15, 0x5, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
write$auto(0xffffffffffffffff, 0x0, 0x3f00)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
init_module$auto(0x0, 0xfffff, 0x0)
mkdir$auto(0x0, 0x8001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffd, 0x3, 0x4000000000de, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x568)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
move_pages$auto(0xffffffffffffffff, 0xf54, 0x0, 0x0, 0x0, 0x2)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8)
mmap$auto(0x0, 0x44, 0x3, 0x11, r0, 0xc)
executing program 1:
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x4, 0x4, 0x9, 0x7)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
unshare$auto(0x40000080)
msgrcv$auto(0x71, 0x0, 0x0, 0x7fffffffffffffff, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5)
msgget$auto(0x0, 0x5)
msgsnd$auto(0x0, &(0x7f0000000080)={0x1, 0x6}, 0x8, 0x7)
msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1)
executing program 5:
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0)
syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0xa)
setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
ioperm$auto(0x7, 0x71, 0x863)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="2e453b2b86eb6609ac6b21859c95ef1c4960514a70c8613b16ee0a1d9d07d2fe7286fdd02c7145b82ccedbe325c98b019cf0fe4866fabde884a9e94061d34e65ee55d80c6cb3dc6493676626e1014705804fa60887b6f97ef95b7f74d7f7fb5cd2"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/msr/events/tsc\x00', 0x305501, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/213, 0xd5)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 8 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto-mmap$auto-socket-setsockopt$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ioctl$auto_SNDCTL_DSP_SPEED-ioctl$auto_SNDCTL_DSP_SETFRAGMENT-syz_clone-mmap$auto-move_pages$auto-getpgid-socket$nl_generic-rt_tgsigqueueinfo$auto-mmap$auto-socket-getsockopt$auto-syz_genetlink_get_family_id$auto_ovs_vport-open-execve$auto
detailed listing:
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-close_range$auto-io_uring_setup$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_CREATE_VM-close_range$auto-socket$nl_generic-socket-getsockopt$auto-mmap$auto-get_robust_list$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-io_uring_setup$auto-socket-close_range$auto-socket-syz_genetlink_get_family_id$auto_tipcv2-sendmsg$auto_TIPC_NL_BEARER_SET-socket-bind$auto-sendmmsg$auto-sendmmsg$auto-close_range$auto-pipe$auto-unshare$auto-setsockopt$auto-write$auto-close_range$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_mountinfo_operations_mnt_namespace-syz_clone-mmap$auto-io_uring_setup$auto-socket-setsockopt$auto-socket-sendmsg$auto_NFSD_CMD_THREADS_SET-write$auto-ioperm$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_UPD_TXSA-iopl$auto-ioperm$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal
detailed listing:
executing program 0:
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0)
syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0xa)
setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
ioperm$auto(0x7, 0x71, 0x863)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="2e453b2b86eb6609ac6b21859c95ef1c4960514a70c8613b16ee0a1d9d07d2fe7286fdd02c7145b82ccedbe325c98b019cf0fe4866fabde884a9e94061d34e65ee55d80c6cb3dc6493676626e1014705804fa60887b6f97ef95b7f74d7f7fb5cd2"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/msr/events/tsc\x00', 0x305501, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/213, 0xd5)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket$nl_generic-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_GET_MSRS
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket$nl_generic-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto-ioctl$auto_KVM_GET_MSRS
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): recvmmsg$auto-epoll_create$auto-mprotect$auto-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-close_range$auto
detailed listing:
executing program 0:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
epoll_create$auto(0x4)
mprotect$auto(0x0, 0x3ff, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x234)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/188, 0xbc)
close_range$auto(0x2, 0x8, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): recvmmsg$auto-epoll_create$auto-mprotect$auto-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-openat$auto_v4l2_fops_v4l2_dev-read$auto_v4l2_fops_v4l2_dev-close_range$auto
detailed listing:
executing program 0:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
epoll_create$auto(0x4)
mprotect$auto(0x0, 0x3ff, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x234)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/188, 0xbc)
close_range$auto(0x2, 0x8, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 38 programs with base timeout 1m40s
testing program (duration=1m49s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 8, 8, 8, 8, 8, 8, 9, 9, 9, 9, 9, 9, 9, 18, 19, 18, 19, 19, 19, 18, 19, 18, 19, 19, 19, 19, 19, 18, 19, 19, 19, 18, 19, 19, 18, 19, 19]
detailed listing:
executing program 0:
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x5607, 0x7)
inotify_add_watch$auto(r0, 0x0, 0x9)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x800)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/9/smp_affinity\x00', 0x129542, 0x0)
read$auto(0x3, 0x0, 0x7)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x73)
getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
mkdir$auto(0x0, 0x353)
executing program 0:
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
write$auto(r0, 0x0, 0x81)
executing program 0:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
epoll_create$auto(0x4)
mprotect$auto(0x0, 0x3ff, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x234)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/188, 0xbc)
close_range$auto(0x2, 0x8, 0x0)
executing program 32:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
epoll_create$auto(0x4)
mprotect$auto(0x0, 0x3ff, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x234)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/188, 0xbc)
close_range$auto(0x2, 0x8, 0x0)
executing program 2:
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4400ae8f, 0x0)
executing program 2:
ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0xfffffffffffffff9)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
r0 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bpf$auto(0x12, 0x0, 0x26)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(r0, 0x7fffffffffffffff, 0x3)
truncate$auto(&(0x7f0000000040)='./file0\x00', 0x0)
openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0xc0a82, 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x580, 0x400, 0x2}]})
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "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"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})
executing program 33:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})
executing program 1:
mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, 0x401, 0x2000000000008000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xa, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
userfaultfd$auto(0x1)
r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x801, 0x106)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000440)=@link_update={r2, @new_map_fd=r1, 0x4, @old_map_fd=r0}, 0xa3)
executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0)
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0x2b, 0x1, 0x0)
sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2404c040)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2)
sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="417ab73a0f98156e6d82da779ea1c63a4dd706cd41e38a9c44e01d213c1889288fb9d90186b215653fe27be5fa51e4d38acefb053a0ef6850466cfb5b5e2b155c948a83c350288ecf998f4588bb7f5baab14a319dd804065572b7bf7c4ad9bc7dd7bbabd63023ee4f3782c02d0779513f4d933d700001e35167d90a85907c2e895d45cce840ca1ed857901b8faf76485d391e42c91f74a1068dd82455fffac9684c6334abf163710f8199d1d35bba82b9cdf6b33d3bfc0bf71e9cc04690f5b490ba421", @ANYRES16=r3, @ANYBLOB="00042dbd7000ffdbdf253700000008005d000500000006004f01030000003700fc00159a461023e956ea812d8944cae8d3633bab7be64087d551243817b4fd37cfc71a252edbacd9b84ecb0069f167699ee9f833f900"], 0x5c}, 0x1, 0x0, 0x0, 0xc114}, 0x14044094)
r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r4, 0x9, 0x70bd2c, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x808)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x67c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x6a, 0x5, "fe51e74221f195f0ee3f0282006d96b7f4705382b4a01722e53a30dfdc15ed87faf49561a27a1a70272b77253d68c00ac8300eab0d4f8b005529ddb33cb5c54ca8a526706b62fc36285e20dc8d25f1178259c634164208c601c562721b06e79511004528debb"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xfffffffc}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xa}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x21}, @IOAM6_ATTR_SC_DATA={0x2cb, 0x5, "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"}, @IOAM6_ATTR_SC_DATA={0x306, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x2}]}, 0x67c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
connect$auto(0x3, 0x0, 0x55)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0x4)
select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x1, 0xd, 0x250, 0x100000001, 0x3, 0x2017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000001]}, 0x0, 0x0)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd700002dcdf251000000018000180140002006e657464657673696d30000000000000080011000e08"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80014)
executing program 1:
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r1 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
getsockopt$auto(r1, 0x0, 0x4, 0x0, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0xffffffffffffffff, 0x0, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0xa, 0x0)
executing program 3:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x62c00, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
connect$auto(0x3, 0x0, 0x10)
unshare$auto(0x40000080)
r0 = socket(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
close_range$auto(0x2, 0x8, 0x0)
