Extracting prog: 4m28.483523151s Minimizing prog: 49m20.70445646s Simplifying prog options: 0s Extracting C: 51.497182242s Simplifying C: 30m9.952732636s extracting reproducer from 38 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-connect$auto-getsockopt$auto-setsockopt$auto_SO_RCVLOWAT-close_range$auto-mmap$auto-close_range$auto-socketpair$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-prctl$auto-clone$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) setsockopt$auto_SO_RCVLOWAT(r0, 0x3, 0x12, &(0x7f0000000000)='@\x00', 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x800000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) program did not crash single: failed to extract reproducer bisect: bisecting 38 programs with base timeout 30s testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 29, 27, 11, 30, 30, 30, 11, 30, 30, 30, 30, 40, 40, 30, 30, 30, 11, 1, 28, 30, 5, 11, 23, 1, 30, 5, 28, 30, 11, 14, 11, 3, 1, 30, 21, 21, 30] detailed listing: executing program 3: socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002ca4706b67dbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004814) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) executing program 3: close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/ifb0/queues/tx-0/byte_queue_limits/limit_max\x00', 0xb02, 0x0) madvise$auto_MADV_MERGEABLE(0x8, 0x2, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0xa, 0x801, 0x84) sysfs$auto(0x2, 0x100000000000036, 0x0) getsockopt$auto(r2, 0x84, 0x7b, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf140200000604000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NFC_CMD_SE_IO(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1ff}, @NFC_ATTR_LLC_SDP={0x19, 0x13, 0x0, 0x1, [@generic="cb346a0caa4f84987d5f21dbde98fce43a26e764b5"]}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x2c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdcdf250200000008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) executing program 3: mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001340)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_/file0\x00', 0x40000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000080)="b088056dcd5d86a53cb1a294bf75ef3ce389db344b65f6d494596aaf19478b6d2b38b99d2eeaadc214a229d5b017edffed772008db5166c53c908a237e0fd47ab1394992f0bafc8d2c663498ebf8204a62e3ec454efe2e013059094dd4895cdee2d718b61463578da821af1bf99f20f925e02b7d129a3b117f8a09118ecb", 0x176, 0x0, 0x9, 0x0, 0x1f, 0xfd}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, r4) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) connect$auto(0x3, 0x0, 0x55) close_range$auto(r1, r2, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) read$auto(r3, &(0x7f0000000040)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) executing program 3: mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x1, 0x84) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) socket(0x2, 0x3, 0xa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0xc) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) executing program 3: r0 = socket(0x2, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup7/event_count\x00', 0x1c2580, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/86, 0x56) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_SNDLOWAT(r2, 0x1, 0x13, &(0x7f0000003100)='\\?-@\x00', &(0x7f0000003140)=0x8) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', 0xa3182, 0x0) sendfile$auto(r3, r3, 0x0, 0xffffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0xcf) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) ioperm$auto(0x6, 0x18001, 0x80001) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shutdown$auto(0x200000003, 0x2) ioprio_set$auto(0x7, 0x0, 0xfff) unshare$auto(0x40000080) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x7ff, 0x1, 0x0, 0x1, 0x2) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) executing program 32: r0 = socket(0x2, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup7/event_count\x00', 0x1c2580, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/86, 0x56) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_SNDLOWAT(r2, 0x1, 0x13, &(0x7f0000003100)='\\?-@\x00', &(0x7f0000003140)=0x8) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', 0xa3182, 0x0) sendfile$auto(r3, r3, 0x0, 0xffffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0xcf) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) ioperm$auto(0x6, 0x18001, 0x80001) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shutdown$auto(0x200000003, 0x2) ioprio_set$auto(0x7, 0x0, 0xfff) unshare$auto(0x40000080) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x7ff, 0x1, 0x0, 0x1, 0x2) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) read$auto(r3, &(0x7f0000000040)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x34, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "8987fba55bf4997fbebe00"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x4) r2 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x0, 0x0) epoll_pwait$auto(r2, &(0x7f0000000280)={0x80, 0x1}, 0xfff, 0x5, &(0x7f00000002c0)={0x8}, 0x8) fsopen$auto(0x0, 0x1) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x1, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r3, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0x2c, 0x5, 0x40000100) ioperm$auto(0x4, 0x5ad0, 0x8) r4 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/projid_map\x00', 0x80000, 0x0) write$auto_proc_projid_map_operations_base(r4, &(0x7f00000001c0)="44f0e9fb071f55117653f04849d699bcacd062b62161bd72061e01c07579fd74f172", 0x22) modify_ldt$auto(0x1, 0x0, 0x10) r5 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r5, 0x0, 0x7ff, 0x400) socket(0x2a, 0x1, 0x40000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x90001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) executing program 0: close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0x2, 0x2) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async, rerun: 64) clock_gettime$auto(0x9, &(0x7f0000000000)={0x7, 0xb}) (async, rerun: 64) madvise$auto(0x110c230000, 0x1, 0x9) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x202a00, 0x0) (async) futex_wake$auto(&(0x7f00000001c0), 0x5, 0x3, 0xa) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) clone$auto(0xd2d2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) (async) r3 = gettid() process_vm_readv$auto(r3, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) readahead$auto(r5, 0xeca9, 0x6) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x174, 0x400, 0x2}]}) (async) mmap$auto(0xad, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x900, 0x0) mmap$auto(0x0, 0x580f, 0x1, 0x8000000008011, 0x3, 0x0) (async, rerun: 64) ioctl$auto_XFS_IOC_GET_RESBLKS(r2, 0x80105873, &(0x7f00000000c0)={0x3, 0x2}) (rerun: 64) executing program 0: r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/irq/2/wakeup\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x4000000) mmap$auto(0x0, 0x22009, 0x4000000000df, 0xeb1, 0x401, 0x1) socket(0xa, 0x3, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptyc6/power/runtime_status\x00', 0x4e5743, 0x0) read$auto(r2, &(0x7f0000000300)='/\x02\x00\x00\x00\xdb\xb7\'6\x87\xad\xfauj\xb1\xbc+\x96Gh\x84*\xdc1\xae\xd7\xa7-vh\xe7K\x82q\xad\xf2\xc3\x03\xf6\xbb\xb6\x00\xabG\xf5\vE\xf0\x1f\xca\xc5\xbfmBL\x14\xd5\xd2W/i%Wp\x8c\xe7x?L\xad\xd1\xdb\x8cF\xf8u\xb5V\xf0UI\x1d\xe8\x12\xc7Mf\xa6\xa1\xad\x81z\x8361\xb0gfFq]`x\xb6\x10\x97\nh\xd6\x01\xa7a\xcfC\xc4\'$\xffX\xc6&\x81\xc80\xf88\xb2\x85\x0f0\x90\xc1!!|7\xfc\xf0\x01\x8cc\xad\x13\x95\xf7p#\xca\x81C\x02g\xc6\v\xf4\xb3\xcci!\x81\xb7W\xec\xf7\xef\xafs`\xb0\x81\x1aS!;p\x98\v\x82?{\xe9\xa3', 0x100000001) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffffffffffff7) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x48b41, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x20c00, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mincore$auto(0x1000, 0x8001, 0x0) read$auto(r0, 0x0, 0x410) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/ip6gre0/mc_forwarding\x00', 0x1400c1, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bus/usb/004/001\x00', 0x282901, 0x0) executing program 0: unshare$auto(0x40000080) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0xffffffffffffffff, 0x8a, 0xffbffffc, 0x0, 0x80000000) socket(0x10, 0x2, 0x7fffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x2, 0x80000, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0) read$auto(0xc8, 0x0, 0x200) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) r1 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r1, 0x0, 0x2) inotify_add_watch$auto(r1, 0x0, 0x20000e6e) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unlinkat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x3800) (async) unlinkat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x3800) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0xe3, 0xeb1, 0xffffffffffffffff, 0x8003) (async) mmap$auto(0x0, 0x9, 0xe3, 0xeb1, 