executing program 5:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x103700, 0x0)
read$auto(r1, 0x0, 0x4000000081)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendto$auto(0x3, 0x0, 0x100000000, 0x8, 0x0, 0x1c)
executing program 4:
socket(0x10, 0x2, 0x0)
openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x1cbec0, 0x0)
socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
capset$auto(0x0, 0xfffffffffffffffe)
set_mempolicy$auto(0x3, 0x0, 0x9)
mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
msgctl$auto_MSG_STAT_ANY(0x0, 0xd, &(0x7f00000000c0)={{0x4, 0xffffffffffffffff, 0x0, 0x7, 0x3, 0x8, 0x7}, 0x0, 0x0, 0x4, 0x3, 0x7fffffffffffffff, 0x2000, 0x5, 0x7fff, 0x2, 0x4})
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0x2, 0x3, 0x9)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r1 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48})
sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x48040)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, &(0x7f00000001c0)={0x10000, 0xa870})
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 5:
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), 0xffffffffffffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
ioctl$auto(r0, 0x40104d14, r0)
socket(0x2b, 0x1, 0x1)
ioctl$auto(0xffffffffffffffff, 0x5522, 0xf15)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/personality\x00', 0x40, 0x0)
pread64$auto(r1, &(0x7f0000001800)='#\\h,\x00', 0x3, 0x8)
ftruncate$auto(r0, 0xf154)
open(&(0x7f0000000080)='./file0\x00', 0x2020c0, 0x44)
executing program 3:
select$auto(0x3, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000001280)={0x120020480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$auto_IMADDTIMER(r1, 0x80044940, 0x0)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
syz_clone(0x25342080, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000)
shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00')
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x1d, 0x2, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/bridge/bridge-nf-pass-vlan-input-dev\x00', 0x202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x200)
connect$auto(0x3, 0x0, 0x55)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x5c8)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x4, 0xfff, 0x7, 0xb0, 0x9, 0x8001, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ac7, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x0, 0x4, 0x8201, 0x2, 0x8, 0x4, 0xe3, 0x3fffffffff, 0x8000000000001}, 0x1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
semctl$auto_SETALL(0x7e8, 0x7, 0x11, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
bpf$auto(0x16, 0x0, 0xfffffffa)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x9, 0xffb, 0xd7, 0x3, 0x0)
socket(0xa, 0x801, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getsid$auto(0x0)
socket(0xa, 0x5, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/midiC2D0\x00', 0x100, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
setsockopt$auto_SO_DEBUG(r1, 0x5, 0x1, &(0x7f0000000600)=']\'#\x00', 0x6)
ppoll$auto(&(0x7f0000000000)={r1, 0x8, 0x6}, 0x7, 0x0, 0x0, 0x8)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800009}, 0x1, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd$auto(0x1)
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x1}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8)
open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x89b1, &(0x7f0000000900)={'bond0\x00'})
executing program 4:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20048801)
ioperm$auto(0x400000ffff, 0xe, 0x1)
syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff)
writev$auto(0x3, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
statmount$auto(0x0, 0x0, 0xfffff7fffffffffa, 0x81)
read$auto(0xffffffffffffffff, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r1, 0x0, 0x3)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
bind$auto(r2, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80)
executing program 3:
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
socket(0x10, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2483, 0x0)
socket(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
open(0x0, 0x64842, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7)
executing program 4:
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2a19c3, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x581402, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r1, 0x0, 0x4004855)
syslog$auto(0x1, &(0x7f00000004c0)='-#:\x00[\xda\xe2\xc3L\xd30{Q\avP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\x90[\xec2\v\xca<`K-\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x03m\xec\\\xa6\xb9C\xd4\xf0@\x13\xba\xd21\xd3o\x11\xaau\x92\x181\x7f\x1da\xe7h:u\xd0\xa9\x04\tlcf\xf3\xb2.\xcfy\x19\x93)\xbf:\xc74\xb4\x06\x9d*\r\xcd\xf0\xd6eqv\xeb\xbbQ\xae\x8b\xdd \xe7\xcd\xfcV\x18i\xf1\xf4\xec\x92k\xe3Lv(A\x9d\xb4~\xd1[9\x84\x13B\xc6du\xab]F\x88\xfe\x88\xb4\x92\xcbk\xc32\xd0\x95\xe8\x97\xbe\x84wH\x16\x9755\xbe\xb8\xb3\xa7\x87GT=^\xc7 \xdb\xf3\xc9+k\xe1 \xa2\x06\xc6\x87[\xef\xfe\x12\xe0\x18\xe6\xbe\x1d\x98Y\xf9.L:\xf3\xb7\xdbc\x1a\xc1\xe6!k\x87\xa5\xe8z\xba\xb7\x13\xc7\x94E^\x80\x05\xfe\xfd\\\x88-g\xf4-e\xe4O\xfa\x87\xffi\x11\x8di\x02\xb9)hE\x83', 0xf6bb)
clone$auto(0x6, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port3/state\x00', 0x2400, 0x0)
read$auto(r2, &(0x7f00000002c0)='\x91\xf3\xc5\xe7\xf4\xfc\x8e\xf5\x1a14\x8a\xd9\x9a\x11\xb1\x10q\xdf\x8doi\xfc\x9f\x18\x9a\xd4\x1d\xf7\xc7\xf9\xf8\xa2\xa3\x10Cs]\x01\xfec~\x9c\x9e\xb2\xa5Io\x11\x83\xf2\x06\a\xc0\xca\xcd\x1fHl2\xf4a\x88`\xd8(\x0fR\xb4\xcb\xc9\xf4E\xe8\xdd\xec\x85\xfa\xdc\xd7\x0eZ\xb5\x8f\x06\x89Ss6\x04\x00'/100, 0x5ff15ff9)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x101002, 0x0)
clone$auto(0x1, 0x27, 0x0, 0x0, 0x2)
setresuid$auto(0x0, 0xee01, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000002c0), 0xa82, 0x0)
mq_timedsend$auto(0xffffffffffffffff, &(0x7f00000001c0)='@;\x94:IN\x18\xfa7Cl\x108\xcb#\x00\xa1Vq\xc9\x00\xa6=`<\x00\x00\xe7{\x87sN\xaa%\x10h\xc7\xebOi\x88\x8a#\xdf\x9a\xe9\x9f\x06\x0f\x18\x8b\x7f9%\xee\x1cT!\xae>\xf7E\xcc\x95\xf0\x01\x10Z\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x80, 0x9, 0x0)
shmget$auto(0x5, 0x7, 0xfffffff7)
madvise$auto(0x0, 0x200007, 0x19)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x25, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
read$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)=""/1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00')
setgroups$auto(0xe32, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1c)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
open(0x0, 0x22240, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket(0x15, 0x5, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
write$auto(0xffffffffffffffff, 0x0, 0x3f00)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
init_module$auto(0x0, 0xfffff, 0x0)
mkdir$auto(0x0, 0x8001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffd, 0x3, 0x4000000000de, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x568)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
move_pages$auto(0xffffffffffffffff, 0xf54, 0x0, 0x0, 0x0, 0x2)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8)
mmap$auto(0x0, 0x44, 0x3, 0x11, r0, 0xc)
executing program 1:
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x4, 0x4, 0x9, 0x7)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
unshare$auto(0x40000080)
msgrcv$auto(0x71, 0x0, 0x0, 0x7fffffffffffffff, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5)
msgget$auto(0x0, 0x5)
msgsnd$auto(0x0, &(0x7f0000000080)={0x1, 0x6}, 0x8, 0x7)
msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1)
executing program 5:
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0)
syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0xa)
setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
ioperm$auto(0x7, 0x71, 0x863)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="2e453b2b86eb6609ac6b21859c95ef1c4960514a70c8613b16ee0a1d9d07d2fe7286fdd02c7145b82ccedbe325c98b019cf0fe4866fabde884a9e94061d34e65ee55d80c6cb3dc6493676626e1014705804fa60887b6f97ef95b7f74d7f7fb5cd2"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/msr/events/tsc\x00', 0x305501, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/213, 0xd5)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: bisecting 38 programs
bisect: split chunks (needed=false): <38>
bisect: split chunk #0 of len 38 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 18, 19, 18, 19, 19, 19, 18, 19, 18, 19, 19, 19, 19, 19, 18, 19, 19, 19, 18, 19, 19, 18, 19, 19]
detailed listing:
executing program 33:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})
executing program 1:
mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, 0x401, 0x2000000000008000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xa, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
userfaultfd$auto(0x1)
r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x801, 0x106)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000440)=@link_update={r2, @new_map_fd=r1, 0x4, @old_map_fd=r0}, 0xa3)
executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0)
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0x2b, 0x1, 0x0)
sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2404c040)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2)
sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="417ab73a0f98156e6d82da779ea1c63a4dd706cd41e38a9c44e01d213c1889288fb9d90186b215653fe27be5fa51e4d38acefb053a0ef6850466cfb5b5e2b155c948a83c350288ecf998f4588bb7f5baab14a319dd804065572b7bf7c4ad9bc7dd7bbabd63023ee4f3782c02d0779513f4d933d700001e35167d90a85907c2e895d45cce840ca1ed857901b8faf76485d391e42c91f74a1068dd82455fffac9684c6334abf163710f8199d1d35bba82b9cdf6b33d3bfc0bf71e9cc04690f5b490ba421", @ANYRES16=r3, @ANYBLOB="00042dbd7000ffdbdf253700000008005d000500000006004f01030000003700fc00159a461023e956ea812d8944cae8d3633bab7be64087d551243817b4fd37cfc71a252edbacd9b84ecb0069f167699ee9f833f900"], 0x5c}, 0x1, 0x0, 0x0, 0xc114}, 0x14044094)