0xffffffffffffffff, 0x8003) io_uring_setup$auto(0x1, 0x0) (async) r0 = io_uring_setup$auto(0x1, 0x0) socket(0x11, 0x80003, 0x300) (async) socket(0x11, 0x80003, 0x300) setsockopt$auto(0xffffffffffffffff, 0xffffffff, 0x1, 0x0, 0x6c) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) prctl$auto_PR_SET_MM_ENV_START(0x5, 0xa, 0x0, 0x89, 0x10) close_range$auto(0x2, r0, 0x0) close_range$auto(r0, 0x8, 0x0) mmap$auto(0xfffffffffffffff9, 0x400000000004, 0x5, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0x29, 0x2, 0x0) ioctl$auto(r1, 0x89e2, 0x38) close_range$auto(0x0, 0xfffffffffffff000, 0x0) migrate_pages$auto(0x0, 0x7f, &(0x7f00000000c0)=0x40, &(0x7f0000000240)=0x1) fanotify_init$auto(0x5, 0x800) (async) fanotify_init$auto(0x5, 0x800) r2 = pipe2$auto(0x0, 0x80) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$auto_RTC_PARAM_GET(r3, 0x40187013, &(0x7f0000000100)={0x1, @ptr=0x10000, 0x1}) (async) ioctl$auto_RTC_PARAM_GET(r3, 0x40187013, &(0x7f0000000100)={0x1, @ptr=0x10000, 0x1}) ioctl$auto(0x1, 0x5761, 0x4) (async) ioctl$auto(0x1, 0x5761, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./cgroup\x00', 0x282a43, 0x55) fcntl$auto(r4, 0x403, 0x0) close_range$auto(0x2, 0xa, 0x0) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x342, 0x0) socket(0x1e, 0x1, 0x0) sigaltstack$auto(0x0, 0x0) sendto$auto(r2, 0x0, 0xfdef, 0x7, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x2}}, 0x8000020) (async) sendto$auto(r2, 0x0, 0xfdef, 0x7, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x2}}, 0x8000020) executing program 33: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unlinkat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x3800) (async) unlinkat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x3800) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0xe3, 0xeb1, 0xffffffffffffffff, 0x8003) (async) mmap$auto(0x0, 0x9, 0xe3, 0xeb1, 0xffffffffffffffff, 0x8003) io_uring_setup$auto(0x1, 0x0) (async) r0 = io_uring_setup$auto(0x1, 0x0) socket(0x11, 0x80003, 0x300) (async) socket(0x11, 0x80003, 0x300) setsockopt$auto(0xffffffffffffffff, 0xffffffff, 0x1, 0x0, 0x6c) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) prctl$auto_PR_SET_MM_ENV_START(0x5, 0xa, 0x0, 0x89, 0x10) close_range$auto(0x2, r0, 0x0) close_range$auto(r0, 0x8, 0x0) mmap$auto(0xfffffffffffffff9, 0x400000000004, 0x5, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0x29, 0x2, 0x0) ioctl$auto(r1, 0x89e2, 0x38) close_range$auto(0x0, 0xfffffffffffff000, 0x0) migrate_pages$auto(0x0, 0x7f, &(0x7f00000000c0)=0x40, &(0x7f0000000240)=0x1) fanotify_init$auto(0x5, 0x800) (async) fanotify_init$auto(0x5, 0x800) r2 = pipe2$auto(0x0, 0x80) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$auto_RTC_PARAM_GET(r3, 0x40187013, &(0x7f0000000100)={0x1, @ptr=0x10000, 0x1}) (async) ioctl$auto_RTC_PARAM_GET(r3, 0x40187013, &(0x7f0000000100)={0x1, @ptr=0x10000, 0x1}) ioctl$auto(0x1, 0x5761, 0x4) (async) ioctl$auto(0x1, 0x5761, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./cgroup\x00', 0x282a43, 0x55) fcntl$auto(r4, 0x403, 0x0) close_range$auto(0x2, 0xa, 0x0) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x342, 0x0) socket(0x1e, 0x1, 0x0) sigaltstack$auto(0x0, 0x0) sendto$auto(r2, 0x0, 0xfdef, 0x7, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x2}}, 0x8000020) (async) sendto$auto(r2, 0x0, 0xfdef, 0x7, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x2}}, 0x8000020) executing program 4: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0x14f602, 0x0) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x4909b6fb, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x11, 0x3, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x1f, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x20008000) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x0, 0x810004, 0xffb, 0xa000000008011, 0x3, 0x8000) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video63\x00', 0x80800, 0x0) read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f00000001c0)=""/191, 0x1f8) r5 = socket(0xa, 0x3, 0x3a) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) getsockopt$auto(r5, 0x29, 0x36, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r6) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000ffff000100000004000180072e0180"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0xc) socket(0x11, 0x800, 0x101) socket$nl_generic(0x10, 0x3, 0x10) executing program 4: openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r0 = socket(0xa, 0x1, 0x100) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) ioperm$auto(0x7, 0x5ad2, 0x8) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x1e\x17\x92B&\x97P\f8P\xf2\xc2\xa77\xa0i\xf0v\x8aS\x97\x1d\b9\x96B\xf7\x95\xfd\x9b\x9a>\xfb\xd4\xc2a;t_\xa5\xc0\xc9\xb7\x87\x01B\x18T\xfb\xf6\xa1\xbd\x1a6\xc9&\xf91\xa2\t\x8c\xbb\xe6p\xd8\xdcDE?nc\xeb\x10*\xb0\xd0\x03\xed\xf8Q\xd6\xba\x01\x99\x9cZa\x99\x06\x1f\x8c\xcf{\xc6\xee\x1c3\x1f\xfb7n\xc9w\x98Q', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) process_mrelease$auto(0xffffffffffffffff, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x200000000003}, 0x3) mmap$auto(0x0, 0x40000c, 0x0, 0x11, r3, 0x7ffc) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x3) r4 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) ioctl$auto_MON_IOCX_GET(r4, 0x40189206, &(0x7f00000003c0)={&(0x7f0000000280)={0x8, 0x4, 0x4, 0xce, 0x80, 0x1, 0x48, 0xf9, 0xffffffffffffffff, 0xe528, 0x2, 0x5, 0x5, @iso={0x800, 0x5}, 0x5, 0x1, 0x5, 0x8001}, &(0x7f0000000540)="4c0917578688573fd8149570c526591ad12457dc749e15375b7bebbf6a0b1494c78051640e0d2bfbba08ee5a5ba5abfb278386227cabce8d59ee51db6784230b8682ee6c662505c378da544c2969bcad03f81b31a7c215b53ce32730f3534539d46df9615939284060177bfcde8ddedfe5d7a0c3ed04430342bdef0df30b50aad699d3541ffc8e03c7fb0a90a58d9958edd25b9455468e1b22a22f667d24275857aefe63d45080260458b76548737163af063a47e9499e91ea8facc1292ee3d820cedfd5d88d04441fb53e61eb00000000000080000000", 0xc}) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r5 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r5, 0x29, 0x4e, &(0x7f00000000c0)='\x15!\xa8^J/\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xad?\xe9>\x90\xb4\xcd#\n)\x7fU\x85\x15\x95<\xa2\x87g\x82,\xb9\x7f\xc8\x02\xbc\x12\x14\x17+F9\xa9\x89\xb4_Ki\xbc\xdc[\xef\x16\xc1\x99\xfe\x0f\xbe\xfdJ|<\xaa\xac\xdc\xad\xd2p\xcc\xa0\x9e\xda1\xfdb\xf1~T\xc4\xf1f\x17\x86N\xa5{\xc9\xaeM(\x1aF]\xa3', 0x10000112) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e24, @loopback}, 0xb) executing program 4: r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xf, 0x800, 0x8) ioperm$auto(0x7, 0x5ad2, 0xc) r1 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/projid_map\x00', 0x80000, 0x0) write$auto_proc_projid_map_operations_base(r1, &(0x7f0000000080)="44f0e9fbc01fd062b62161bd72061e01c07586fd74bf853907a01ebd1a3cbc31b4801ebfcbaafda55783688acd1fc6f172", 0x31) modify_ldt$auto(0x1, 0x0, 0x10) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) socket(0x2a, 0x1, 0x40000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x7f, 0x1, 0x0, 0x100000000000001, 0x870d) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.5/usb6/power/autosuspend_delay_ms\x00', 0x88b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x202, 0xa, 0xd, 0x6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x8, 0x0, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x62, 0x800000008000001f, 0x7, 0xdb17, 0x9, 0x2, 0x8]}, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) sendfile$auto(r6, r6, 0x0, 0x0) mmap$auto(0xc, 0x4, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) setsockopt$auto_SO_INCOMING_CPU(r2, 0x72, 0x31, &(0x7f0000000040)='\x00', 0x81) close_range$auto(r4, 0x8, 0x0) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) read$auto(r3, &(0x7f0000000040)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf2503000000080003000002000006000700008000000800", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) executing program 1: connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x9) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r0, 0x5403, 0x3) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'caif0\x00', 0x0}) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) connect$auto(r1, &(0x7f0000000080)=@xdp={0x2c, 0x8, r2, 0x13}, 0x3) socket(0x15, 0x5, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2a, 0x2, 0x1) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sg0\x00', 0x418000, 0x0) getitimer$auto(0x2, &(0x7f0000000040)={{0x8, 0x8001}, {0x0, 0x5}}) ioctl$auto_SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2, &(0x7f00000002c0)="a3ed6f6f68d0c6c50a5921fd30c0b1cb4b65ce2686bb4643fa0b8441b754d8b0de895b6c72af8de1d04b9a139ae0b7cda50f529086d05128e263d381abbd39dec8432e216e901d2baa9372b416c7d0b10d979cd5e5e3b604f974999cb41bd6812310a9075b20953e0b09fd660aa22a7d208618340957ae8a334456ee5a96a2f7ad8e1286cb610f1c6d2e1f4d") connect$auto(r5, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) r7 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r7, 0x720, 0x0) socket(0xa, 