r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r4, 0x9, 0x70bd2c, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x808)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x67c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x6a, 0x5, "fe51e74221f195f0ee3f0282006d96b7f4705382b4a01722e53a30dfdc15ed87faf49561a27a1a70272b77253d68c00ac8300eab0d4f8b005529ddb33cb5c54ca8a526706b62fc36285e20dc8d25f1178259c634164208c601c562721b06e79511004528debb"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xfffffffc}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xa}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x21}, @IOAM6_ATTR_SC_DATA={0x2cb, 0x5, "ee820347b0ac66213686c751161fd162a1c8bc37817c12e282c32656a5aca33875ff2f9a155de53b3474e711c0f38d8b9911fd0f33978be004ec2fec9982c43ba7879489959f3a40b6a42634cc101c3c0847d048e883386de80e048e52db487847e874a7e7d755bad059f58341ad099cb970a6bcf4e790289f2c1ad715e1240d5ef59f6fe9768603338bbb9576bb17b43a61d1b8f03e516472919100c76128884137cd2da4410307f8587ca3b0550fa5e761e45d8cfdf709587b66bd59c192d4b4ec82b6758d68866cfc05da07a610e3e2860edc9e6c8bac535c09a0b7bbd7967b5bdb63444143c4d6d2213e6a65fe30934f567d209788af9db4cac7ef6a05ae6d23e80aad2efb6ddbf15e26d90f9a38c1778a85482282c241d7072b3c41c17fe4d178d93331020996cbb6d3ea76edaae5f7659b70adf2378c503c72439123c1c6728bd3018760a63e04388a5f3e654a360cd0b70617119d251a66204fbf38bdf3499d82b37ac914cacf9fb5113096b566354fc7b654feeb2231420c1fa9dd6968770afb03335ffb466bc95198f957585b6bfffd827ed98642eb706dc8405c421c81d04a85fed2a8d21cb4f6b92a78de69fb6192ac521c842fa7dc33c475859954a839e4615562d1a0db9d5715e278f90be35499b674df50c98dee9bcaf6e61266e3f4a49392ddde2e07fc21c29df607765871c8ea3f36d826794c3caf92907556d0b71687e8c7965aaa0455c84593e362aad9ad5756d321dd46545a5d026dbb144f9c7c9cca7b49f6571a0ff13e0624f2ffd85f6e453248327487f2cbe0d2cb4167b0290b66695bc248fe8ab8515f499ea9e661f4ee2c51e98ed8551755c654cc3a5480646c384723ec6b7d402022d985b0811efec65c4cd7f1254561b4680bb496d065259b90336009430300ad35767a65873d938e1363e8765863d35d35fee0eff5949dbdbf8f2a691f3c7de47d6589edcab9cebd6bbab7d7aa06d201a2bfc7dda2496a010c"}, @IOAM6_ATTR_SC_DATA={0x306, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x2}]}, 0x67c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
connect$auto(0x3, 0x0, 0x55)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0x4)
select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x1, 0xd, 0x250, 0x100000001, 0x3, 0x2017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000001]}, 0x0, 0x0)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd700002dcdf251000000018000180140002006e657464657673696d30000000000000080011000e08"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80014)
executing program 1:
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r1 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
getsockopt$auto(r1, 0x0, 0x4, 0x0, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0xffffffffffffffff, 0x0, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0xa, 0x0)
executing program 3:
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x62c00, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
connect$auto(0x3, 0x0, 0x10)
unshare$auto(0x40000080)
r0 = socket(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
close_range$auto(0x2, 0x8, 0x0)
executing program 5:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x103700, 0x0)
read$auto(r1, 0x0, 0x4000000081)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendto$auto(0x3, 0x0, 0x100000000, 0x8, 0x0, 0x1c)
executing program 4:
socket(0x10, 0x2, 0x0)
openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x1cbec0, 0x0)
socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
capset$auto(0x0, 0xfffffffffffffffe)
set_mempolicy$auto(0x3, 0x0, 0x9)
mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
msgctl$auto_MSG_STAT_ANY(0x0, 0xd, &(0x7f00000000c0)={{0x4, 0xffffffffffffffff, 0x0, 0x7, 0x3, 0x8, 0x7}, 0x0, 0x0, 0x4, 0x3, 0x7fffffffffffffff, 0x2000, 0x5, 0x7fff, 0x2, 0x4})
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0x2, 0x3, 0x9)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r1 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48})
sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x48040)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, &(0x7f00000001c0)={0x10000, 0xa870})
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 5:
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), 0xffffffffffffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
ioctl$auto(r0, 0x40104d14, r0)
socket(0x2b, 0x1, 0x1)
ioctl$auto(0xffffffffffffffff, 0x5522, 0xf15)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/personality\x00', 0x40, 0x0)
pread64$auto(r1, &(0x7f0000001800)='#\\h,\x00', 0x3, 0x8)
ftruncate$auto(r0, 0xf154)
open(&(0x7f0000000080)='./file0\x00', 0x2020c0, 0x44)
executing program 3:
select$auto(0x3, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000001280)={0x120020480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$auto_IMADDTIMER(r1, 0x80044940, 0x0)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
syz_clone(0x25342080, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000)
shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00')
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x1d, 0x2, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/bridge/bridge-nf-pass-vlan-input-dev\x00', 0x202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x200)
connect$auto(0x3, 0x0, 0x55)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x5c8)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x4, 0xfff, 0x7, 0xb0, 0x9, 0x8001, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ac7, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x0, 0x4, 0x8201, 0x2, 0x8, 0x4, 0xe3, 0x3fffffffff, 0x8000000000001}, 0x1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
semctl$auto_SETALL(0x7e8, 0x7, 0x11, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
bpf$auto(0x16, 0x0, 0xfffffffa)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x9, 0xffb, 0xd7, 0x3, 0x0)
socket(0xa, 0x801, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getsid$auto(0x0)
socket(0xa, 0x5, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/midiC2D0\x00', 0x100, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
setsockopt$auto_SO_DEBUG(r1, 0x5, 0x1, &(0x7f0000000600)=']\'#\x00', 0x6)
ppoll$auto(&(0x7f0000000000)={r1, 0x8, 0x6}, 0x7, 0x0, 0x0, 0x8)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800009}, 0x1, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd$auto(0x1)
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x1}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8)
open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x89b1, &(0x7f0000000900)={'bond0\x00'})
executing program 4:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20048801)
ioperm$auto(0x400000ffff, 0xe, 0x1)
syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff)
writev$auto(0x3, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
statmount$auto(0x0, 0x0, 0xfffff7fffffffffa, 0x81)
read$auto(0xffffffffffffffff, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r1, 0x0, 0x3)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
bind$auto(r2, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80)
executing program 3:
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
socket(0x10, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2483, 0x0)
socket(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
open(0x0, 0x64842, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7)
executing program 4:
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2a19c3, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x581402, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r1, 0x0, 0x4004855)
syslog$auto(0x1, &(0x7f00000004c0)='-#:\x00[\xda\xe2\xc3L\xd30{Q\avP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\x90[\xec2\v\xca<`K-\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x03m\xec\\\xa6\xb9C\xd4\xf0@\x13\xba\xd21\xd3o\x11\xaau\x92\x181\x7f\x1da\xe7h:u\xd0\xa9\x04\tlcf\xf3\xb2.\xcfy\x19\x93)\xbf:\xc74\xb4\x06\x9d*\r\xcd\xf0\xd6eqv\xeb\xbbQ\xae\x8b\xdd \xe7\xcd\xfcV\x18i\xf1\xf4\xec\x92k\xe3Lv(A\x9d\xb4~\xd1[9\x84\x13B\xc6du\xab]F\x88\xfe\x88\xb4\x92\xcbk\xc32\xd0\x95\xe8\x97\xbe\x84wH\x16\x9755\xbe\xb8\xb3\xa7\x87GT=^\xc7 \xdb\xf3\xc9+k\xe1 \xa2\x06\xc6\x87[\xef\xfe\x12\xe0\x18\xe6\xbe\x1d\x98Y\xf9.L:\xf3\xb7\xdbc\x1a\xc1\xe6!k\x87\xa5\xe8z\xba\xb7\x13\xc7\x94E^\x80\x05\xfe\xfd\\\x88-g\xf4-e\xe4O\xfa\x87\xffi\x11\x8di\x02\xb9)hE\x83', 0xf6bb)
clone$auto(0x6, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port3/state\x00', 0x2400, 0x0)
read$auto(r2, &(0x7f00000002c0)='\x91\xf3\xc5\xe7\xf4\xfc\x8e\xf5\x1a14\x8a\xd9\x9a\x11\xb1\x10q\xdf\x8doi\xfc\x9f\x18\x9a\xd4\x1d\xf7\xc7\xf9\xf8\xa2\xa3\x10Cs]\x01\xfec~\x9c\x9e\xb2\xa5Io\x11\x83\xf2\x06\a\xc0\xca\xcd\x1fHl2\xf4a\x88`\xd8(\x0fR\xb4\xcb\xc9\xf4E\xe8\xdd\xec\x85\xfa\xdc\xd7\x0eZ\xb5\x8f\x06\x89Ss6\x04\x00'/100, 0x5ff15ff9)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x101002, 0x0)
clone$auto(0x1, 0x27, 0x0, 0x0, 0x2)
setresuid$auto(0x0, 0xee01, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000002c0), 0xa82, 0x0)
mq_timedsend$auto(0xffffffffffffffff, &(0x7f00000001c0)='@;\x94:IN\x18\xfa7Cl\x108\xcb#\x00\xa1Vq\xc9\x00\xa6=`<\x00\x00\xe7{\x87sN\xaa%\x10h\xc7\xebOi\x88\x8a#\xdf\x9a\xe9\x9f\x06\x0f\x18\x8b\x7f9%\xee\x1cT!\xae>\xf7E\xcc\x95\xf0\x01\x10Z\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x80, 0x9, 0x0)
shmget$auto(0x5, 0x7, 0xfffffff7)
madvise$auto(0x0, 0x200007, 0x19)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x25, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
read$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)=""/1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00')
setgroups$auto(0xe32, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1c)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
open(0x0, 0x22240, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket(0x15, 0x5, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
write$auto(0xffffffffffffffff, 0x0, 0x3f00)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
init_module$auto(0x0, 0xfffff, 0x0)
mkdir$auto(0x0, 0x8001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffd, 0x3, 0x4000000000de, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x568)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
move_pages$auto(0xffffffffffffffff, 0xf54, 0x0, 0x0, 0x0, 0x2)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8)
mmap$auto(0x0, 0x44, 0x3, 0x11, r0, 0xc)
executing program 1:
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x4, 0x4, 0x9, 0x7)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
unshare$auto(0x40000080)
msgrcv$auto(0x71, 0x0, 0x0, 0x7fffffffffffffff, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5)
msgget$auto(0x0, 0x5)
msgsnd$auto(0x0, &(0x7f0000000080)={0x1, 0x6}, 0x8, 0x7)
msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1)
executing program 5:
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0)
syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0xa)
setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
ioperm$auto(0x7, 0x71, 0x863)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="2e453b2b86eb6609ac6b21859c95ef1c4960514a70c8613b16ee0a1d9d07d2fe7286fdd02c7145b82ccedbe325c98b019cf0fe4866fabde884a9e94061d34e65ee55d80c6cb3dc6493676626e1014705804fa60887b6f97ef95b7f74d7f7fb5cd2"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/msr/events/tsc\x00', 0x305501, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/213, 0xd5)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 8, 8, 8, 8, 8, 8, 9, 9, 9, 9, 9, 9, 19, 19, 18, 19, 19, 19, 18, 19, 19, 18, 19, 19]
detailed listing:
executing program 0:
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x5607, 0x7)
inotify_add_watch$auto(r0, 0x0, 0x9)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x800)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/9/smp_affinity\x00', 0x129542, 0x0)
read$auto(0x3, 0x0, 0x7)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x73)
getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
mkdir$auto(0x0, 0x353)
executing program 0:
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
write$auto(r0, 0x0, 0x81)
executing program 0:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
epoll_create$auto(0x4)
mprotect$auto(0x0, 0x3ff, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x234)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/188, 0xbc)
close_range$auto(0x2, 0x8, 0x0)
executing program 32:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
epoll_create$auto(0x4)
mprotect$auto(0x0, 0x3ff, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x234)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/188, 0xbc)
close_range$auto(0x2, 0x8, 0x0)
executing program 2:
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4400ae8f, 0x0)
executing program 2:
ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0xfffffffffffffff9)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
r0 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bpf$auto(0x12, 0x0, 0x26)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(r0, 0x7fffffffffffffff, 0x3)
truncate$auto(&(0x7f0000000040)='./file0\x00', 0x0)
openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0xc0a82, 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x580, 0x400, 0x2}]})
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "a695e4b97e0e4eccc4099db715faf6de0af4f1dd61e992d9efa0e27aeacb3bc35bb7d0e5871ff08f8657930a5e7dfb2b87fa57fc8e8dd06e7ae2cd547c28771e8393b235fd7c6803dd3e073296597d9da492d58fe5f37bec9a1b6b1e6e05f596da119d711167f7699a46f2ff63490be6f3d7c9d325e8f3fac69b7856d2f08bb5a198b024f4e69ab01bad6c29fde19b88d714642340ea219ee7cd1e48533a9d3aed754e60e6fd852842100c92306f09c928d9371ad19752e0bd7d548cb15cc6923ce350e95ee503dad57c26bcf31d73ba6c54fbf0c8148c94c30e64d3c7ca2808e0462bb237be30dbb40164f4616c2f651d38b51486ea194ed6c32c048f5ffcf88e901bfaa559670572570a22863bf50a9a458d2430362c13f5000be9a887558d7b12183300a051892b31d56746f93ceeb38ef00dca1da4a1f195a57c9ff3dc3fa7e42c9f853d85eaebbddf14ca5f2b9c956b85d752a78af28b576ca6b4842b49db6e08a46933d56c66c396de43675bcc03c7a4cb2246e5feab8445a6ae96c2586e1b2b5c78cb0885d9a786016fc61c2cc172650b1de0147e0179ed8f68fae5ff2a8b9cdde5e9471037ac9c08a85986ce4d3fd85808ad6c46d3cc6353f78abaa1ac46c3ff130a3c8f9768906a16df45b8e29f798e03459e78f5f6f948a82f8a75ca2c1b38fd851f5a6171a971fc5e6705a58af82ce9ca246f708d33a3376fde7ea7e4bad58935301fadcac24a8e8f155259b57ce41bf02d44ebeabe929df0dba942537a06afe7787b8a2b2ca09b5daf775924f2f8b5f60dfc9ba1cce082a3ca12fe3f886bb97bf51d6733f3cd74ef93053ef8136d32ce90316d6d002c206265d131792404e5a1744ffc280e82a1aa63363ecd4b698dfc0cc50c493d80a97e2bb784d4ac2cea12d66b553e8ea424a9c14953c518baea493a8268a6fb0229e7e49fc073a7638785e3f2bc08ac84e9e5978992001a81d061d5e22ca3cb0b0d9eef61dfeab0eabf0016078dc5cbc69d"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})
executing program 4:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20048801)
ioperm$auto(0x400000ffff, 0xe, 0x1)
syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff)
writev$auto(0x3, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
statmount$auto(0x0, 0x0, 0xfffff7fffffffffa, 0x81)
read$auto(0xffffffffffffffff, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r1, 0x0, 0x3)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
bind$auto(r2, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80)
executing program 3:
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
socket(0x10, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2483, 0x0)
socket(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
open(0x0, 0x64842, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7)
executing program 4:
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2a19c3, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x581402, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r1, 0x0, 0x4004855)
syslog$auto(0x1, &(0x7f00000004c0)='-#:\x00[\xda\xe2\xc3L\xd30{Q\avP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\x90[\xec2\v\xca<`K-\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x03m\xec\\\xa6\xb9C\xd4\xf0@\x13\xba\xd21\xd3o\x11\xaau\x92\x181\x7f\x1da\xe7h:u\xd0\xa9\x04\tlcf\xf3\xb2.\xcfy\x19\x93)\xbf:\xc74\xb4\x06\x9d*\r\xcd\xf0\xd6eqv\xeb\xbbQ\xae\x8b\xdd \xe7\xcd\xfcV\x18i\xf1\xf4\xec\x92k\xe3Lv(A\x9d\xb4~\xd1[9\x84\x13B\xc6du\xab]F\x88\xfe\x88\xb4\x92\xcbk\xc32\xd0\x95\xe8\x97\xbe\x84wH\x16\x9755\xbe\xb8\xb3\xa7\x87GT=^\xc7 \xdb\xf3\xc9+k\xe1 \xa2\x06\xc6\x87[\xef\xfe\x12\xe0\x18\xe6\xbe\x1d\x98Y\xf9.L:\xf3\xb7\xdbc\x1a\xc1\xe6!k\x87\xa5\xe8z\xba\xb7\x13\xc7\x94E^\x80\x05\xfe\xfd\\\x88-g\xf4-e\xe4O\xfa\x87\xffi\x11\x8di\x02\xb9)hE\x83', 0xf6bb)
clone$auto(0x6, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port3/state\x00', 0x2400, 0x0)
read$auto(r2, &(0x7f00000002c0)='\x91\xf3\xc5\xe7\xf4\xfc\x8e\xf5\x1a14\x8a\xd9\x9a\x11\xb1\x10q\xdf\x8doi\xfc\x9f\x18\x9a\xd4\x1d\xf7\xc7\xf9\xf8\xa2\xa3\x10Cs]\x01\xfec~\x9c\x9e\xb2\xa5Io\x11\x83\xf2\x06\a\xc0\xca\xcd\x1fHl2\xf4a\x88`\xd8(\x0fR\xb4\xcb\xc9\xf4E\xe8\xdd\xec\x85\xfa\xdc\xd7\x0eZ\xb5\x8f\x06\x89Ss6\x04\x00'/100, 0x5ff15ff9)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x101002, 0x0)
clone$auto(0x1, 0x27, 0x0, 0x0, 0x2)
setresuid$auto(0x0, 0xee01, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000002c0), 0xa82, 0x0)
mq_timedsend$auto(0xffffffffffffffff, &(0x7f00000001c0)='@;\x94:IN\x18\xfa7Cl\x108\xcb#\x00\xa1Vq\xc9\x00\xa6=`<\x00\x00\xe7{\x87sN\xaa%\x10h\xc7\xebOi\x88\x8a#\xdf\x9a\xe9\x9f\x06\x0f\x18\x8b\x7f9%\xee\x1cT!\xae>\xf7E\xcc\x95\xf0\x01\x10Z\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x80, 0x9, 0x0)
shmget$auto(0x5, 0x7, 0xfffffff7)
madvise$auto(0x0, 0x200007, 0x19)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x25, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
read$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)=""/1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00')
setgroups$auto(0xe32, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1c)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
open(0x0, 0x22240, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket(0x15, 0x5, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
write$auto(0xffffffffffffffff, 0x0, 0x3f00)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
init_module$auto(0x0, 0xfffff, 0x0)
mkdir$auto(0x0, 0x8001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffd, 0x3, 0x4000000000de, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x568)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
move_pages$auto(0xffffffffffffffff, 0xf54, 0x0, 0x0, 0x0, 0x2)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8)
mmap$auto(0x0, 0x44, 0x3, 0x11, r0, 0xc)
executing program 1:
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x4, 0x4, 0x9, 0x7)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
unshare$auto(0x40000080)
msgrcv$auto(0x71, 0x0, 0x0, 0x7fffffffffffffff, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5)
msgget$auto(0x0, 0x5)
msgsnd$auto(0x0, &(0x7f0000000080)={0x1, 0x6}, 0x8, 0x7)
msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1)
executing program 5:
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0)
syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0xa)
setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
ioperm$auto(0x7, 0x71, 0x863)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="2e453b2b86eb6609ac6b21859c95ef1c4960514a70c8613b16ee0a1d9d07d2fe7286fdd02c7145b82ccedbe325c98b019cf0fe4866fabde884a9e94061d34e65ee55d80c6cb3dc6493676626e1014705804fa60887b6f97ef95b7f74d7f7fb5cd2"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/msr/events/tsc\x00', 0x305501, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/213, 0xd5)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 8, 8, 8, 8, 8, 8, 9, 9, 9, 9, 9, 9]
detailed listing:
executing program 0:
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x5607, 0x7)
inotify_add_watch$auto(r0, 0x0, 0x9)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x800)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/9/smp_affinity\x00', 0x129542, 0x0)
read$auto(0x3, 0x0, 0x7)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x73)
getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0)
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
mkdir$auto(0x0, 0x353)
executing program 0:
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
write$auto(r0, 0x0, 0x81)
executing program 0:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
epoll_create$auto(0x4)
mprotect$auto(0x0, 0x3ff, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x234)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/188, 0xbc)
close_range$auto(0x2, 0x8, 0x0)
executing program 32:
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
epoll_create$auto(0x4)
mprotect$auto(0x0, 0x3ff, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x234)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/188, 0xbc)
close_range$auto(0x2, 0x8, 0x0)