0x3, 0x3a) sendmsg$auto_NL80211_CMD_GET_MPATH(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x61, 0x80, "810c58b0623ddb6084d748231f1ea07507dfb2a1aafbf57fd31b2cfa1cd328c962ae7c2cce9f91eb529be65fe5d65c09abf2aca6a88d933a605f56b2cd79563212b8be962b5989bac23c721c35321a6c66b638778b43922b4a9ddb38de"}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x566) executing program 4: mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) recvmmsg$auto(0x3, 0x0, 0x9, 0x47, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff94, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd27, 0x25df9bfc}, 0x14}, 0x1, 0x0, 0x0, 0x20014}, 0x4040084) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) setsockopt$auto(r0, 0x3, 0x3, &(0x7f0000000000)='\'\x00', 0x80000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) setgroups$auto(0xe32, 0x0) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x1, 0x0) listen$auto(0x3, 0x81) getsockopt$auto(r3, 0x6, 0x26, 0x0, &(0x7f00000000c0)=0x28000) mmap$auto(0x3, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) shutdown$auto(0x200000003, 0x2) executing program 5: statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1258, 0xd77, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9a89, 0x5, 0x80003, 0x4, 0x1fffffffffff, 0xb4, 0x3, 0x2, 0x10007, 0x80, 0x0, 0x0, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xea4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000]}, 0x1fe, 0xd) r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x11ec, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x78, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x71, 0x1, "050a5a0e49eef31a3ffa149a46f1fc79a0cc4e7aeb27d593ba33e3bf157a5e02fabe1132083b67830ed6c48813ea2befa20e326fdb5df9d0476499f5dba11f980477cad6f400ab7541e4e9a042140039f6b5eeec7870969638b7d5ca3d13beb0c9f76a6689844841cafabbeecf"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x60, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x18, 0x2, '/dev/mapper/control\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x18, 0x2, '/dev/mapper/control\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x18, 0x2, '/dev/mapper/control\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xb, 0x2, '\')\'&{\'\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x1100, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x18, 0x2, '/dev/mapper/control\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x18, 0x2, '/dev/mapper/control\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x18, 0x2, '/dev/mapper/control\x00'}, @NFSD_A_SOCK_ADDR={0xad, 0x1, "6cd5df44016fe744cdd29877d09ecf5b8ca2c5fe73d1eb8dd885321a3ca1a04866e693f0c264015ea315d64dc93387af1f6d03768b8d665c9f5d88b2472fd3c7657cf8d740984b3e20bf894bbcd114ee79681cad649824471d3b088c88f283055717d07d737f7d44b42bfb7cfde92a1fa2a3ba6c02043e26ed8405e64cd864047a002c30747f93ee0a0a843794305c544be815641d0d4b3eeb0be64f14894ea7ac7e832c46f5f9f539"}, @NFSD_A_SOCK_ADDR={0x1004, 0x1, "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"}]}]}, 0x11ec}, 0x1, 0x0, 0x0, 0x804}, 0x4000044) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) read$auto(r3, &(0x7f0000000040)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf2503000000080003000002000006000700008000000800", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) executing program 5: mmap$auto(0x0, 0x2, 0x9, 0x5a5b, 0xffffffffffffffff, 0x8000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) rt_sigaction$auto(0x2, &(0x7f0000000380)={&(0x7f0000000040)=0x0, 0x800000001000009, 0x0, {0x7a}}, 0x0, 0x8) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@sco, 0x6b) socket(0x2, 0x2, 0x3a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x201, 0x2, 0x13, 0x1) setsockopt$auto(0x3, 0x0, 0xb, 0x0, 0x17) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r0, &(0x7f0000000240)=""/177, 0xb1) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) executing program 2: connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) executing program 1: mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xb57e, r0, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cpu/0/msr\x00', 0x216fc2, 0x0) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) lsm_set_self_attr$auto(0xb, &(0x7f0000000200)={0x7, 0x7, 0xffffffffffff7fff, 0x91, "ca51d0d1437ca5d268711c0d334d2dee1271c478464a66fef0023dc3dbfe5b7b02542d35d1d071801a2fc42073371e1620398409e4cc3138dca08d7a0989984870b35d1b9150470a1727982c2b46ed426feec24b689d46fc808a202aba95bd2ca69657bb2a27c031ba1e9f73ac8180f3652bab73569b0ad09b81abb509792ce1416be44d2dd56eadaaa669e6f245e59e9d"}, 0x5, 0x1) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x9, 0x80}, "6a034a07c7b8edb8fc3b39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x6}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ksm_stat\x00', 0x2, 0x0) read$auto_proc_single_file_operations_base(r2, &(0x7f0000000040)=""/228, 0xe4) unshare$auto(0x40000080) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) msync$auto(0x7, 0x4, 0x4) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r3, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000002600)) executing program 2: r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000580)={0x80000006, 0x0, 0xd12b, 0xfffffffd, 0x200a}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x115400, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0xaa, 0x9, 0x1, 0x10000005, "e7227115127a1e8f00"}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) executing program 2: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x9) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r0, 0x5403, 0x3) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'caif0\x00', 0x0}) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic="1a"]}]}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) connect$auto(r1, &(0x7f0000000080)=@xdp={0x2c, 0x8, r2, 0x13}, 0x3) socket(0x15, 0x5, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2a, 0x2, 0x1) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sg0\x00', 0x418000, 0x0) getitimer$auto(0x2, &(0x7f0000000040)={{0x8, 0x8001}, {0x0, 0x5}}) ioctl$auto_SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2, &(0x7f00000002c0)="a3ed6f6f68d0c6c50a5921fd30c0b1cb4b65ce2686bb4643fa0b8441b754d8b0de895b6c72af8de1d04b9a139ae0b7cda50f529086d05128e263d381abbd39dec8432e216e901d2baa9372b416c7d0b10d979cd5e5e3b604f974999cb41bd6812310a9075b20953e0b09fd660aa22a7d208618340957ae8a334456ee5a96a2f7ad8e1286cb610f1c6d2e1f4d") connect$auto(r5, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) r7 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r7, 0x720, 0x0) socket(0xa, 0x3, 0x3a) sendmsg$auto_NL80211_CMD_GET_MPATH(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x61, 0x80, "810c58b0623ddb6084d748231f1ea07507dfb2a1aafbf57fd31b2cfa1cd328c962ae7c2cce9f91eb529be65fe5d65c09abf2aca6a88d933a605f56b2cd79563212b8be962b5989bac23c721c35321a6c66b638778b43922b4a9ddb38de"}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x566) executing program 2: select$auto(0x9, &(0x7f00000001c0)={[0x4, 0x7ff, 0x6, 0x5, 0x227ddfde, 0x3, 0x2, 0x3, 0x1, 0x6546, 0xd, 0x4, 0x4, 0x8001, 0x3, 0x8000]}, &(0x7f0000000240)={[0x1, 0x70e68720, 0xffff, 0x9a5, 0x6, 0x9, 0x6, 0x2510a364, 0x800, 0x3, 0x3, 0x3ff, 0x6, 0x600000000, 0x8, 0x6]}, &(0x7f0000000440)={[0x2, 0x8001, 0x4, 0x100000000000000, 0x5b5, 0x9, 0x7fff, 0x100, 0x401, 0xc000000000, 0xfffffffffffffffd, 0x3, 0x101, 0xf8, 0x8, 0xb76]}, &(0x7f00000003c0)={0x0, 0x3ce}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x0, 0x8) socket(0x2, 0x6, 0x106) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers_autoprobe\x00', 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000500)=""/4096, 0x1000) socket(0x21, 0x2, 0x0) prctl$auto(0x41, 0x3, 0x0, 0xfffffffffffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x801, 0x0) socket(0x10, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@llc={0x1a, 0x100, 0x6, 0x92, 0x8, 0x9, @random="b8c8bb06799e"}, 0x5) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/bonding/bond0\x00', 0x18b000, 0x0) pread64$auto(r3, &(0x7f0000000000)='/proc-NesH\x1fk\xdd\x00\x00\x00\x00\x88\x00\x00\x00\x00\x00:\x19\xf4\xe2\xb7:\x81\xf8\xedl\x9d\x9a\'\xf8D,\xc0x\x1d\xf5JE\xcd7\xc3^\xbc2\xc7\xbf\xe5\x7f\xb93 \xcd${!\x9a`\x96\x86\x96D|\xf0H\x8c\x05:\xae\xa6\x88x@\x97E\x92f\xe3h\x05\x0f9\x9e\v\t\x18\x8b\xec\xd7\xe80x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) read$auto(r3, &(0x7f0000000040)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250300000008000300000200000600070000800000080002", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r0) rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') executing program 2: connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) executing program 1: mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x8001, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram7/queue/chunk_sectors\x00', 0x80800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/187, 0xbb) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, 0x0, 