executing program 2:
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4400ae8f, 0x0)
executing program 2:
ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0xfffffffffffffff9)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
r0 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bpf$auto(0x12, 0x0, 0x26)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(r0, 0x7fffffffffffffff, 0x3)
truncate$auto(&(0x7f0000000040)='./file0\x00', 0x0)
openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0xc0a82, 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x580, 0x400, 0x2}]})
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "a695e4b97e0e4eccc4099db715faf6de0af4f1dd61e992d9efa0e27aeacb3bc35bb7d0e5871ff08f8657930a5e7dfb2b87fa57fc8e8dd06e7ae2cd547c28771e8393b235fd7c6803dd3e073296597d9da492d58fe5f37bec9a1b6b1e6e05f596da119d711167f7699a46f2ff63490be6f3d7c9d325e8f3fac69b7856d2f08bb5a198b024f4e69ab01bad6c29fde19b88d714642340ea219ee7cd1e48533a9d3aed754e60e6fd852842100c92306f09c928d9371ad19752e0bd7d548cb15cc6923ce350e95ee503dad57c26bcf31d73ba6c54fbf0c8148c94c30e64d3c7ca2808e0462bb237be30dbb40164f4616c2f651d38b51486ea194ed6c32c048f5ffcf88e901bfaa559670572570a22863bf50a9a458d2430362c13f5000be9a887558d7b12183300a051892b31d56746f93ceeb38ef00dca1da4a1f195a57c9ff3dc3fa7e42c9f853d85eaebbddf14ca5f2b9c956b85d752a78af28b576ca6b4842b49db6e08a46933d56c66c396de43675bcc03c7a4cb2246e5feab8445a6ae96c2586e1b2b5c78cb0885d9a786016fc61c2cc172650b1de0147e0179ed8f68fae5ff2a8b9cdde5e9471037ac9c08a85986ce4d3fd85808ad6c46d3cc6353f78abaa1ac46c3ff130a3c8f9768906a16df45b8e29f798e03459e78f5f6f948a82f8a75ca2c1b38fd851f5a6171a971fc5e6705a58af82ce9ca246f708d33a3376fde7ea7e4bad58935301fadcac24a8e8f155259b57ce41bf02d44ebeabe929df0dba942537a06afe7787b8a2b2ca09b5daf775924f2f8b5f60dfc9ba1cce082a3ca12fe3f886bb97bf51d6733f3cd74ef93053ef8136d32ce90316d6d002c206265d131792404e5a1744ffc280e82a1aa63363ecd4b698dfc0cc50c493d80a97e2bb784d4ac2cea12d66b553e8ea424a9c14953c518baea493a8268a6fb0229e7e49fc073a7638785e3f2bc08ac84e9e5978992001a81d061d5e22ca3cb0b0d9eef61dfeab0eabf0016078dc5cbc69d"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})

program did not crash
bisect: split chunks (needed=true): <13>, <12>
bisect: split chunk #0 of len 13 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 9, 9, 9, 9, 19, 19, 18, 19, 19, 19, 18, 19, 19, 18, 19, 19]
detailed listing:
executing program 2:
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4400ae8f, 0x0)
executing program 2:
ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0xfffffffffffffff9)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
r0 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bpf$auto(0x12, 0x0, 0x26)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(r0, 0x7fffffffffffffff, 0x3)
truncate$auto(&(0x7f0000000040)='./file0\x00', 0x0)
openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0xc0a82, 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x580, 0x400, 0x2}]})
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "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"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})
executing program 4:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20048801)
ioperm$auto(0x400000ffff, 0xe, 0x1)
syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff)
writev$auto(0x3, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
statmount$auto(0x0, 0x0, 0xfffff7fffffffffa, 0x81)
read$auto(0xffffffffffffffff, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r1, 0x0, 0x3)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
bind$auto(r2, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80)
executing program 3:
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
socket(0x10, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2483, 0x0)
socket(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
open(0x0, 0x64842, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7)
executing program 4:
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2a19c3, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x581402, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r1, 0x0, 0x4004855)
syslog$auto(0x1, &(0x7f00000004c0)='-#:\x00[\xda\xe2\xc3L\xd30{Q\avP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\x90[\xec2\v\xca<`K-\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x03m\xec\\\xa6\xb9C\xd4\xf0@\x13\xba\xd21\xd3o\x11\xaau\x92\x181\x7f\x1da\xe7h:u\xd0\xa9\x04\tlcf\xf3\xb2.\xcfy\x19\x93)\xbf:\xc74\xb4\x06\x9d*\r\xcd\xf0\xd6eqv\xeb\xbbQ\xae\x8b\xdd \xe7\xcd\xfcV\x18i\xf1\xf4\xec\x92k\xe3Lv(A\x9d\xb4~\xd1[9\x84\x13B\xc6du\xab]F\x88\xfe\x88\xb4\x92\xcbk\xc32\xd0\x95\xe8\x97\xbe\x84wH\x16\x9755\xbe\xb8\xb3\xa7\x87GT=^\xc7 \xdb\xf3\xc9+k\xe1 \xa2\x06\xc6\x87[\xef\xfe\x12\xe0\x18\xe6\xbe\x1d\x98Y\xf9.L:\xf3\xb7\xdbc\x1a\xc1\xe6!k\x87\xa5\xe8z\xba\xb7\x13\xc7\x94E^\x80\x05\xfe\xfd\\\x88-g\xf4-e\xe4O\xfa\x87\xffi\x11\x8di\x02\xb9)hE\x83', 0xf6bb)
clone$auto(0x6, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port3/state\x00', 0x2400, 0x0)
read$auto(r2, &(0x7f00000002c0)='\x91\xf3\xc5\xe7\xf4\xfc\x8e\xf5\x1a14\x8a\xd9\x9a\x11\xb1\x10q\xdf\x8doi\xfc\x9f\x18\x9a\xd4\x1d\xf7\xc7\xf9\xf8\xa2\xa3\x10Cs]\x01\xfec~\x9c\x9e\xb2\xa5Io\x11\x83\xf2\x06\a\xc0\xca\xcd\x1fHl2\xf4a\x88`\xd8(\x0fR\xb4\xcb\xc9\xf4E\xe8\xdd\xec\x85\xfa\xdc\xd7\x0eZ\xb5\x8f\x06\x89Ss6\x04\x00'/100, 0x5ff15ff9)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x101002, 0x0)
clone$auto(0x1, 0x27, 0x0, 0x0, 0x2)
setresuid$auto(0x0, 0xee01, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000002c0), 0xa82, 0x0)
mq_timedsend$auto(0xffffffffffffffff, &(0x7f00000001c0)='@;\x94:IN\x18\xfa7Cl\x108\xcb#\x00\xa1Vq\xc9\x00\xa6=`<\x00\x00\xe7{\x87sN\xaa%\x10h\xc7\xebOi\x88\x8a#\xdf\x9a\xe9\x9f\x06\x0f\x18\x8b\x7f9%\xee\x1cT!\xae>\xf7E\xcc\x95\xf0\x01\x10Z\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x80, 0x9, 0x0)
shmget$auto(0x5, 0x7, 0xfffffff7)
madvise$auto(0x0, 0x200007, 0x19)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x25, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
read$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)=""/1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00')
setgroups$auto(0xe32, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1c)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
open(0x0, 0x22240, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket(0x15, 0x5, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
write$auto(0xffffffffffffffff, 0x0, 0x3f00)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
init_module$auto(0x0, 0xfffff, 0x0)
mkdir$auto(0x0, 0x8001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffd, 0x3, 0x4000000000de, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x568)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
move_pages$auto(0xffffffffffffffff, 0xf54, 0x0, 0x0, 0x0, 0x2)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8)
mmap$auto(0x0, 0x44, 0x3, 0x11, r0, 0xc)
executing program 1:
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x4, 0x4, 0x9, 0x7)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
unshare$auto(0x40000080)
msgrcv$auto(0x71, 0x0, 0x0, 0x7fffffffffffffff, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5)
msgget$auto(0x0, 0x5)
msgsnd$auto(0x0, &(0x7f0000000080)={0x1, 0x6}, 0x8, 0x7)
msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1)
executing program 5:
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0)
syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0xa)
setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
ioperm$auto(0x7, 0x71, 0x863)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="2e453b2b86eb6609ac6b21859c95ef1c4960514a70c8613b16ee0a1d9d07d2fe7286fdd02c7145b82ccedbe325c98b019cf0fe4866fabde884a9e94061d34e65ee55d80c6cb3dc6493676626e1014705804fa60887b6f97ef95b7f74d7f7fb5cd2"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/msr/events/tsc\x00', 0x305501, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/213, 0xd5)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 12 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 9, 9, 9, 9, 18, 19, 19, 18, 19, 19]
detailed listing:
executing program 2:
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4400ae8f, 0x0)
executing program 2:
ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0xfffffffffffffff9)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
r0 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bpf$auto(0x12, 0x0, 0x26)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(r0, 0x7fffffffffffffff, 0x3)
truncate$auto(&(0x7f0000000040)='./file0\x00', 0x0)
openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0xc0a82, 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x580, 0x400, 0x2}]})
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "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"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})
executing program 3:
write$auto(0xffffffffffffffff, 0x0, 0x3f00)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
init_module$auto(0x0, 0xfffff, 0x0)
mkdir$auto(0x0, 0x8001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffd, 0x3, 0x4000000000de, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x568)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
move_pages$auto(0xffffffffffffffff, 0xf54, 0x0, 0x0, 0x0, 0x2)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8)
mmap$auto(0x0, 0x44, 0x3, 0x11, r0, 0xc)
executing program 1:
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x4, 0x4, 0x9, 0x7)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
unshare$auto(0x40000080)
msgrcv$auto(0x71, 0x0, 0x0, 0x7fffffffffffffff, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5)
msgget$auto(0x0, 0x5)
msgsnd$auto(0x0, &(0x7f0000000080)={0x1, 0x6}, 0x8, 0x7)
msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1)
executing program 5:
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0)
syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0xa)
setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
ioperm$auto(0x7, 0x71, 0x863)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="2e453b2b86eb6609ac6b21859c95ef1c4960514a70c8613b16ee0a1d9d07d2fe7286fdd02c7145b82ccedbe325c98b019cf0fe4866fabde884a9e94061d34e65ee55d80c6cb3dc6493676626e1014705804fa60887b6f97ef95b7f74d7f7fb5cd2"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/msr/events/tsc\x00', 0x305501, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/213, 0xd5)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