0x810) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x5}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) executing program 4: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) setsockopt$auto_SO_RCVLOWAT(r0, 0x3, 0x12, &(0x7f0000000000)='@\x00', 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x800000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) executing program 5: capset$auto(0x0, 0x0) mmap$auto(0x3, 0x20009, 0x11000, 0xeb1, 0x401, 0x8000) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x0, 0x1, 0xa, 0x6, 0x5, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b67, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$auto(0x3, 0x541b, 0x38) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x13fffffd, 0x2, 0xfffffffe, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x7, 0x0, 0x6, 0x0, 0x85, 0x1001}, 0x5}, 0x2, 0x100) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) pread64$auto(r2, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfaae, 0x468, 0x9, 0x2, 0x8, 0x3, 0x4, 0x1ff, 0x5, 0xb5, 0x4, 0x806, 0xd9ee}, 0xa3) writev$auto(r1, &(0x7f0000000240)={&(0x7f0000000800)="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", 0x7}, 0xfffffffffffffffa) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) executing program 2: mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x8001, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram7/queue/chunk_sectors\x00', 0x80800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/187, 0xbb) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x810) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x5}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-connect$auto-getsockopt$auto-setsockopt$auto_SO_RCVLOWAT-close_range$auto-mmap$auto-close_range$auto-socketpair$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-prctl$auto-clone$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) setsockopt$auto_SO_RCVLOWAT(r0, 0x3, 0x12, &(0x7f0000000000)='@\x00', 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x800000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump single: successfully extracted reproducer found reproducer with 21 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-connect$auto-getsockopt$auto-setsockopt$auto_SO_RCVLOWAT-close_range$auto-mmap$auto-close_range$auto-socketpair$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-prctl$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) setsockopt$auto_SO_RCVLOWAT(r0, 0x3, 0x12, &(0x7f0000000000)='@\x00', 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x800000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-connect$auto-getsockopt$auto-setsockopt$auto_SO_RCVLOWAT-close_range$auto-mmap$auto-close_range$auto-socketpair$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) setsockopt$auto_SO_RCVLOWAT(r0, 0x3, 0x12, &(0x7f0000000000)='@\x00', 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x800000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-connect$auto-getsockopt$auto-setsockopt$auto_SO_RCVLOWAT-close_range$auto-mmap$auto-close_range$auto-socketpair$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) setsockopt$auto_SO_RCVLOWAT(r0, 0x3, 0x12, &(0x7f0000000000)='@\x00', 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x800000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-connect$auto-getsockopt$auto-setsockopt$auto_SO_RCVLOWAT-close_range$auto-mmap$auto-close_range$auto-socketpair$auto-clone$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) setsockopt$auto_SO_RCVLOWAT(r0, 0x3, 0x12, &(0x7f0000000000)='@\x00', 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x800000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) write$auto(0xffffffffffffffff, 0x0, 0xe) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-connect$auto-getsockopt$auto-setsockopt$auto_SO_RCVLOWAT-close_range$auto-mmap$auto-close_range$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) setsockopt$auto_SO_RCVLOWAT(r0, 0x3, 0x12, &(0x7f0000000000)='@\x00', 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x800000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-connect$auto-getsockopt$auto-setsockopt$auto_SO_RCVLOWAT-close_range$auto-mmap$auto-close_range$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) setsockopt$auto_SO_RCVLOWAT(r0, 0x3, 0x12, &(0x7f0000000000)='@\x00', 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x800000) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-connect$auto-getsockopt$auto-setsockopt$auto_SO_RCVLOWAT-close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) setsockopt$auto_SO_RCVLOWAT(r0, 