bisect: testing without sub-chunk 2/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 9, 9, 9, 9, 19, 19, 18, 19, 19, 19]
detailed listing:
executing program 2:
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4400ae8f, 0x0)
executing program 2:
ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0xfffffffffffffff9)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
r0 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bpf$auto(0x12, 0x0, 0x26)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(r0, 0x7fffffffffffffff, 0x3)
truncate$auto(&(0x7f0000000040)='./file0\x00', 0x0)
openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0xc0a82, 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x580, 0x400, 0x2}]})
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "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"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})
executing program 4:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20048801)
ioperm$auto(0x400000ffff, 0xe, 0x1)
syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff)
writev$auto(0x3, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
statmount$auto(0x0, 0x0, 0xfffff7fffffffffa, 0x81)
read$auto(0xffffffffffffffff, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r1, 0x0, 0x3)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
bind$auto(r2, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80)
executing program 3:
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
socket(0x10, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2483, 0x0)
socket(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
open(0x0, 0x64842, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7)
executing program 4:
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2a19c3, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x581402, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r1, 0x0, 0x4004855)
syslog$auto(0x1, &(0x7f00000004c0)='-#:\x00[\xda\xe2\xc3L\xd30{Q\avP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\x90[\xec2\v\xca<`K-\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x03m\xec\\\xa6\xb9C\xd4\xf0@\x13\xba\xd21\xd3o\x11\xaau\x92\x181\x7f\x1da\xe7h:u\xd0\xa9\x04\tlcf\xf3\xb2.\xcfy\x19\x93)\xbf:\xc74\xb4\x06\x9d*\r\xcd\xf0\xd6eqv\xeb\xbbQ\xae\x8b\xdd \xe7\xcd\xfcV\x18i\xf1\xf4\xec\x92k\xe3Lv(A\x9d\xb4~\xd1[9\x84\x13B\xc6du\xab]F\x88\xfe\x88\xb4\x92\xcbk\xc32\xd0\x95\xe8\x97\xbe\x84wH\x16\x9755\xbe\xb8\xb3\xa7\x87GT=^\xc7 \xdb\xf3\xc9+k\xe1 \xa2\x06\xc6\x87[\xef\xfe\x12\xe0\x18\xe6\xbe\x1d\x98Y\xf9.L:\xf3\xb7\xdbc\x1a\xc1\xe6!k\x87\xa5\xe8z\xba\xb7\x13\xc7\x94E^\x80\x05\xfe\xfd\\\x88-g\xf4-e\xe4O\xfa\x87\xffi\x11\x8di\x02\xb9)hE\x83', 0xf6bb)
clone$auto(0x6, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port3/state\x00', 0x2400, 0x0)
read$auto(r2, &(0x7f00000002c0)='\x91\xf3\xc5\xe7\xf4\xfc\x8e\xf5\x1a14\x8a\xd9\x9a\x11\xb1\x10q\xdf\x8doi\xfc\x9f\x18\x9a\xd4\x1d\xf7\xc7\xf9\xf8\xa2\xa3\x10Cs]\x01\xfec~\x9c\x9e\xb2\xa5Io\x11\x83\xf2\x06\a\xc0\xca\xcd\x1fHl2\xf4a\x88`\xd8(\x0fR\xb4\xcb\xc9\xf4E\xe8\xdd\xec\x85\xfa\xdc\xd7\x0eZ\xb5\x8f\x06\x89Ss6\x04\x00'/100, 0x5ff15ff9)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x101002, 0x0)
clone$auto(0x1, 0x27, 0x0, 0x0, 0x2)
setresuid$auto(0x0, 0xee01, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000002c0), 0xa82, 0x0)
mq_timedsend$auto(0xffffffffffffffff, &(0x7f00000001c0)='@;\x94:IN\x18\xfa7Cl\x108\xcb#\x00\xa1Vq\xc9\x00\xa6=`<\x00\x00\xe7{\x87sN\xaa%\x10h\xc7\xebOi\x88\x8a#\xdf\x9a\xe9\x9f\x06\x0f\x18\x8b\x7f9%\xee\x1cT!\xae>\xf7E\xcc\x95\xf0\x01\x10Z\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x80, 0x9, 0x0)
shmget$auto(0x5, 0x7, 0xfffffff7)
madvise$auto(0x0, 0x200007, 0x19)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x25, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
read$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)=""/1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00')
setgroups$auto(0xe32, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1c)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
open(0x0, 0x22240, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket(0x15, 0x5, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)

program did not crash
bisect: split chunks (needed=true): <6>, <6>, <6>
bisect: split chunk #0 of len 6 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 9, 19, 19, 18, 19, 19, 19, 18, 19, 19, 18, 19, 19]
detailed listing:
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "8479b473fceeb4e7ac59025163c54c91ff7eb978ec1b70cad3eaad989b8e9e29479afef0673736eb4e9fca593b41dc5db2a290851fb7a0be7a6d392376a6fc8113abf06bff971dbe8cc76e3251a0841827f9378d866288fa08d2387d43b4554976235e2fafdab6e8cf98c64c1ebb6e01ca58f193727215ad82ceab5c1bd1266860d2a4e92d6084359a21f17caab6bddc074e57759c938a21dee1a7b0d70abff32778d5296eccf02cdb208cfb67684af28da02d3b8691ae91dbecc347103b397a1f7aec20d799c1f6b4b8c7ce7e50b73985ac77d4bb082959bb01d927b2cac524957f4a408931b10df09266c4b6c6330bd7bc3fd22d431a235ad59691c1645d9ac7416fca43f315df4fd90fba0bcab9d4d10d4ac0a4b568040050c52122a3706cd18ce93022b67f153de75b74ef3928b312eb1bb98b0caf68516f5817ca04e063f8f4f13f5b084f51205ec94cf80dadcfd33bfb2bc85a50ed73919f5e2a57f2a66431216f17af5bb5d455363da0a02e33db5d7ab9433d2cd3599f1b95908fe18a1faf5e4fa12b8446750f02a68ba73fe7b53b1ffac1215ec1abc0da0187b8a560c15ea780c8633751077fbfb04c6a11546379ad14e1dcff519ab82d74a35098b0b633fc4e95dcd078b9fd2fc6bcb589f5544f77dc327677f497b23e3c92868eefc2711ce290009e40448c95f850cca0c337939c01dc82bfed9d9b357553b8255f0957deaee54756527fc66114084c62a5898d6f6d9efd4a65c2313704a9ed671ca97618d5bc1eab87a142eee972949ff84076b81dc5283b014cf1715a979d072342233f67f652413584cc0f71b3f032383ce59585b0620f4ee895945e447c5d324888aef71a7d42fc4776e3022477e8f1241da90e8a877a2e9f82eed1cc3eca76ced94de2f07a287a7324f956d66dec932db0347d0741e9ffb4ae33794c87285392a5a61f92dfe0ea8819f32ba10cd0cc5af9ec2ee3515d40233ffd0364a2b48778c2a85def98c5cfe960054b3012516209a7c76fc1ab8a5347655a4b98e21eeac8f838a53cb6ab1215892ee8f25063953e1ae7b8751b217d21eb3c6c0210bfc73c0cbc0acdcdae9a0d29979ddd9daab2003792653f94d8323f420d724f41c6821f75ae46065ff4ff1e8affb6556027ecc9214ad4dde67866887a6aa0b338b935788bb7414e77362c94b2b52721cba8dfdf81f66caa11759b0b1b5dd0d5"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "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"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})
executing program 4:
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa})
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20048801)
ioperm$auto(0x400000ffff, 0xe, 0x1)
syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff)
writev$auto(0x3, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
statmount$auto(0x0, 0x0, 0xfffff7fffffffffa, 0x81)
read$auto(0xffffffffffffffff, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r1, 0x0, 0x3)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
bind$auto(r2, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80)
executing program 3:
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
socket(0x10, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2483, 0x0)
socket(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
open(0x0, 0x64842, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7)
executing program 4:
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2a19c3, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x581402, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r1, 0x0, 0x4004855)
syslog$auto(0x1, &(0x7f00000004c0)='-#:\x00[\xda\xe2\xc3L\xd30{Q\avP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\x90[\xec2\v\xca<`K-\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x03m\xec\\\xa6\xb9C\xd4\xf0@\x13\xba\xd21\xd3o\x11\xaau\x92\x181\x7f\x1da\xe7h:u\xd0\xa9\x04\tlcf\xf3\xb2.\xcfy\x19\x93)\xbf:\xc74\xb4\x06\x9d*\r\xcd\xf0\xd6eqv\xeb\xbbQ\xae\x8b\xdd \xe7\xcd\xfcV\x18i\xf1\xf4\xec\x92k\xe3Lv(A\x9d\xb4~\xd1[9\x84\x13B\xc6du\xab]F\x88\xfe\x88\xb4\x92\xcbk\xc32\xd0\x95\xe8\x97\xbe\x84wH\x16\x9755\xbe\xb8\xb3\xa7\x87GT=^\xc7 \xdb\xf3\xc9+k\xe1 \xa2\x06\xc6\x87[\xef\xfe\x12\xe0\x18\xe6\xbe\x1d\x98Y\xf9.L:\xf3\xb7\xdbc\x1a\xc1\xe6!k\x87\xa5\xe8z\xba\xb7\x13\xc7\x94E^\x80\x05\xfe\xfd\\\x88-g\xf4-e\xe4O\xfa\x87\xffi\x11\x8di\x02\xb9)hE\x83', 0xf6bb)
clone$auto(0x6, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port3/state\x00', 0x2400, 0x0)
read$auto(r2, &(0x7f00000002c0)='\x91\xf3\xc5\xe7\xf4\xfc\x8e\xf5\x1a14\x8a\xd9\x9a\x11\xb1\x10q\xdf\x8doi\xfc\x9f\x18\x9a\xd4\x1d\xf7\xc7\xf9\xf8\xa2\xa3\x10Cs]\x01\xfec~\x9c\x9e\xb2\xa5Io\x11\x83\xf2\x06\a\xc0\xca\xcd\x1fHl2\xf4a\x88`\xd8(\x0fR\xb4\xcb\xc9\xf4E\xe8\xdd\xec\x85\xfa\xdc\xd7\x0eZ\xb5\x8f\x06\x89Ss6\x04\x00'/100, 0x5ff15ff9)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x101002, 0x0)
clone$auto(0x1, 0x27, 0x0, 0x0, 0x2)
setresuid$auto(0x0, 0xee01, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000002c0), 0xa82, 0x0)
mq_timedsend$auto(0xffffffffffffffff, &(0x7f00000001c0)='@;\x94:IN\x18\xfa7Cl\x108\xcb#\x00\xa1Vq\xc9\x00\xa6=`<\x00\x00\xe7{\x87sN\xaa%\x10h\xc7\xebOi\x88\x8a#\xdf\x9a\xe9\x9f\x06\x0f\x18\x8b\x7f9%\xee\x1cT!\xae>\xf7E\xcc\x95\xf0\x01\x10Z\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x80, 0x9, 0x0)
shmget$auto(0x5, 0x7, 0xfffffff7)
madvise$auto(0x0, 0x200007, 0x19)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x25, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
read$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)=""/1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00')
setgroups$auto(0xe32, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1c)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
open(0x0, 0x22240, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket(0x15, 0x5, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
write$auto(0xffffffffffffffff, 0x0, 0x3f00)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
init_module$auto(0x0, 0xfffff, 0x0)
mkdir$auto(0x0, 0x8001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffd, 0x3, 0x4000000000de, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x568)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
move_pages$auto(0xffffffffffffffff, 0xf54, 0x0, 0x0, 0x0, 0x2)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8)
mmap$auto(0x0, 0x44, 0x3, 0x11, r0, 0xc)