0x3, 0x12, &(0x7f0000000000)='@\x00', 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-connect$auto-getsockopt$auto-setsockopt$auto_SO_RCVLOWAT-close_range$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) setsockopt$auto_SO_RCVLOWAT(r0, 0x3, 0x12, &(0x7f0000000000)='@\x00', 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-connect$auto-getsockopt$auto-setsockopt$auto_SO_RCVLOWAT-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) setsockopt$auto_SO_RCVLOWAT(r0, 0x3, 0x12, &(0x7f0000000000)='@\x00', 0xc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-connect$auto-getsockopt$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-connect$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-socket-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-open-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) open(0x0, 0x163340, 0x2a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-openat2$dir-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mount$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mkdir$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-socketpair$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-kexec_load$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto detailed listing: executing program 0: close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(r0, 0x0, 0xe) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program did not crash testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program did not crash testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump reproducing took 1h24m50.637910886s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: vmalloc-out-of-bounds in skb_put_data include/linux/skbuff.h:2753 [inline] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258 Read of size 140 at addr ffffc90000abe000 by task kworker/u9:2/5833 CPU: 0 UID: 0 PID: 5833 Comm: kworker/u9:2 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: hci0 hci_devcd_timeout Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:408 [inline] print_report+0xcd/0x680 mm/kasan/report.c:521 kasan_report+0xe0/0x110 mm/kasan/report.c:634 check_region_inline mm/kasan/generic.c:183 [inline] kasan_check_range+0x100/0x1b0 mm/kasan/generic.c:189 __asan_memcpy+0x23/0x60 mm/kasan/shadow.c:105 skb_put_data include/linux/skbuff.h:2753 [inline] hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258 hci_devcd_timeout+0xb5/0x2e0 net/bluetooth/coredump.c:413 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3321 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address ffffc90000abe000 belongs to a vmalloc virtual mapping Memory state around the buggy address: ffffc90000abdf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc90000abdf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 >ffffc90000abe000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ^ ffffc90000abe080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc90000abe100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: vmalloc-out-of-bounds in skb_put_data include/linux/skbuff.h:2753 [inline] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258 Read of size 140 at addr ffffc90000abe000 by task kworker/u9:2/5833 CPU: 0 UID: 0 PID: 5833 Comm: kworker/u9:2 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: hci0 hci_devcd_timeout Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:408 [inline] print_report+0xcd/0x680 mm/kasan/report.c:521 kasan_report+0xe0/0x110 mm/kasan/report.c:634 check_region_inline mm/kasan/generic.c:183 [inline] kasan_check_range+0x100/0x1b0 mm/kasan/generic.c:189 __asan_memcpy+0x23/0x60 mm/kasan/shadow.c:105 skb_put_data include/linux/skbuff.h:2753 [inline] hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258 hci_devcd_timeout+0xb5/0x2e0 net/bluetooth/coredump.c:413 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3321 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address ffffc90000abe000 belongs to a vmalloc virtual mapping Memory state around the buggy address: ffffc90000abdf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc90000abdf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 >ffffc90000abe000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ^ ffffc90000abe080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc90000abe100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ==================================================================