executing program 1:
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x4, 0x4, 0x9, 0x7)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
unshare$auto(0x40000080)
msgrcv$auto(0x71, 0x0, 0x0, 0x7fffffffffffffff, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5)
msgget$auto(0x0, 0x5)
msgsnd$auto(0x0, &(0x7f0000000080)={0x1, 0x6}, 0x8, 0x7)
msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1)
executing program 5:
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0)
syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0xa)
setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
ioperm$auto(0x7, 0x71, 0x863)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="2e453b2b86eb6609ac6b21859c95ef1c4960514a70c8613b16ee0a1d9d07d2fe7286fdd02c7145b82ccedbe325c98b019cf0fe4866fabde884a9e94061d34e65ee55d80c6cb3dc6493676626e1014705804fa60887b6f97ef95b7f74d7f7fb5cd2"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/msr/events/tsc\x00', 0x305501, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/213, 0xd5)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 6 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 9, 19, 19, 19, 18, 19, 19, 18, 19, 19]
detailed listing:
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "a695e4b97e0e4eccc4099db715faf6de0af4f1dd61e992d9efa0e27aeacb3bc35bb7d0e5871ff08f8657930a5e7dfb2b87fa57fc8e8dd06e7ae2cd547c28771e8393b235fd7c6803dd3e073296597d9da492d58fe5f37bec9a1b6b1e6e05f596da119d711167f7699a46f2ff63490be6f3d7c9d325e8f3fac69b7856d2f08bb5a198b024f4e69ab01bad6c29fde19b88d714642340ea219ee7cd1e48533a9d3aed754e60e6fd852842100c92306f09c928d9371ad19752e0bd7d548cb15cc6923ce350e95ee503dad57c26bcf31d73ba6c54fbf0c8148c94c30e64d3c7ca2808e0462bb237be30dbb40164f4616c2f651d38b51486ea194ed6c32c048f5ffcf88e901bfaa559670572570a22863bf50a9a458d2430362c13f5000be9a887558d7b12183300a051892b31d56746f93ceeb38ef00dca1da4a1f195a57c9ff3dc3fa7e42c9f853d85eaebbddf14ca5f2b9c956b85d752a78af28b576ca6b4842b49db6e08a46933d56c66c396de43675bcc03c7a4cb2246e5feab8445a6ae96c2586e1b2b5c78cb0885d9a786016fc61c2cc172650b1de0147e0179ed8f68fae5ff2a8b9cdde5e9471037ac9c08a85986ce4d3fd85808ad6c46d3cc6353f78abaa1ac46c3ff130a3c8f9768906a16df45b8e29f798e03459e78f5f6f948a82f8a75ca2c1b38fd851f5a6171a971fc5e6705a58af82ce9ca246f708d33a3376fde7ea7e4bad58935301fadcac24a8e8f155259b57ce41bf02d44ebeabe929df0dba942537a06afe7787b8a2b2ca09b5daf775924f2f8b5f60dfc9ba1cce082a3ca12fe3f886bb97bf51d6733f3cd74ef93053ef8136d32ce90316d6d002c206265d131792404e5a1744ffc280e82a1aa63363ecd4b698dfc0cc50c493d80a97e2bb784d4ac2cea12d66b553e8ea424a9c14953c518baea493a8268a6fb0229e7e49fc073a7638785e3f2bc08ac84e9e5978992001a81d061d5e22ca3cb0b0d9eef61dfeab0eabf0016078dc5cbc69d"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x25, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
read$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)=""/1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00')
setgroups$auto(0xe32, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1c)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
open(0x0, 0x22240, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket(0x15, 0x5, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
write$auto(0xffffffffffffffff, 0x0, 0x3f00)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
init_module$auto(0x0, 0xfffff, 0x0)
mkdir$auto(0x0, 0x8001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffd, 0x3, 0x4000000000de, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x568)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
move_pages$auto(0xffffffffffffffff, 0xf54, 0x0, 0x0, 0x0, 0x2)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8)
mmap$auto(0x0, 0x44, 0x3, 0x11, r0, 0xc)
executing program 1:
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x4, 0x4, 0x9, 0x7)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
unshare$auto(0x40000080)
msgrcv$auto(0x71, 0x0, 0x0, 0x7fffffffffffffff, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5)
msgget$auto(0x0, 0x5)
msgsnd$auto(0x0, &(0x7f0000000080)={0x1, 0x6}, 0x8, 0x7)
msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1)
executing program 5:
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0)
syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0xa)
setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
ioperm$auto(0x7, 0x71, 0x863)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="2e453b2b86eb6609ac6b21859c95ef1c4960514a70c8613b16ee0a1d9d07d2fe7286fdd02c7145b82ccedbe325c98b019cf0fe4866fabde884a9e94061d34e65ee55d80c6cb3dc6493676626e1014705804fa60887b6f97ef95b7f74d7f7fb5cd2"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
iopl$auto(0x3)
ioperm$auto(0x5, 0x3432, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/msr/events/tsc\x00', 0x305501, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/213, 0xd5)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #2 of len 6 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 9, 19, 19, 19, 18, 19, 19]
detailed listing:
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "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"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x25, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
read$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)=""/1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00')
setgroups$auto(0xe32, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1c)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
open(0x0, 0x22240, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket(0x15, 0x5, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <3>, <3>, <3>
bisect: split chunk #0 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 19, 19, 19, 18, 19, 19]
detailed listing:
executing program 2:
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x561, 0xfffffe01, 0x35}]})
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x25, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
read$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)=""/1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00')
setgroups$auto(0xe32, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1c)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
open(0x0, 0x22240, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket(0x15, 0x5, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 19, 19, 19, 18, 19, 19]
detailed listing:
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "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"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 5:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x25, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
read$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)=""/1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00')
setgroups$auto(0xe32, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1c)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0)
open(0x0, 0x22240, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket(0x15, 0x5, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: split chunk #1 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 19, 18, 19, 19]
detailed listing:
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "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"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #2 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 19, 19]
detailed listing:
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "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"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 19, 18, 19]
detailed listing:
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000000)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8054)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x770, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_DATA={0xd2, 0x5, "0928378929f82cd94d6305225d79de91e7565a148e511c71cf83cf4370251b1ee4055d0eb81230c78d33fb2f8b6ec04cda4d56d8f3fe3c7526b90f0b0eefa2e456592953c7a4c6e5a0de089c9206947051343fb86e33606edd0ce8a7e82f66c4a65b205a553fc92822430374a54ebcda2ffdef119fde33a1fd8574c4073d3888ec706abb449616ead0931e2819d6fd12fd1cb69bf88e3b8faaa20e8e025e2bfd7f226f131913375b6b8c7d768bfd48eec52dfdd3ba5650e2e25ef4eee19c62d5a40a8afb7af51e9d419d245072fc"}, @IOAM6_ATTR_SC_DATA={0x26, 0x5, "858236b48aff23aecefb8e10534c3dc734861c7a9f199c262d58d9eda193700706fe"}, @IOAM6_ATTR_SC_DATA={0x361, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_DATA={0x2d1, 0x5, "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"}]}, 0x770}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>, <1>, <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 19, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fbdbdf25050000005300000049107b71764886c174cc96069a9d62cfceddc8864a9c8bdc447d56865891f0b630bca1040d0000000000001865914ff43913ad7f2e06c036653e4ab3eba634e0f7be9f4a76006da020d663a6ad24540b2ec5e4b192af74f34043"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4040890)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0x81)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #2 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 19, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>, <1, final>, <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #2 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 3 programs left: 

executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)


bisect: trying to concatenate
bisect: concatenate 3 entries
minimizing program #0 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 19, 19]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 19, 19]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 19, 19]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 19, 19]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 19, 19]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 19, 19]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 19, 19]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 19, 19]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 19, 19]
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
minimized 9 calls -> 7 calls
minimizing program #1 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
socket(0x10, 0x2, 0x4)
r1 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
socket(0x26, 0x800, 0x0)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r0 = socket(0x10, 0x2, 0x4)
r1 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
setsockopt$auto(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r0 = socket(0x10, 0x2, 0x4)
r1 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
unshare$auto(0x40000080)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 19]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 0:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 3:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
minimized 19 calls -> 18 calls
minimizing program #2 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 18]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 18]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 18]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 17]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 16]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r0, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 15]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r0, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 14]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r0, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4040aea0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 13]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r0, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x4040aea0, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 12]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r0, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 11]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r0, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 10]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r0, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 9]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r0, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 8]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 7]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x88)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 6]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 5]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 4]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 3]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
socket(0x2, 0x1, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 3]
detailed listing:
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
executing program 1:
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
executing program 0:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
minimized 19 calls -> 3 calls
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-setsockopt$auto-io_uring_setup$auto-unshare$auto-socket$nl_generic-socket-ioctl$sock_SIOCGIFINDEX-syz_open_procfs$namespace-sendmsg$auto_NFSD_CMD_THREADS_SET-write$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r4 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r4, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bisect: concatenation succeeded
found reproducer with 28 syscalls
minimizing guilty program
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-setsockopt$auto-io_uring_setup$auto-unshare$auto-socket$nl_generic-socket-ioctl$sock_SIOCGIFINDEX-syz_open_procfs$namespace-sendmsg$auto_NFSD_CMD_THREADS_SET-write$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-setsockopt$auto-io_uring_setup$auto-unshare$auto-socket$nl_generic-socket-ioctl$sock_SIOCGIFINDEX-syz_open_procfs$namespace-sendmsg$auto_NFSD_CMD_THREADS_SET-write$auto-mmap$auto-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-setsockopt$auto-io_uring_setup$auto-unshare$auto-socket$nl_generic-socket-ioctl$sock_SIOCGIFINDEX-syz_open_procfs$namespace-sendmsg$auto_NFSD_CMD_THREADS_SET-write$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
r4 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r4, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-setsockopt$auto-io_uring_setup$auto-unshare$auto-socket$nl_generic-socket-ioctl$sock_SIOCGIFINDEX-syz_open_procfs$namespace-sendmsg$auto_NFSD_CMD_THREADS_SET-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
socket(0x10, 0x2, 0x4)
r1 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-setsockopt$auto-io_uring_setup$auto-unshare$auto-socket$nl_generic-socket-ioctl$sock_SIOCGIFINDEX-syz_open_procfs$namespace-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
socket(0x10, 0x2, 0x4)
r1 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-setsockopt$auto-io_uring_setup$auto-unshare$auto-socket$nl_generic-socket-ioctl$sock_SIOCGIFINDEX-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
socket(0x10, 0x2, 0x4)
r1 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-setsockopt$auto-io_uring_setup$auto-unshare$auto-socket$nl_generic-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
socket(0x10, 0x2, 0x4)
r1 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x800, 0x0)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-setsockopt$auto-io_uring_setup$auto-unshare$auto-socket$nl_generic-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
socket(0x10, 0x2, 0x4)
r1 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-setsockopt$auto-io_uring_setup$auto-unshare$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
socket(0x10, 0x2, 0x4)
r1 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
unshare$auto(0xfff)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-setsockopt$auto-io_uring_setup$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
socket(0x10, 0x2, 0x4)
r1 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x4, 0x6fb3, 0x1, 0x9, 0xffffffffffffffff, [0x100, 0x200009, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0x7, 0x6, 0x0, 0x0, 0xf8b, 0x9, 0x837, 0x8}})
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-setsockopt$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
socket(0x10, 0x2, 0x4)
r1 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)
r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r2, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x11, 0x80003, 0x300)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004090)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x11, 0x80003, 0x300)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
socket(0x10, 0x2, 0x4)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-select$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
select$auto(0x200, &(0x7f0000000240)={[0x80000, 0x1, 0xdede1b7, 0x0, 0x3, 0x8000, 0x5, 0x8890, 0x81, 0x0, 0x7fffffff, 0x9, 0xa23, 0x9, 0x2, 0x4]}, 0x0, &(0x7f0000000340)={[0x6240000000000000, 0x6467, 0x15e, 0x1, 0x1000, 0x0, 0x7, 0x7f8, 0x61, 0x3, 0x75, 0x4, 0x101, 0x1a4a284f, 0x2c, 0xfffffffffffff801]}, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-setsockopt$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = socket(0x26, 0x800, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
socket(0x26, 0x800, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-syz_genetlink_get_family_id$auto_l2tp-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_tun_fops_tun-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-open-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-open-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-close_range$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-lsm_list_modules$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m2.133556162s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
simplifying C reproducer
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=2m2.133556162s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
reproducing took 4h34m49.309074549s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: vmalloc-out-of-bounds in skb_put_data include/linux/skbuff.h:2753 [inline]
BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
Read of size 140 at addr ffffc90000abe000 by task kworker/u9:1/5155

CPU: 1 UID: 0 PID: 5155 Comm: kworker/u9:1 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: hci0 hci_devcd_timeout
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xcd/0x680 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 check_region_inline mm/kasan/generic.c:183 [inline]
 kasan_check_range+0x100/0x1b0 mm/kasan/generic.c:189
 __asan_memcpy+0x23/0x60 mm/kasan/shadow.c:105
 skb_put_data include/linux/skbuff.h:2753 [inline]
 hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
 hci_devcd_timeout+0xb5/0x2e0 net/bluetooth/coredump.c:413
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402
 kthread+0x3c5/0x780 kernel/kthread.c:464
 ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

The buggy address ffffc90000abe000 belongs to a vmalloc virtual mapping
Memory state around the buggy address:
 ffffc90000abdf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000abdf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
>ffffc90000abe000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
                   ^
 ffffc90000abe080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000abe100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: vmalloc-out-of-bounds in skb_put_data include/linux/skbuff.h:2753 [inline]
BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
Read of size 140 at addr ffffc90000abe000 by task kworker/u9:1/5155

CPU: 1 UID: 0 PID: 5155 Comm: kworker/u9:1 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: hci0 hci_devcd_timeout
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xcd/0x680 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 check_region_inline mm/kasan/generic.c:183 [inline]
 kasan_check_range+0x100/0x1b0 mm/kasan/generic.c:189
 __asan_memcpy+0x23/0x60 mm/kasan/shadow.c:105
 skb_put_data include/linux/skbuff.h:2753 [inline]
 hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
 hci_devcd_timeout+0xb5/0x2e0 net/bluetooth/coredump.c:413
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402
 kthread+0x3c5/0x780 kernel/kthread.c:464
 ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

The buggy address ffffc90000abe000 belongs to a vmalloc virtual mapping
Memory state around the buggy address:
 ffffc90000abdf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000abdf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
>ffffc90000abe000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
                   ^
 ffffc90000abe080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000abe100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
==================================================================